![background image](http://html.mh-extra.com/html/cisco/5505-asa-firewall-edition-bundle/5505-asa-firewall-edition-bundle_cli-configuration-manual_186241231.webp)
1-33
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the Cisco Phone Proxy
Troubleshooting the Phone Proxy
•
Check the Security settings on the IP phone by selecting the
Settings
button > Security
Configuration. Settings for web access, Security mode, MIC, LSC, CTL file, trust list, and CAPF
appear. Under Security mode, make sure the IP phone is set to Encrypted.
•
Check the IP phone to determine which certificates are installed on the phone by selecting the
Settings
button > Security Configuration > Trust List. In the trustlist, verify the following:
–
Make sure that there is an entry for each entity that the IP phone will need to contact. If there
is a primary and backup Cisco UCM, the trustlist should contain entries for each Cisco UCM.
–
If the IP phone needs an LSC, the record entry should contain a CAPF entry.
–
Make sure that the IP addresses listed for each entry are the mapped IP addresses of the entities
that the IP phone can reach.
•
Open a web browser and access the IP phone console logs at the URL
http://
IP_phone_IP
address
. The device information appears in the page. In the Device Logs section in the left pane,
click Console Logs.
IP Phone Registration Failure
The following errors can make IP phones unable to register with the phone proxy:
•
TFTP Auth Error Displays on IP Phone Console, page 1-33
•
Configuration File Parsing Error, page 1-34
•
Configuration File Parsing Error: Unable to Get DNS Response, page 1-34
•
Non-configuration File Parsing Error, page 1-35
•
Cisco UCM Does Not Respond to TFTP Request for Configuration File, page 1-35
•
IP Phone Does Not Respond After the Security Appliance Sends TFTP Data, page 1-36
•
IP Phone Requesting Unsigned File Error, page 1-37
•
IP Phone Unable to Download CTL File, page 1-37
•
IP Phone Registration Failure from Signaling Connections, page 1-38
•
SSL Handshake Failure, page 1-40
•
Certificate Validation Errors, page 1-41
TFTP Auth Error Displays on IP Phone Console
Problem
The IP phone displays the following Status message:
TFTP Auth Error
Solution
This Status message can indicate a problem with the IP phone CTL file.
To correct problems with the IP phone CTL file, perform the following:
Step 1
From the IP phone, select the
Setting
button > Security Configuration > Trust List. Verify that each
entity in the network—Primary Cisco UCM, Secondary Cisco UCM, TFTP server—has its own entry in
the trustlist and that each entity IP address is reachable by the IP phone.
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......