[cisco-voip] Deploying 7961 Phones Remotely with ASA5500?

[Ryan Ratliff]

Very cool I didn't know the ASA was that smart.

-Ryan

On May 7, 2009, at 10:47 AM, Jason Burns wrote:

Ryan,

Even though the IP Phone would be embedding it's own private IP  
address inside of SCCP ORCAck messages, the ASA Phone Proxy feature  
would know the message was really sourced from the public IP. The  
Phone Proxy would handle that, so that the Linksys doesn't have to  
worry about SCCP fixup.

One important caveat is that with PAT, not al homel routers support a  
TFTP Client connection like the phone tries to do to the ASA Phone  
Proxy.

TFTP is destined to UDP port 69 for the initial Read Request, then a  
new connection on an ephemeral port is negotiated, and not all home  
routers know to look for this to open the new UDP Port.

If you run into TFTP problems you will have to configure the IP  
Phone's IP to be in the DMZ so that all ports get forwarded to the IP  
Phone.