Cisco ASA Series Cli Configuration Manual page 1247

Chapter 1 Configuring the Cisco Phone Proxy
Figure 1-5
Primary Cisco UCM
TFTP / Publisher
192.0.2.101
Phone A
192.0.2.102
Phone B
192.0.2.103
object network obj-192.0.2.105
host 192.0.2.105
nat (inside,outside) static 10.10.0.27
object network obj-192.0.2.101
host 192.0.2.101
nat (inside,outside) static interface udp 69 69
object network obj-192.0.2.106
host 192.0.2.106
nat (inside,outside) static 10.10.0.26
access-list pp extended permit udp any host 10.10.0.24 eq 69
access-group pp in interface outside
crypto key generate rsa label cluster_kp modulus 1024
crypto ca trustpoint pri_cucm
enrollment self
keypair cluster_kp
crypto ca enroll pri_cucm
crypto ca trustpoint sec_cucm
enrollment self
serial-number
keypair cluster_kp
crypto ca enroll sec_cucm
crypto ca trustpoint tftp_server
enrollment self
fqdn my_tftp.example.com
keypair cluster_kp
crypto ca enroll tftp_server
ctl-file myctl
record-entry tftp trustpoint tftp_server address 10.10.0.24
record-entry cucm trustpoint pri_cucm_server address 10.10.0.27
record-entry cucm trustpoint sec_cucm_server address 10.10.0.2
no shutdown
crypto key generate rsa label ldc_signer_key modulus 1024
crypto key generate rsa label phone_common modulus 1024
Mixed-mode Cisco UCM cluster, Primary Cisco UCM, Secondary Cisco UCM, and TFTP Server
on Different Servers
Secondary Cisco UCM
192.0.2.105 192.0.2.106
M
Corporate
M
Network
IP
IP
M
ASA Inside Interface
192.0.2.24
ASA Outside Interface
10.10.0.24
Cisco ASA Series CLI Configuration Guide
Configuration Examples for the Phone Proxy
Internet
Home Router
w/NAT
98.208.49.30
Home Router
w/NAT
69.181.112.219
IP
Comcast
Address
IP
Comcast
Address
1-49