Comments for angryciscoguy

Comment on Cisco ASA Phone Proxy Configuration by Cornloaf

Cornloaf — Mon, 16 Aug 2010 12:02:22 +0000

Wow… I have succesfully setup the ASA Phone Proxy so many times for clients but I was having a heck of a time when trying to set it up for my own network. I was configuring it on my ASA5510 running 8.2 code and for some reason the phones would get all the firmware files, download the CTL file, and then just sit on “registering”. Sometimes they would reboot and download all the files again. I had all the commands in notepad to quickly remove every trace of Phone Proxy and then I would start all over (via ASDM and CLI) and it would fail. I came across your site and looked over all your lines of config thinking to myself “yeah… yeah… did that… yeah… pfff… did that…” and then my brain told me to back up and look at one of your first lines :

ssl encryption 3des-sha1 des-sha1 rc4-md5 aes256-sha1 aes128-sha1 null-sha1 rc4-sha1

I entered the command and immediately my phone went to screensaver. It’s working! IT’S F’ING WORKING!

No idea why my device did not have this command. It came directly from Cisco with 3DES already active. Anyway, thanks for posting this, it really saved me lots of time!

Comment on Cisco ASA Phone Proxy Configuration by Mike

Mike — Sat, 24 Jul 2010 00:09:23 +0000

FYI,
Cisco does not publish this little fact anywhere but you can’t setup a second ASA when you are using the local CA. It’s the first thing that fails when you try to setup your redundant ASA. I went back and forth with TAC until they finally found an internal email that stated this will not work and they have no plans of fixing. You can do it but you have to use 3rd party certs.

Comment on Cisco UC on UCS DocWiki by Push Bhatkoti

Push Bhatkoti — Sat, 26 Jun 2010 11:16:25 +0000

Yeah, UC on UCS is coming in a big way. Currently C-series blades are available for sale but as you said the implementation will be first supported on B-Series.

For small size company B-Series is going to be definitely overkill.

–push

Comment on Cisco ASA Phone Proxy Configuration by Steve

Steve — Mon, 22 Mar 2010 21:34:50 +0000

Finally got the Services/Directory/Ext Mob working after searching high and low, in the end resorted to trial and error…

My Setup
CUCM Internal IP: 192.168.31.5
CUCM External IP: 1.2.3.4

This is what worked for me.
proxy-server 1.2.3.4 interface inside

So that is the external IP combined with the internal interface.

Hope this helps someone.

Comment on Cisco ASA Phone Proxy Configuration by Tim

Tim — Mon, 08 Mar 2010 02:10:07 +0000

Nahh this thing isn;t going for me well..

Comment on Cisco ASA Phone Proxy Configuration by Tim

Tim — Mon, 08 Mar 2010 01:35:24 +0000

It seems I can;t get it straight.. It must be long hours of trying this ..

asa(config-ca-trustpoint)# crypto ca enroll phoneproxy_trustpoint
ERROR: CA server trustpoint ‘phoneproxy_trustpoint’ is not known.
asa(config)#

Comment on Cisco ASA Phone Proxy Configuration by tim

tim — Mon, 08 Mar 2010 00:39:57 +0000

Actually I am using the 8.2 version.. I’ll downgrade to 8.0.4..

Thanks

Comment on Cisco ASA Phone Proxy Configuration by Angry Cisco Guy

Angry Cisco Guy — Mon, 08 Mar 2010 00:34:48 +0000

Make sure you are running the same asa version as specified in the example. If you are running the newer 8.2 version of ASA the commands have slightly changed.

Comment on Cisco ASA Phone Proxy Configuration by Tim

Tim — Sun, 07 Mar 2010 05:12:51 +0000

I’m stuck here:

ctl-file ctl_phoneproxy_file

Is not taking the ctl-file command, the only options for ctl I have is ctl-provider…

Anyone ?

Thx
Tim

Comment on Cisco ASA Phone Proxy Configuration by Issac Maez

Issac Maez — Sat, 06 Mar 2010 06:30:58 +0000

Thanks for this post, answers a bunch of questions I was having.