Cisco Cisco Expressway
4.
Configure the fields as follows:
Name
A name indicating that this is an encrypted profile.
Description
Enter a textual description as required.
Device Security Mode
Encrypted.
Incoming Transport Type
TLS.
Outgoing Transport Type
TLS.
Enable Digest
Authentication
Leave unselected.
X.509 Subject Name
The subject name or a subject alternate name provided by the Expressway in
its certificate. For Expressway clusters, ensure that this list includes all of the
names contained within all of the peers' certificates. To specify multiple
X.509 names, separate each name by a space, comma, semicolon or colon.
its certificate. For Expressway clusters, ensure that this list includes all of the
names contained within all of the peers' certificates. To specify multiple
X.509 names, separate each name by a space, comma, semicolon or colon.
Incoming Port
5061
Accept Unsolicited
Notification
Select this check box
Accept Replaces Header
Select this check box
Other parameters
Leave all other parameters unselected.
5.
Click Save.
Update the Unified CM Trunk to Expressway to Use TLS
On Unified CM:
1.
Go to Device > Trunk.
2.
Using Find, select the Device Name previously set up for the trunk to the Expressway.
3.
Configure the following fields:
SIP Information section
Destination
Port
5061 (unless using DNS SRV, in which case ensure the SRV records are set up correctly).
for more information.
SIP Trunk
Security
Security
Profile
Select the trunk profile set up above.
Leave other parameters as previously configured.
4.
Click Save.
5.
Click Reset.
28
Cisco Expressway SIP Trunk to Unified CM Deployment Guide
Connecting Expressway to Unified CM Using TLS