Cisco Systems Creating the Phone Proxy Instance

52-18
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter52 Configuring the Cisco Phone Proxy
Configuring the Phone Proxy
Creating the Phone Proxy Instance
Create the phone proxy instance. To have a fully functional phone proxy, you must also complete
additional tasks, such as creating the MTA and enabling SIP and SCCP (Skinny) inspection. See Task
Flow for Configuring the Phone Proxy, page52-14 for the complete list of tasks.
Prerequisites
You must have already created the CTL file and TLS proxy instance for the phone proxy.
See Creating the CTL File, page 52-14 and Adding a TLS Proxy Instance, page53-8.
Note This feature is not supported for the Adaptive Security Appliance version 8.1.2.
Use the Configure Phone Proxy pane to add a Phone Proxy.
This pane is available from the Configuration > Firewall > Unified Communications > Phone Proxy
pane.
Step1 Open the Configuration > Firewall > Unified Communications > Phone Proxy pane.
Step2 Check the Enable Phone Proxy check box to enable the feature.
Step3 Check the Apply MTA instance to Phone Proxy check box to add the media termination address to the
Phone Proxy instance. You must have a media termination address instance configured. The configured
address is added to the Phone Proxy instance.
Note To configure the media termination address, click the Configure MTA button. The Media
Termination Address dialog box appears. Once you click the Add MTA instance to Phone Proxy
check box, the media termination address instance cannot be modified and the button changes to
View MTA Configuration. To change the media termination address, uncheck the Add MTA
instance to Phone Proxy check box.
Step4 If necessary, add a TFTP server for the Phone Proxy. To add a new TFTP server for the Phone Proxy,
click Add. The Add TFTP Server dialog box opens. See Adding or Editing the TFTP Server for a Phone
Proxy, page52-20.
Note The TFTP server must reside on the same interface as the Cisco Unified Call Manager. Additionally, If
NAT is configured for the TFTP server, the NAT configuration must be configured prior to configuring
the specifying the TFTP server while creating the Phone Proxy instance.
Step5 Specify the CTL File to use for the Phone Proxy by doing one of the following:
•To use an existing CTL File, check the Use the Certificate Trust List File generated by the CTL
instance check box.
•To create a new CTL file for the Phone Proxy, click the link Generate Certificate Trust List File. The
Create a Certificate Trust List (CTL) File pane opens. See “Creating the CTL File” section on
page 52-14.
Step6 To specify the security mode of the CUCM cluster, click one of the following options in the CUCM
Cluster Mode field: