Cisco Unified Ip Phone 8961, 9951, And 9971 Administration Guide For Cisco Unified Communications Manager - Cisco 9971 Administration Manual

Set Up Cisco VXC VPN
VXC VPN Option setting
Dual Tunnel (default)
Single Tunnel
Single Tunnel
The following table describes how a change in the VXC VPN Option setting alters the operation of the VXC
VPN feature when the feature is already enabled.
Table 33: Cisco VXC VPN operation as determined by VXC VPN Option change
VXC VPN action
Change from Dual Tunnel to Single Tunnel
Change from Single Tunnel to Dual Tunnel

Cisco Unified IP Phone 8961, 9951, and 9971 Administration Guide for Cisco Unified Communications Manager

10.0
258
VXC Challenge setting
No Challenge
Challenge
No Challenge
Result
The phone disconnects the VXC VPN tunnel and
leaves the phone VPN tunnel intact.
Cisco VXC traffic receives permission to go over the
phone VPN tunnel.
The phone attempts to reuse the phone VPN
credentials for the Cisco VXC VPN tunnel silently
without considering the VXC Challenge field.
If the VPN concentrator is configured for one-time
password, the attempt fails and the phone displays
the VXC VPN Sign In window, which prompts the
user to enter a different password.
Result after enabling the VXC VPN
feature (with Cisco VXC connected
to the phone)
The phone attempts to reuse the
phone VPN credentials for the
Cisco VXC VPN tunnel. Note that
if the VPN concentrator is
configured for one-time passwords,
the attempt fails, and the phone
displays the VXC VPN Sign In
window for the user to enter a
different password from the phone
VPN password.
The phone disconnects the phone
VPN tunnel, and then displays the
Phone VPN Sign In window to
prompt the user to enter a password
and reestablish the phone VPN
tunnel. If the user is on an active
call, the phone waits until the call
ends before tearing down the
tunnel.
Cisco VXC traffic receives silent
permission to go over the phone
VPN with no challenge.