Configuring Ssl Vpn On The Cisco Spa525G Or Cisco Spa525G2 - Cisco 521SG - Unified IP Phone VoIP Administration Manual

Configuring Security, Quality, and Network Features

Configuring SSL VPN on the Cisco SPA525G or Cisco SPA525G2

Configuring SSL VPN on the Cisco SPA525G or
Cisco SPA525G2
Cisco Small Business SPA300 Series, SPA500 Series, and WIP310 IP Phone Administration Guide
The Cisco SPA525G or Cisco SPA525G2 can be used in a virtual private network
(VPN) to allow users secure access to the office phone network from remote
locations or to connect the Internet and use VPN to access the company phone
network. This feature works on the Cisco SPA525G or Cisco SPA525G2 using
either SIP or SPCP.
The phone works with the Cisco AnyConnect VPN client and the following VPN
devices:
• Cisco 500 Series Secure Router
• Cisco 5500 Series Adaptive Security Appliance
• Cisco Unified Communications 520 Series
You must configure the SSL VPN device to ensure proper routing of voice data by
using VLAN and QoS at the end of the SSL VPN server. The following restrictions
apply:
• HTTP proxy is not supported.
• SSL client certificate verification is not supported.
• CDP and VLAN tagging and QoS for the voice and PC port are not
supported on the SSL VPN tunnel.
Because using VPN requires internal phone resources, performance can suffer if
using memory-intensive applications or configurations on the phone when the
phone is connected to the VPN. The following restrictions apply:
• Only the G.711 Audio Codec is supported.
• SRTP for secured audio is not supported.
• Video monitoring is not supported.
To configure and use the Cisco SPA525G or Cisco SPA525G2 on a VPN, you must
do the following:
1. Configure the VPN on the VPN server by using Cisco AnyConnect VPN client
software.
2. Configure the VPN administrative settings on the IP phone by using the phone
web user interface.
5
150