Cisco ASA Series Cli Configuration Manual page 1246

Configuration Examples for the Phone Proxy
access-list pp extended permit udp any host 10.10.0.24 eq 69
access-group pp in interface outside
crypto key generate rsa label cucm_kp modulus 1024
crypto ca trustpoint cucm
crypto ca enroll cucm
crypto key generate rsa label tftp_kp modulus 1024
crypto ca trustpoint tftp_server
crypto ca enroll tftp_server
ctl-file myctl
crypto key generate rsa label ldc_signer_key modulus 1024
crypto key generate rsa label phone_common modulus 1024
crypto ca trustpoint ldc_server
tls-proxy my_proxy
media-termination my_mediaterm
phone-proxy mypp
class-map sec_sccp
class-map sec_sip
policy-map pp_policy
service-policy pp_policy interface outside
Example 4: Mixed-mode Cisco UCM cluster, Primary Cisco UCM,
Secondary and TFTP Server on Different Servers
Figure 1-5
following topology where the TFTP server resides on a different server from the primary and secondary
Cisco UCMs.
In this sample, the static interface PAT for the TFTP server is configured to appear like the ASA's outside
interface IP address.
Cisco ASA Series CLI Configuration Guide
1-48
host 192.0.2.101
nat (inside,outside) static interface udp 69 69
enrollment self
keypair cucm_kp
enrollment self
keypair tftp_kp
record-entry cucm trustpoint cucm_server address 10.10.0.26
no shutdown
enrollment self
proxy_ldc_issuer
fqdn my-ldc-ca.exmaple.com
subject-name cn=FW_LDC_SIGNER_172_23_45_200
keypair ldc_signer_key
crypto ca enroll ldc_server
server trust-point _internal_PP_myctl
client ldc issuer ldc_server
client ldc keypair phone_common
client cipher-suite aes128-sha1 aes256-sha1
address 192.0.2.25 interface inside
address 10.10.0.25 interface outside
media-termination my_mediaterm
tftp-server address 192.0.2.101 interface inside
tls-proxy mytls
ctl-file myctl
cluster-mode mixed
match port tcp 2443
match port tcp eq 5061
class sec_sccp
inspect skinny phone-proxy mypp
class sec_sip
inspect sip phone-proxy mypp
shows an example of the configuration for a mixed-mode Cisco UCM cluster using the
Chapter 1 Configuring the Cisco Phone Proxy