Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-25
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the Cisco Phone Proxy
Configuring the Phone Proxy
Command Purpose
Step 1
hostname(config)# phone-proxy phone_proxy_name
Example:
hostname(config)# phone-proxy myphoneproxy
Creates the phone proxy instance.
Only one phone proxy instance can be configured on
the security appliance.
Step 2
hostname(config-phone-proxy)# media-termination
instance_name
Examples:
hostname(config-phone-proxy)# media-termination
my_mt
Specifies the media termination instance used by the
phone proxy for SRTP and RTP.
Note You must create the media termination
instance before you specify it in the phone
proxy instance.
See Creating the Media Termination Instance,
page 1-23 for the steps to create the media
termination instance.
Step 3
hostname(config-phone-proxy)# tftp-server address
ip_address interface interface
Example:
hostname(config-phone-proxy)# tftp-server address
192.0.2.101 interface inside
Creates the TFTP server using the actual internal
address and specify the interface on which the TFTP
server resides.
Step 4
hostame(config-phone-proxy)# tls-proxy proxy_name
Example:
hostame(config-phone-proxy)# tls-proxy mytls
Configures the TLS proxy instance that you have
already created.
Step 5
hostname(config-phone-proxy)# ctl-file ctl_name
Example:
hostame(config-phone-proxy)# ctl-file myctl
Configures the CTL file instance that you have
already created,
Step 6
hostname(config-phone-proxy)# proxy-server address
ip_address [listen_port] interface ifc
Example:
hostname(config-phone-proxy)# proxy-server
192.168.1.2 interface inside
(Optional) If the operational environment has an
external HTTP proxy to which the IP phones direct
all HTTP request, configures a proxy server.
You can configure only one proxy server while the
phone proxy is in use.
By default, the Phone URL Parameters configured
under the Enterprise Parameters use an FQDN in the
URLs. The parameters might need to be changed to
use an IP address if the DNS lookup for the HTTP
proxy does not resolve the FQDNs.
Note If the IP phones have already downloaded
their configuration files after you have
configured the proxy server, you must restart
the IP phones so that they get the
configuration file with the proxy server
address in the file.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English