Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

47-11
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 47 Configuring Cisco Intercompany Media Engine Proxy
Configuring Cisco Intercompany Media Engine Proxy
the call is accepted by the terminating SCCP IP phone. The terminating IP phone rings and on
answering the call, the call hangs due to an incomplete TLS handshake. The call does not fall back
to the PSTN.
Configuring Cisco Intercompany Media Engine Proxy
This section contains the following topics:
• Task Flow for Configuring Cisco Intercompany Media Engine, page 47-11
• Configuring NAT for Cisco Intercompany Media Engine Proxy, page 47-12
• Configuring PAT for the Cisco UCM Server, page 47-14
• Creating Access Lists for Cisco Intercompany Media Engine Proxy, page 47-16
• Creating the Media Termination Instance, page 47-17
• Creating the Cisco Intercompany Media Engine Proxy, page 47-18
• Creating Trustpoints and Generating Certificates, page 47-22
• Creating the TLS Proxy, page 47-25
• Enabling SIP Inspection for the Cisco Intercompany Media Engine Proxy, page 47-26
• (Optional) Configuring TLS within the Local Enterprise, page 47-28
• (Optional) Configuring Off Path Signaling, page 47-31
Task Flow for Configuring Cisco Intercompany Media Engine
Figure 47-6 provides an example for a basic deployment of the Cisco Intercompany Media Engine. The
following tasks include command line examples based on Figure 47-6.
Figure 47-6 Example for Basic (in-line) Deployment Tasks
Note Step 1 through Step 8 apply to both basic (in-line) and off path deployments and Step 9 applies only to
off path deployment.
Internet
Remote Enterprise
Local
Cisco UCMs
Local ASA
Corporate
Network
Remote
Cisco UCM
Remote ASA
Local Enterprise
IP
IP
IP
192.168.10.30
192.168.10.31
192.168.10.12
ASA inside
interface
192.168.10.1
Inside media
termination
192.168.10.3
Outside media termination
209.165.200.226
Outside Cisco UMC
209.165.200.228
TLS
TCP
248764
Local
UC-IME
Server
Remote
UC-IME
Server
M
M
UC-IME
Bootstrap
Server
ASA outside interface
209.165.200.225
M

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English