Configuring cisco intercompany media engine proxy – Cisco ASA 5505 User Manual
Page 1099
52-11
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter 52 Configuring Cisco Intercompany Media Engine Proxy
Configuring Cisco Intercompany Media Engine Proxy
Configuring Cisco Intercompany Media Engine Proxy
This section contains the following topics:
•
Task Flow for Configuring Cisco Intercompany Media Engine, page 52-11
•
Configuring NAT for Cisco Intercompany Media Engine Proxy, page 52-12
•
Configuring PAT for the Cisco UCM Server, page 52-14
•
Creating Access Lists for Cisco Intercompany Media Engine Proxy, page 52-16
•
Creating the Media Termination Instance, page 52-17
•
Creating the Cisco Intercompany Media Engine Proxy, page 52-18
•
Creating Trustpoints and Generating Certificates, page 52-21
•
Creating the TLS Proxy, page 52-24
•
Enabling SIP Inspection for the Cisco Intercompany Media Engine Proxy, page 52-25
•
(Optional) Configuring TLS within the Local Enterprise, page 52-27
•
(Optional) Configuring Off Path Signaling, page 52-30
Task Flow for Configuring Cisco Intercompany Media Engine
Figure 52-6
provides an example for a basic deployment of the Cisco Intercompany Media Engine. The
following tasks include command line examples based on
Figure 52-6
.
Figure 52-6
Example for Basic (in-line) Deployment Tasks
Note
Step 1
through
Step 8
apply to both basic (in-line) and off path deployments and
Step 9
applies only to
off path deployment.
To configure a Cisco Intercompany Media Engine for a basic deployment, perform the following tasks.
Step 1
Configure static NAT for Cisco UCM. See
Configuring NAT for Cisco Intercompany Media Engine
Proxy, page 52-12
.
Internet
Remote Enterprise
Local
Cisco UCMs
Local ASA
Corporate
Network
Remote
Cisco UCM
Remote ASA
Local Enterprise
IP
IP
IP
192.168.10.30
192.168.10.31
192.168.10.12
ASA inside
interface
192.168.10.1
Inside media
termination
192.168.10.3
Outside media termination
209.165.200.226
Outside Cisco UMC
209.165.200.228
TLS
TCP
24
8
764
Local
UC-IME
Server
Remote
UC-IME
Server
M
M
UC-IME
Bootstrap
Server
ASA outside interface
209.165.200.225
M