51-18
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter51 Configuring Cisco Unified Presence
Configuration Example for Cisco Unified Presence
The following values are used in this sample configuration:
• Private XMPP federation CiscoUnified Presence Release 8.0 IP address = 1.1.1.1
• Private second CiscoUnified Presence Release 8.0 IP address= 2.2.2.2
• Private third CiscoUnified Presence Release 7.x IP address = 3.3.3.3
• XMPP federation listening port = 5269
access-list ALLOW-ALL extended permit tcp any host 1.1.1.1 eq 5269
access-list ALLOW-ALL extended permit tcp any host 2.2.2.2 eq 5269
access-list ALLOW-ALL extended permit tcp any host 3.3.3.3 eq 5269
Example 4: This example access list configuration allows only from a specific federated domain
interface to specific XMPP federation nodes published in DNS.
Note The public addresses are published in DNS, but the private addresses are configured in the access-list
command.
The following values are used in this sample configuration:
•Private XMPP federation CiscoUnified Presence Release 8.0 IP address = 1.1.1.1
•Private second CiscoUnified Presence Release 8.0 IP address = 2.2.2.2
•Private third CiscoUnified Presence Release 7.x IP address = 3.3.3.3
•XMPP federation listening port = 5269
•External interface of the foreign XMPP enterprise = 100.100.100.100
access-list ALLOW-ALL extended permit tcp host 100.100.100.100 host 1.1.1.1 eq 5269
access-list ALLOW-ALL extended permit tcp host 100.100.100.100 host 2.2.2.2 eq 5269
access-list ALLOW-ALL extended permit tcp host 100.100.100.100 host 3.3.3.3 eq 5269
Example NAT Configuration for XMPP Federation
Example 1: Single node with XMPP federation enabled
The following values are used in this sample configuration:
•Public Cisco UnifiedPresence IP address = 10.10.10.10
•Private XMPP federation CiscoUnified Presence Release 8.0 IP address = 1.1.1.1
•XMPP federation listening port = 5269
nat (inside,outside) source static obj_host_1.1.1.1 obj_host_10.10.10.10 service
obj_udp_source_eq_5269 obj_udp_source_eq_5269
nat (inside,outside) source static obj_host_1.1.1.1 obj_host_10.10.10.10 service
obj_tcp_source_eq_5269 obj_tcp_source_eq_5269
Example 2: Multiple nodes with XMPP federation, each with a public IP address in DNS
The following values are used in this sample configuration:
•Public Cisco UnifiedPresence IP addresses = 10.10.10.10, 20.20.20.20, 30.30.30.30
•Private XMPP federation CiscoUnified Presence Release 8.0 IP address = 1.1.1.1
•Private second CiscoUnified Presence Release 8.0 IP address = 2.2.2.2