Cisco 5505 - ASA Firewall Edition Bundle, Руководство по настройке CLI

Страница: 1224 / 2164

1-26
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the Cisco Phone Proxy
Configuring the Phone Proxy
What to Do Next
Once you have created the phone proxy instance, configuring SIP and Skinny for the phone proxy. See
Enabling the Phone Proxy with SIP and Skinny Inspection, page 1-26 .
Enabling the Phone Proxy with SIP and Skinny Inspection
Enables the phone proxy instance that you created to inspect SIP and Skinny protocol traffic.
Prerequisites
You must have already created the phone proxy instance. See Creating the Phone Proxy Instance,
page 1-24 .
Step 7
hostname(config-phone-proxy)# cipc security-mode
authenticated
(Optional) Forces Cisco IP Communicator (CIPC)
softphones to operate in authenticated mode when
CIPC softphones are deployed in a voice and data
VLAN scenario.
See Cisco IP Communicator Prerequisites,
page 1-10 for all requirements for using the phone
proxy with CIPC.
Step 8
hostname(config-phone-proxy)# no disable
service-settings
(Optional) Preserve the settings configured on the
Cisco UCM for each IP phone configured.
By default, the following settings are disabled on the
IP phones:
•
PC Port
•
Gratuitous ARP
•
Voice VLAN access
•
Web Access
•
Span to PC Port
Command Purpose
Command Purpose
Step 1
hostname(config)# class-map class_map_name
Example:
class-map sec_sccp
Configures the secure Skinny class of traffic to
inspect. Traffic between the Cisco Unified
Communications Manager and Cisco IP Phones uses
SCCP and is handled by SCCP inspection.
Where class_map_name is the name of the Skinny
class map.
Step 2
hostname(config-cmap)# match port tcp eq 2443
Matches the TCP port 2443 to which you want to
apply actions for secure Skinny inspection.
Step 3
hostname(config-cmap)# exit
Exits from the Class Map configuration mode.