Cisco Systems ASA 5585-X Manual De Usuario
16-26
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 16 Configuring the Cisco Phone Proxy
Configuring the Phone Proxy
What to Do Next
Once you have created the phone proxy instance, configuring SIP and Skinny for the phone proxy. See
.
Enabling the Phone Proxy with SIP and Skinny Inspection
Enables the phone proxy instance that you created to inspect SIP and Skinny protocol traffic.
Prerequisites
You must have already created the phone proxy instance. See
Step 7
hostname(config-phone-proxy)# cipc security-mode
authenticated
(Optional) Forces Cisco IP Communicator (CIPC)
softphones to operate in authenticated mode when
CIPC softphones are deployed in a voice and data
VLAN scenario.
softphones to operate in authenticated mode when
CIPC softphones are deployed in a voice and data
VLAN scenario.
See
for all requirements for using the phone
proxy with CIPC.
Step 8
hostname(config-phone-proxy)# no disable
service-settings
(Optional) Preserve the settings configured on the
Cisco UCM for each IP phone configured.
Cisco UCM for each IP phone configured.
By default, the following settings are disabled on the
IP phones:
IP phones:
•
PC Port
•
Gratuitous ARP
•
Voice VLAN access
•
Web Access
•
Span to PC Port
Command
Purpose
Command
Purpose
Step 1
hostname(config)# class-map class_map_name
Example:
class-map sec_sccp
Configures the secure Skinny class of traffic to
inspect. Traffic between the Cisco Unified
Communications Manager and Cisco IP Phones uses
SCCP and is handled by SCCP inspection.
inspect. Traffic between the Cisco Unified
Communications Manager and Cisco IP Phones uses
SCCP and is handled by SCCP inspection.
Where class_map_name is the name of the Skinny
class map.
class map.
Step 2
hostname(config-cmap)# match port tcp eq 2443
Matches the TCP port 2443 to which you want to
apply actions for secure Skinny inspection.
apply actions for secure Skinny inspection.
Step 3
hostname(config-cmap)# exit
Exits from the Class Map configuration mode.