20-11
Cisco ASA Series Firewall CLI Configuration Guide
Chapter20 Configuring Cisco Intercompany Media Engine Proxy
Configuring Cisco Intercompany Media Engine Proxy
Note Step 1 through Step 8 apply to both basic (in-line) and off path deployments and Step9 applies only to
off path deployment.
To configure a Cisco Intercompany Media Engine for a basic deployment, perform the following tasks.
Step1 Configure static NAT for Cisco UCM. See Configuring NAT for Cisco Intercompany Media Engine
Proxy, page20-11.
Or
Configure PAT for the UCM server. See Configuring PAT for the Cisco UCM Server, page20-13.
Step2 Create ACLs for Cisco Intercompany Media Engine Proxy. See Creating ACLs for Cisco Intercompany
Media Engine Proxy, page 20-15.
Step3 Create the media termination address instance for Cisco Intercompany Media Engine Proxy. See
Creating the Media Termination Instance, page20-16.
Step4 Create the Cisco Intercompany Media Engine Proxy. See Creating the Cisco Intercompany Media
Engine Proxy, page20-17.
Step5 Create trustpoints and generate certificates for the Cisco Intercompany Media Engine Proxy. See
Creating Trustpoints and Generating Certificates, page20-20.
Step6 Create the TLS proxy. See Creating the TLS Proxy, page20-23.
Step7 Configure SIP inspection for the Cisco Intercompany Media Engine Proxy. See Enabling SIP Inspection
for the Cisco Intercompany Media Engine Proxy, page20-24.
Step8 (Optional) Configure TLS within the enterprise. See (Optional) Configuring TLS within the Local
Enterprise, page 20-26.
Step9 (Optional) Configure off path signaling. See (Optional) Configuring Off Path Signaling, page20-29.
Note You only perform Step9 when you are configuring the Cisco Intercompany Media Engine Proxy
in an off path deployment.
Configuring NAT for Cisco Intercompany Media Engine Proxy
To configure auto NAT, you first configure an object; then use the nat command in the object
configuration mode.
The example command lines in this task are based on a basic (in-line) deployment. See Figure20-5 on
page 20-10 for an illustration explaining the example command lines in this task.
Alternatively, you can configure PAT for the Cisco Intercompany Media Engine Proxy. See Configuring
PAT for the Cisco UCM Server, page 20-13.