Secure communication between phone and CUCM

[Federico Coto Fajardo]

Hi,

I'm aware that you can configure Phone Proxy to encrypt the voice between IP phones and CUCM but this client is asking about a feature that allows a secure communication between a phone and the CUCM directly (without an ASA). Is there such a feature? Can't find it... thanks!

Federico.

[David Hailey]

Take a look here - it's a process by which you install a security certificate on the phones and allows signaling encryption, etc.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/7_0_1/secugd/secuphne.html#wp1044280

Hailey

[srsivara · Accepted solution]

There is also Phone VPN (on CUCM 8.0) :

https://supportforums.cisco.com/docs/DOC-9124

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/8_0_2/secugd/secuvpn.html

Hope this helps.

- Sriram

[Federico Coto Fajardo]

Thank you the Phone VPN seems to be what we're looking for...

Just to make sure...

This feature allows the calls to go through SSL (without any ASA) correct?

I've found this:

http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7975G_7971g-ge_7970g_7965g_7945g/8_0/english/administration/guide/7970set.html#wp1271763

Federico.

[Federico Coto Fajardo]

I guess my question is if the SSL VPN connection from the phone terminates on the CUCM itself or requieres an ASA to terminate the AnyConnect

connection. There's no ASA, so the're looking for a VPN connection from the phones to the CUCM directly (if possible).

Federico.

[David Hailey · Accepted solution]

Even without ASA, the phone's SSL VPN connection would need to terminate on some sort of VPN concentrator.  The CUCM does not directly terminate VPN connections.

Hailey

[Federico Coto Fajardo]

Great, thank you guys.

Federico.