Cisco ASA Series Cli Configuration Manual page 1221

Chapter 1 Configuring the Cisco Phone Proxy
Command
Step 13
hostname(config-tlsp)# client cipher-suite
cipher-suite
Example:
hostname(config-tlsp)# client cipher-suite
aes128-sha1 aes256-sha1
Step 14
•
hostname(config)# crypto ca export trustpoint
identity-certificate
Example:
hostname(config)# crypto ca export ldc_server
identity-certificate
•
hostname(config)# show crypto ca server certificates
What To Do Next
Once you have created the TLS proxy instance and installed the certificate on the Cisco Unified
Communications Manager, create the phone proxy instance. See
page
Creating the Media Termination Instance
Create the media termination instance that you will use in the phone proxy.
The media termination address you configure must meet the requirements as described in
Termination Instance Prerequisites, page
1-24.
Purpose
Specifies the cipher suite.
Options include des-sha1, 3des-sha1, aes128-sha1,
aes256-sha1, or null-sha1.
Exports the local CA certificate and installs it as a
trusted certificate on the Cisco Unified
Communications Manager server by performing one
of the following actions.
Exports the certificate if a trustpoint with
proxy-ldc-issuer is used as the signer of the dynamic
certificates.
Exports the certificate for the embedded local CA
server LOCAL-CA-SERVER.
After exporting the certificate, you must save the
output to a file and import it on the Cisco Unified
Communications Manager. You can use the Display
Certificates function in the Cisco Unified
Communications Manager software to verify the
installed certificate.
For information about performing these procedures,
see the following URLs:
http://www.cisco.com/en/US/docs/voice_ip_comm/
cucm/cucos/5_0_4/iptpch6.html#wp1040848
http://www.cisco.com/en/US/docs/voice_ip_comm/
cucm/cucos/5_0_4/iptpch6.html#wp1040354
Creating the Phone Proxy Instance,
1-6.
Cisco ASA Series CLI Configuration Guide
Configuring the Phone Proxy
Media
1-23