Cisco ASA Series Cli Configuration Manual page 1218

Configuring the Phone Proxy
Command
Step 3
hostname(config-ctl-file)# record-entry cucm
trustpoint trustpoint_name address IP_address
Example:
record-entry cucm trustpoint cucm_server address
10.10.0.26
Step 4
hostname(config-ctl-file)# record-entry capf
trustpoint trust_point address
Example:
record-entry capf trustpoint capf address 10.10.0.26
Step 5
hostname(config-ctl-file)# no shutdown
Step 6
hostname(config)# copy running-configuration
startup-configuration
What to Do Next
Once you have configured the CTL file for the phone proxy, create the TLS proxy instance. See
the TLS Proxy Instance for a Non-secure Cisco UCM Cluster, page 1-21
configuring the phone proxy in a non-secure mode or see
Cisco UCM Cluster, page 1-21
Using an Existing CTL File
Note
Only when the phone proxy is running in mixed-mode clusters, you have the option to use an existing
CTL file to install trustpoints.
If you have an existing CTL file that contains the correct IP addresses of the entities (namely, the IP
address that the IP phones use for the Cisco UCM or TFTP servers), you can be use it to create a new
CTL file thereby using the existing CTL file to install the trustpoints for each entity in the network
(Cisco UCM, Cisco UCM and TFTP, TFTP server, CAPF) that the IP phones must trust.
Prerequisites
If a CTL file exists for the cluster, copy the CTL file to Flash memory. When you copy the CTL file to
Flash memory, rename the file and do not name the file
If you are using domain names for your Cisco UCM and TFTP server, you must configure DNS lookup
on the ASA. See the prerequisites for
Cisco ASA Series CLI Configuration Guide
1-20
Purpose
Creates the record entry for the each Cisco UCM
(primary and secondary).
Note
Use the global or mapped IP address of the
Cisco UCM.
Creates the record entry for CAPF.
Note
You only enter this command when LSC
provisioning is required or you have LSC
enabled IP phones.
Creates the CTL file.
When the file is created, it creates an internal
trustpoint used by the phone proxy to sign the TFTP
files. The trustpoint is named
_internal_PP_ctl-instance_filename.
Saves the certificate configuration to Flash memory.
if the phone proxy is running in a mixed-mode cluster.
CTLFile.tlv
Creating the CTL File, page
Chapter 1 Configuring the Cisco Phone Proxy
to add the TLS proxy when
Creating the TLS Proxy for a Mixed-mode
.
1-19.
Creating