Cisco Systems ASA 5545-X, ASA 5505, ASA 5555-X See Creating the Media Termination Instance, 16-25

Chapter 16 Configuring the Cisco Phone Proxy

Configuring the Phone Proxy

	Command	Purpose
Step 1	hostname(config)# phone-proxyphone_proxy_name	Creates the phone proxy instance.
	Example:	Only one phone proxy instance can be configured on
	hostname(config)# phone-proxy myphoneproxy
		the security appliance.
Step 2	hostname(config-phone-proxy)# media-termination	Specifies the media termination instance used by the
	instance_name	phone proxy for SRTP and RTP.
	Examples:	Note You must create the media termination
	hostname(config-phone-proxy)# media-termination
	my_mt	instance before you specify it in the phone
		proxy instance.
		See Creating the Media Termination Instance,
		page 16-23for the steps to create the media
		termination instance.
Step 3	hostname(config-phone-proxy)# tftp-server address	Creates the TFTP server using the actual internal
	ip_address interface interface	address and specify the interface on which the TFTP
	Example:	server resides.
	hostname(config-phone-proxy)# tftp-server address
	192.0.2.101 interface inside
Step 4	hostame(config-phone-proxy)# tls-proxyproxy_name	Configures the TLS proxy instance that you have
	Example:	already created.
	hostame(config-phone-proxy)# tls-proxy mytls
Step 5	hostname(config-phone-proxy)# ctl-filectl_name	Configures the CTL file instance that you have
	Example:	already created,
	hostame(config-phone-proxy)# ctl-file myctl
Step 6	hostname(config-phone-proxy)# proxy-server address	(Optional) If the operational environment has an
	ip_address [listen_port] interface ifc	external HTTP proxy to which the IP phones direct
	Example:	all HTTP request, configures a proxy server.
	hostname(config-phone-proxy)# proxy-server
	192.168.1.2 interface inside	You can configure only one proxy server while the
		phone proxy is in use.
		By default, the Phone URL Parameters configured
		under the Enterprise Parameters use an FQDN in the
		URLs. The parameters might need to be changed to
		use an IP address if the DNS lookup for the HTTP
		proxy does not resolve the FQDNs.
		Note If the IP phones have already downloaded
		their configuration files after you have
		configured the proxy server, you must restart
		the IP phones so that they get the
		configuration file with the proxy server
		address in the file.

Cisco ASA Series Firewall CLI Configuration Guide

16-25