Cisco ASA Series Cli Configuration Manual page 1244

Configuration Examples for the Phone Proxy
Example 2: Mixed-mode Cisco UCM cluster, Cisco UCM and TFTP Server
on Publisher
Figure 1-3
following topology.
Figure 1-3
Comcast Address
98.208.49.30
object network obj-192.0.2.101
access-list pp extended permit udp any host 10.10.0.26 eq 69
access-group pp in interface outside
crypto key generate rsa label cucmtftp_kp modulus 1024
crypto ca trustpoint cucm_tftp_server
crypto ca enroll cucm_tftp_server
ctl-file myctl
crypto key generate rsa label ldc_signer_key modulus 1024
crypto key generate rsa label phone_common modulus 1024
crypto ca trustpoint ldc_server
tls-proxy my_proxy
media-termination my_mediaterm
Cisco ASA Series CLI Configuration Guide
1-46
shows an example of the configuration for a mixed-mode Cisco UCM cluster using the
Mixed-mode Cisco UCM cluster, Cisco UCM and TFTP Server on Publisher
IP
Comcast Address
69.181.112.219
IP
Home Router
w/NAT
Home Router
w/NAT
IP
host 192.0.2.101
nat (inside,outside) static 10.10.0.26
enrollment self
keypair cucmtftp_kp
record-entry cucm-tftp trustpoint cucm_tftp_server address 10.10.0.26
no shutdown
enrollment self
proxy_ldc_issuer
fqdn my-ldc-ca.exmaple.com
subject-name cn=FW_LDC_SIGNER_172_23_45_200
keypair ldc_signer_key
crypto ca enroll ldc_server
server trust-point _internal_PP_myctl
client ldc issuer ldc_server
client ldc keypair phone_common
client cipher-suite aes128-sha1 aes256-sha1
address 192.0.2.25 interface inside
Chapter 1
ASA Outside Interface
10.10.0.24
Internet
ASA Inside Interface
192.0.2.1
Configuring the Cisco Phone Proxy
Corporate Network
Cisco UCM+TFTP
192.0.2.101
M
Cisco UCM cluster is in
nonsecure mode
IP
Phone A
192.0.2.16