VPN Phones from 8.x and 9.x cluster to one ASA

[Thomas Harshman]

I am doing a parallel migration and have both clusters for CM, UNity, UCCX and CER up and running. I have already moved some users and phones over to the new cluster. I now am at the point of working with VPN phone users. Can I build a second group on the ASA and laod hte 9.x certs to IOS and have phones from each cluster port through one firewall? Cisco uses extensively "CONTEXTS" now and thought this would apply to CUCM VPN solution as well.

Does TAC support this configuration?

Cluster ONE - 8.x

Cluster NEW - 9.x

ASA 5500 HA pair servicing 8.x only currently. Need 9.x to use same as well

[Kevin Roarty]

Yes, the users of multiple UCM clusters can share the same ASA for remote access VPN.  I'm not aware of any reason why TAC would not support this model.

-Kevin

[Thomas Harshman]

Kevin,

Thanks for the reply. I thought as much. I think another Cisco rep for General Electric was just sharing with us the possible concerns.

~also sorry for the typos in the initial post. I can see it was Thursday and I was off Friday so was hasty!