Configuring Cisco 8800 phones for VPN

[carlosalmonte]

Does anyone know how to configure 8800 phones for VPN?  I am particularly interested on 8861/8851 models.

Thanks,

Carlos

[Jaime Valencia]

The CUCM security guide covers the phone VPN feature, have you reviewed it???

[carlosalmonte]

Hi Jaime,

Thank you for your reply.  I already checked the security guide.  We have already deployed 7965 VPN phones successfully.  We are testing these new models (8861/8851) and I can't get them registered through VPN, using the same profile as the 7965s.  According to the guide there should be no difference.  Do I have to do something different for these phones?

Thanks,

Carlos

[carlosalmonte]

So I opened a TAC case and they provided me with the solution:

"Usually you upload the Cisco_Manufacturing_CA certificate on the ASA but with the new models we should upload the Cisco_Manufacturing_CA_SHA2 creating a new trustpoint on the ASA"

The security guide does not specify about this cert, it only mentions Cisco_Manufacturing_CA .

Thanks,

Carlos

[itsupport]

Can you provide more details? Thanks