Remote Phone connectivity with VPN on Cisco Router 2911

[Khurram Tariq]

Dear all 

we have configured IP sec vpn on cisco router for voice and video purpose, clients used laptops outside the network can register Soft phones through VPN.

we are using CUCM with cisco voice router 2911.

now we want to use phone 7945G on the remote site where only internet is available, how can we connect that phone over vpn so that it can register to cucm.

please help me

[Jaime Valencia]

The CUCM security guide has all the steps and requirements for phone VPN, have you reviewed it???

[Alyza Marie Reyes]

Hi Khurram,

You will need a site to site VPN connection for you to be able to connect your IP phones to your CUCM. What VPN appliance are you currently using on the remote site? You can use a firewall or a VPN enabled router for you to achieve this. You can check the link provided as an example or for your reference.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/115945-config-sslvpn-ip-phones-00.html

Hope this helps!

If you need further assistance, let me know.

Kind regards.

[Khurram Tariq]

hello alyza

we are already using IPSEC vpn which is configured on our  router 2911 and people can register phone through this vpn. but i am confused how to add this vpn in cucm and how phone will be configured for this,,,

you both please help me

[Alyza Marie Reyes]

Hi Khurram,

Given that information, please refer to this CUCM security guide for configuration.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/9_1_1/secugd/CUCM_BK_C0395F44_00_cucm-security-guide-91.html

Let me know if you have additional questions.

[Dennis Mink]

Why are you not using a site to site VPN, as mentioned earlier. This will take the burden of running IPSEC on each individual endpoint. With Site to site VPN you wouldnt need to change any security paramters on CUCM. Just make sure the phones in your remote site have connectivity to CUCM and vice versa.

[Khurram Tariq]

hello alyze and jaime

i have study security guide and follow that steps for connectivity but when i upload certificate of IOS which i got from call manager it gives me error . i have attached screenshot of that error please review and suggest

[kapil.atrish]

It is not something documented as supported. See below:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/115945-config-sslvpn-ip-phones-00.html#anc8

Basic IOS SSL VPN Configuration

Note: IP phones are designated as not supported in IOS SSL VPN; configurations are in best effort only.