<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-family: Arial, sans-serif;">
<div style="font-size: 13px;">
<div>Joe, thanks for the recommendation. Here’s what we experienced:</div>
<div><br>
</div>
<div>We set the TFTP address to the local server and restarted the phone. It sat on registering and never changed or prompted for login. We looked and noticed we could now tick on the box to enable VPN and that prompted for a username and password. When we
logged in we received an error message indicating an invalid certificate.</div>
<div><br>
</div>
<div>We uploaded the certificate from ASA to CUCM prior to configuring the phones. Since we’re using username and password we didn’t import any CUCM certs to the ASA, do we still need to do that even if we aren’t using certificate authentication?</div>
<div><br>
</div>
<div>Thanks!</div>
<div>Hank</div>
<div><br>
</div>
</div>
<div style="font-size: 13px;"><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-size: 12pt; font-family: Calibri; text-align: left; color: black; border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0in 0in; border-top-color: rgb(181, 196, 223);">
<span style="font-weight:bold">From: </span>Joe Martini<br>
<span style="font-weight:bold">Date: </span>Wednesday, September 9, 2015 at 20:07<br>
<span style="font-weight:bold">To: </span>"Hank.Keleher"<br>
<span style="font-weight:bold">Cc: </span>"<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>"<br>
<span style="font-weight:bold">Subject: </span>Re: [cisco-voip] Cisco 8841 VPN phone issue<br>
</div>
<div style="font-size: 13px;"><br>
</div>
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
The actual internal TFTP server address. The phone will use it after the VPN connection is established to download its configuration file.
<div class="" style="font-size: 13px;"><br class="">
</div>
<div class="">Joe<br class="">
<div class=""><br class="">
<div>
<div class="" style="font-size: 13px;">On Sep 9, 2015, at 8:02 PM, Hank Keleher (AM) <<a href="mailto:hank.keleher@dimensiondata.com" class="">hank.keleher@dimensiondata.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-family: Arial, sans-serif;" class="">
<div class="">
<div class="">
<div class="" style="font-size: 13px;">What should the TFTP address be set to for the remote VPN phone? The actual internal TFTP address or the VPN head end?</div>
<div class="" style="font-size: 13px;"><br class="">
</div>
<div class="" style="font-size: 13px;">Thanks!</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</span>
<div>Hank</div>
<span id="OLK_SRC_BODY_SECTION">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">
<div class="">
<div>
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-family: Arial, sans-serif;" class="">
<div class="">
<div class="">
<div class="">
<div id="" class="">
<div class="" style="font-size: 13px;">
<div class="">
<div style="font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt;" class="">
<br class="">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="" style="font-size: 13px;"><br class="">
</div>
<span id="OLK_SRC_BODY_SECTION" class="" style="font-size: 13px;">
<div style="font-family: Calibri; font-size: 12pt; text-align: left; border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0in 0in; border-top-color: rgb(181, 196, 223);" class="">
<span style="font-weight:bold" class="">From: </span>Joe Martini<br class="">
<span style="font-weight:bold" class="">Date: </span>Wednesday, September 9, 2015 at 19:57<br class="">
<span style="font-weight:bold" class="">To: </span>"Hank.Keleher"<br class="">
<span style="font-weight:bold" class="">Cc: </span>"<a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a>"<br class="">
<span style="font-weight:bold" class="">Subject: </span>Re: [cisco-voip] Cisco 8841 VPN phone issue<br class="">
</div>
<div class=""><br class="">
</div>
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
The prompt you are seeing with Service Name, Username, and Password is for the Mobile and Remote Access (MRA) feature. More information about this can be found here - <a href="https://tools.cisco.com/squish/92527f" class="">https://tools.cisco.com/squish/92527f</a>.
In order for the phone to start the VPN sign-in process instead of the MRA sign-in process you must have a TFTP set on the phone, either via DHCP or manually.
<div class=""><br class="">
</div>
<div class="">Joe<br class="">
<div class="">
<div class="">
<div class=""><br class="">
</div>
<div class="">On Sep 9, 2015, at 7:10 PM, Hank Keleher (AM) <<a href="mailto:hank.keleher@dimensiondata.com" class="">hank.keleher@dimensiondata.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 13px; font-family: Arial, sans-serif;" class="">
<div class="">
<div class="">Greetings!</div>
<div class=""><br class="">
</div>
<div class="">I’ve setup a new server using 10.5.2 for VPN using 8841’s and username and password (not certificate). I followed the details in the following features configuration guide for VPN client.</div>
<div class=""><br class="">
</div>
<div class=""><a href="http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/cucm/admin/10_5_2/ccmfeat/CUCM_BK_C3A84B33_00_cucm-feature-configuration-guide_rel1052.pdf" class="">http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/cucm/admin/10_5_2/ccmfeat/CUCM_BK_C3A84B33_00_cucm-feature-configuration-guide_rel1052.pdf</a></div>
<div class=""><br class="">
</div>
<div class="">The phones were configured and registered on the local network so they got the VPN common phone profile information. When we try to use the phone at home it prompts to supply Service Name, Username and Password. What should the service name be?
We searched for hours and didn’t see anything that related to a service name and we tried everything we could think of.</div>
<div class=""><br class="">
</div>
<div class="">I am able to VPN using username and password with the AnyConnect client to the URL for the VPN phones that was setup. It’s an ASA 5512 and the proper licenses are applied. I checked the feature report on CUCM and the 8841 is supported. Unfortunately
I’m not able to access the web server on the phone (I’ve tried to no avail.)</div>
</div>
<div class=""><br class="">
</div>
<div class="">Any thoughts or ideas here?</div>
<div class=""><br class="">
</div>
<div class="">Thanks!</div>
<div class="">Hank</div>
<div class="">
<div id="" class="">
<div class="">
<div class="">
<div style="font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt;" class="">
<br class="">
</div>
</div>
</div>
</div>
</div>
</div>
_______________________________________________<br class="">
cisco-voip mailing list<br class="">
<a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a><br class="">
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" class="">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br class="">
</div>
</div>
<br class="">
</div>
</div>
</div>
</div>
</span></div>
</div>
</div>
<br class="">
</div>
</div>
</div>
</div>
</span>
</body>
</html>