Cisco Systems ASA5515K9, ASA 5500 Enabling the Phone Proxy with SIP and Skinny Inspection

48-25
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter48 Configuring the Cisco Phone Proxy
Configuring the Phone Proxy
What to Do Next
Once you have created the phone proxy instance, configuring SIP and Skinny for the phone proxy. See
Enabling the Phone Proxy with SIP and Skinny Inspection, page48-25.
Enabling the Phone Proxy with SIP and Skinny Inspection
Enables the phone proxy instance that you created to inspect SIP and Skinny protocol traffic.
Prerequisites
You must have already created the phone proxy instance. See Creating the Phone Proxy Instance,
page 48-23.
Step7 hostname(config-phone-proxy)# cipc security-mode
authenticated
(Optional) Forces Cisco IP Communicator (CIPC)
softphones to operate in authenticated mode when
CIPC softphones are deployed in a voice and data
VLAN scenario.
See Cisco IP Communicator Prerequisites,
page 48-10 for all requirements for using the phone
proxy with CIPC.
Step8 hostname(config-phone-proxy)# no disable
service-settings
(Optional) Preserve the settings configured on the
Cisco UCM for each IP phone configured.
By default, the following settings are disabled on the
IP phones:
•PC Port
•Gratuitous ARP
•Voice VLAN access
•Web Ac cess
•Span to PC Port
Command Purpose
Command Purpose
Step1 hostname(config)# class-map class_map_name
Example:
class-map sec_sccp
Configures the secure Skinny class of traffic to
inspect. Traffic between the Cisco Unified
Communications Manager and Cisco IP Phones uses
SCCP and is handled by SCCP inspection.
Where class_map_name is the name of the Skinny
class map.
Step2 hostname(config-cmap)# match port tcp eq 2443 Matches the TCP port 2443 to which you want to
apply actions for secure Skinny inspection.
Step3 hostname(config-cmap)# exit Exits from the Class Map configuration mode.