Cisco ASA Series Cli Configuration Manual page 1289

Chapter 1 Configuring Cisco Unified Presence
Security Certificate Exchange Between Cisco UP and the Security
Appliance
You need to generate the keypair for the certificate (such as
configure a trustpoint to identify the self-signed certificate sent by the ASA to Cisco UP (such as
cup_proxy
For the ASA to trust the Cisco UP certificate, you need to create a trustpoint to identify the certificate
from the Cisco UP (such as
you will paste the certificate received from the Cisco UP into the terminal.
XMPP Federation Deployments
Figure 1-4
enterprise deployment and an IBM Sametime enterprise deployment. TLS is optional for XMPP
federation. ASA acts only as a firewall for XMPP federation; it does not provide TLS proxy functionality
or PAT for XMPP federation.
Figure 1-4
Inter-cluster
communication
CUCM
XMPP
Client
(Ann)
*Cisco Adaptive Security Appliance
) in the TLS handshake.
cert_from_cup
provides an example of an XMPP federated network between Cisco Unified Presence
Basic XMPP Federated Network between Cisco Unified Presence and IBM Sametime
CUCM private
CUP
CUP
CUP (UK)
CUP
CUP
CUP (US)
XMPP
Client
(Tom)
), and specify the enrollment type as terminal to indicate that
Enterprise X
DMZ
Pass-through for
XMPP Requests
No Termination
of connections
Internet
XMPP
*ASA
ASA functions as:
• Firewall
• Open Port 5269
Cisco ASA Series CLI Configuration Guide
Information About Cisco Unified Presence
) used by the ASA, and
cup_proxy_key
Enterprise Z
DMZ private network
Directory
IBM
Sametime Sametime
Sametime
Gateway
Gateway
Sametime
(Bob)
IBM
IBM
Server
Sametime
(Bill)
1-5