Cisco ASA Series Cli Configuration Manual page 1251

Chapter 1 Configuring the Cisco Phone Proxy
Figure 1-7
Cisco UCM + TFTP Server
object network obj-10.130.50.0
subnet 10.130.50.0 255.255.255.0
nat (data,voice) dynamic 192.0.2.10
object network obj-10.130.50.5
host 10.130.50.5
nat (data,voice) static 192.0.2.101
access-list pp extended permit udp any host 10.130.50.5 eq 69
access-list pp extended permit tcp any host 10.130.50.5 eq 2000
access-list pp extended permit tcp any host 10.130.50.5 eq 5060
access-list pp extended permit tcp any host 10.130.50.5 eq 3804
access-group pp in interface data
crypto ca generate rsa label cucmtftp_kp modulus 1024
crypto ca trustpoint cucm_tftp_server
enrollment self
keypair cucmtftp_kp
crypto ca enroll cucm_tftp_server
crypto ca trustpoint capf
enrollment terminal
crypto ca authenticate capf
ctl-file myctl
record-entry cucm-tftp trustpoint cucm_tftp_server address 10.130.50.5
record-entry capf trustpoint capf address 10.130.50.5
no shutdown
tls-proxy mytls
server trust-point _internal_PP_myctl
media-termination my_mediaterm
address 10.130.50.2
phone-proxy mypp
media-termination my_mediaterm
tftp-server address 10.10.0.20 interface inside
tls-proxy mytls
ctl-file myctl
cipc security-mode authenticated
class-map sec_sccp
match port tcp eq 2443
class-map sec_sip
match port tcp eq 5061
policy-map pp_policy
class sec_sccp
VLAN Transversal Between CIPC Softphones on the Data VLAN and Hard Phones on the Voice
VLAN
192.0.2.101
Corporate
M
Network
(Voice VLAN)
IP
IP
inspect skinny phone-proxy mypp
Configuration Examples for the Phone Proxy
ASA Data VLAN interface
10.10.0.24
Corporate
Network
(Data VLAN)
ASA Inside Interface
10.130.50.24
Cisco ASA Series CLI Configuration Guide
Cisco IPC
10.130.50.10
Cisco IPC
10.130.50.11
Cisco IPC
10.130.50.12
1-53