Cisco ASA 5505 - Manual (Page 1007)

48-25
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter 48 Configuring the Cisco Phone Proxy
Configuring the Phone Proxy
What to Do Next
Once you have created the phone proxy instance, configuring SIP and Skinny for the phone proxy. See
Enabling the Phone Proxy with SIP and Skinny Inspection, page 48-25 .
Enabling the Phone Proxy with SIP and Skinny Inspection
Enables the phone proxy instance that you created to inspect SIP and Skinny protocol traffic.
Prerequisites
You must have already created the phone proxy instance. See Creating the Phone Proxy Instance,
page 48-23 .
Step 7 hostname(config-phone-proxy)# cipc security-mode
authenticated
(Optional) Forces Cisco IP Communicator (CIPC)
softphones to operate in authenticated mode when
CIPC softphones are deployed in a voice and data
VLAN scenario.
See Cisco IP Communicator Prerequisites,
page 48-10 for all requirements for using the phone
proxy with CIPC.
Step 8 hostname(config-phone-proxy)# no disable
service-settings
(Optional) Preserve the settings configured on the
Cisco UCM for each IP phone configured.
By default, the following settings are disabled on the
IP phones:
• PC Port
• Gratuitous ARP
• Voice VLAN access
• Web Access
• Span to PC Port
Command Purpose
Command Purpose
Step 1 hostname(config)# class-map class_map_name
Example:
class-map sec_sccp
Configures the secure Skinny class of traffic to
inspect. Traffic between the Cisco Unified
Communications Manager and Cisco IP Phones uses
SCCP and is handled by SCCP inspection.
Where class_map_name is the name of the Skinny
class map.
Step 2 hostname(config-cmap)# match port tcp eq 2443 Matches the TCP port 2443 to which you want to
apply actions for secure Skinny inspection.
Step 3 hostname(config-cmap)# exit Exits from the Class Map configuration mode.