Cisco ASA 5505 Configuration Manual page 953

Chapter 43 Configuring the Cisco Phone Proxy
As an alternative to authenticating remote IP phones through the TLS handshake, you can configure
Note
authentication via LSC provisioning. With LSC provisioning you create a password for each remote IP
phone user and each user enters the password on the remote IP phones to retrieve the LSC.
Because using LSC provisioning to authenticate remote IP phones requires the IP phones first register
in nonsecure mode, Cisco recommends LSC provisioning be done inside the corporate network before
giving the IP phones to end-users. Otherwise, having the IP phones register in nonsecure mode requires
the Administrator to open the nonsecure signaling port for SIP and SCCP on the adaptive security
appliance.
See also the Cisco Unified Communications Manager Security Guide for information on Using the
Certificate Authority Proxy Function (CAPF) to install a locally significant certificate (LSC).
Supported Cisco UCM and IP Phones for the Phone Proxy
Cisco Unified Communications Manager
The following release of the Cisco Unified Communications Manager are supported with the phone
proxy:
•
•
•
•
•
•
Cisco Unified IP Phones
The phone proxy supports these IP phone features:
•
•
•
Note
The phone proxy does not support displaying the lock icon on IP phone screens. IP phones display the
lock icon on the phone screen during encrypted calls. Even though the lock icon is not displayed on the
screen, the IP phone call is still encrypted because the phone proxy encrypts calls by default.
The following IP phones in the Cisco Unified IP Phones 7900 Series are supported with the phone proxy:
•
•
•
•
OL-20339-01
Cisco Unified CallManager Version 4.x
Cisco Unified CallManager Version 5.0
Cisco Unified CallManager Version 5.1
Cisco Unified Communications Manager 6.1
Cisco Unified Communications Manager 7.0
Cisco Unified Communications Manager Express 7.0
The Music on Hold (MoH) voice feature
Enterprise features like conference calls on remote phones connected through the phone proxy
XML services
The phone proxy supports only the features described in the list above. All other IP phone
features not described by this list are unsupported by the phone proxy.
Cisco Unified IP Phone 7975
Cisco Unified IP Phone 7971
Cisco Unified IP Phone 7970
Cisco Unified IP Phone 7965
Information About the Cisco Phone Proxy
Cisco ASA 5500 Series Configuration Guide using ASDM
43-3