Cisco ASA 5505 - Manual (Page 1120)

52-32
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter 52 Configuring Cisco Intercompany Media Engine Proxy
Configuring Cisco Intercompany Media Engine Proxy
Step 2 Check the Enable Cisco UC-IME proxy check box to enable the feature.
Step 3 In the Unified CM Servers area, enter an IP address or hostname for the Cisco Unified Communications
Manager (Cisco UCM) or click the ellipsis to open a dialog and browse for an IP address or hostname.
Step 4 In the Trunk Security Mode field, click a security option. Specifying secure for Cisco UCM or Cisco
UCM cluster indicates that Cisco UCM or Cisco UCM cluster is initiating TLS.
Step 5 Click Add to add the Cisco UCM for the Cisco Intercompany Media Engine Proxy. You must include an
entry for each Cisco UCM in the cluster with Cisco Intercompany Media Engine that has a SIP trunk
enabled.
Step 6 In the Ticket Epoch field, enter an integer from 1-255.
The epoch contains an integer that updates each time that the password is changed. When the proxy is
configured the first time and a password entered for the first time, enter 1 for the epoch integer. Each
time you change the password, increment the epoch to indicate the new password. You must increment
the epoch value each time your change the password.
Typically, you increment the epoch sequentially; however, the ASA allows you to choose any value when
you update the epoch.
If you change the epoch value, the current password is invalidated and you must enter a new password.
Note The epoch and password that you configure in this step on the ASA must match the epoch and password
that you configure on the Cisco Intercompany Media Engine server. See the Cisco Intercompany Media
Engine server documentation for information.
Step 7 In the Ticket Password field, enter a minimum of 10 printable character from the US-ASCII character
set. The allowed characters include 0x21 to 0x73 inclusive, and exclude the space character. The ticket
password can be up to 64 characters. Confirm the password you entered. Only one password can be
configured at a time.
Step 8 Check the Apply MTA to UC-IME Link proxy check box to associate the media termination address with
the Cisco Intercompany Media Engine Proxy.
Note You must create the media termination instance before you associate it with the Cisco
Intercompany Media Engine Proxy. If necessary, click the Configure MTA button to configure a
media termination address instance.
Step 9 If the Cisco Intercompany Media Engine Proxy is being configured as part of off path deployment, check
the Enable off path address mapping service checkbox and configure the off path deployment settings:
a. From the Listening Interface field, select an ASA interface. This is the interface on which the ASA
listens for the mapping requests.
b. In the Port field, enter a number between 1024 and 65535 as the TCP port on which the ASA listens
for the mapping requests. The port number must be 1024 or higher to avoid conflicts with other
services on the device, such as Telnet or SSH. By default, the port number is TCP 8060.
c. From the UC-IME Interface field, select an interface from the list. This is the interface that the ASA
uses to connect to the remote Cisco UCM.