Cisco ASA 5505 Configuration Manual page 1039

Chapter 47 Configuring Cisco Intercompany Media Engine Proxy
This pane is available from the Configuration > Firewall > Unified Communications > UC-IME Proxy.
Open the Configuration > Firewall > Unified Communications > UC-IME Proxy pane.
Step 1
Check the Enable Cisco UC-IME proxy check box to enable the feature.
Step 2
In the Unified CM Servers area, enter an IP address or hostname for the Cisco Unified Communications
Step 3
Manager (Cisco UCM) or click the ellipsis to open a dialog and browse for an IP address or hostname.
In the Trunk Security Mode field, click a security option. Specifying secure for Cisco UCM or Cisco
Step 4
UCM cluster indicates that Cisco UCM or Cisco UCM cluster is initiating TLS.
Click Add to add the Cisco UCM for the Cisco Intercompany Media Engine Proxy. You must include an
Step 5
entry for each Cisco UCM in the cluster with Cisco Intercompany Media Engine that has a SIP trunk
enabled.
In the Ticket Epoch field, enter an integer from 1-255.
Step 6
The epoch contains an integer that updates each time that the password is changed. When the proxy is
configured the first time and a password entered for the first time, enter 1 for the epoch integer. Each
time you change the password, increment the epoch to indicate the new password. You must increment
the epoch value each time your change the password.
Typically, you increment the epoch sequentially; however, the adaptive security appliance allows you to
choose any value when you update the epoch.
If you change the epoch value, the current password is invalidated and you must enter a new password.
Note The epoch and password that you configure in this step on the adaptive security appliance must match
the epoch and password that you configure on the Cisco Intercompany Media Engine server. See the
Cisco Intercompany Media Engine server documentation for information.
In the Ticket Password field, enter a minimum of 10 printable character from the US-ASCII character
Step 7
set. The allowed characters include 0x21 to 0x73 inclusive, and exclude the space character. The ticket
password can be up to 64 characters. Confirm the password you entered. Only one password can be
configured at a time.
Check the Apply MTA to UC-IME Link proxy check box to associate the media termination address with
Step 8
the Cisco Intercompany Media Engine Proxy.
Note
If the Cisco Intercompany Media Engine Proxy is being configured as part of off path deployment, check
Step 9
the Enable off path address mapping service checkbox and configure the off path deployment settings:
From the Listening Interface field, select an adaptive security appliance interface. This is the
a.
interface on which the adaptive security appliance listens for the mapping requests.
In the Port field, enter a number between 1024 and 65535 as the TCP port on which the adaptive
b.
security appliance listens for the mapping requests. The port number must be 1024 or higher to avoid
conflicts with other services on the device, such as Telnet or SSH. By default, the port number is
TCP 8060.
c. From the UC-IME Interface field, select an interface from the list. This is the interface that the
adaptive security appliance uses to connect to the remote Cisco UCM.
OL-20339-01
You must create the media termination instance before you associate it with the Cisco
Intercompany Media Engine Proxy. If necessary, click the Configure MTA button to configure a
media termination address instance.
Configuring Cisco Intercompany Media Engine Proxy
Cisco ASA 5500 Series Configuration Guide using ASDM
47-33