Cisco ASA Series Cli Configuration Manual page 1224

Configuring the Phone Proxy
Command
Step 7
hostname(config-phone-proxy)# cipc security-mode
authenticated
Step 8
hostname(config-phone-proxy)# no disable
service-settings
What to Do Next
Once you have created the phone proxy instance, configuring SIP and Skinny for the phone proxy. See
Enabling the Phone Proxy with SIP and Skinny Inspection, page
Enabling the Phone Proxy with SIP and Skinny Inspection
Enables the phone proxy instance that you created to inspect SIP and Skinny protocol traffic.
Prerequisites
You must have already created the phone proxy instance. See
page
Command
Step 1
hostname(config)# class-map class_map_name
Example:
class-map sec_sccp
Step 2
hostname(config-cmap)# match port tcp eq 2443
Step 3
hostname(config-cmap)# exit
Cisco ASA Series CLI Configuration Guide
1-26
1-24.
Chapter 1 Configuring the Cisco Phone Proxy
Purpose
(Optional) Forces Cisco IP Communicator (CIPC)
softphones to operate in authenticated mode when
CIPC softphones are deployed in a voice and data
VLAN scenario.
See Cisco IP Communicator Prerequisites,
page 1-10 for all requirements for using the phone
proxy with CIPC.
(Optional) Preserve the settings configured on the
Cisco UCM for each IP phone configured.
By default, the following settings are disabled on the
IP phones:
•
PC Port
•
Gratuitous ARP
•
Voice VLAN access
•
Web Access
•
Span to PC Port
1-26.
Creating the Phone Proxy Instance,
Purpose
Configures the secure Skinny class of traffic to
inspect. Traffic between the Cisco Unified
Communications Manager and Cisco IP Phones uses
SCCP and is handled by SCCP inspection.
Where class_map_name is the name of the Skinny
class map.
Matches the TCP port 2443 to which you want to
apply actions for secure Skinny inspection.
Exits from the Class Map configuration mode.