VPN configuration in CUCM 8.6

[Mohammed Asif C Y]

Hi Team,

I want to configure VPN in CUCM 8.6 so that users who are connected to VPN using IP Phone or Jabber client on iPhone can access VOIP features.

What is the best way to achieve this feature?

Regards

MAC

[Chris Deren]

These are 2 completely separate connection as hard IP phone connects via built in VPN client via ASA via one of 3 authentication methos (cert, user/password, password only) and Jabber connects via cisco anyconnect client on iPhone also via ASA similarly to regular PC VPN connection.  There are quite a few threads here on these topics and severely very good document, just search for "VPN phone".

HTH,

Chris

[Mohammed Asif C Y]

Hi Chris,

In my 79xx phone i checked that VPN is available but when i try to access that it says That key is not activated. How do i enable this feature?

Regards

MAC

[Chris Deren · Accepted solution]

You need to configure ASA for it and have appropriate anyconnect client licenses. Upload ASA certs to CUCM and similarly upload CUCM certs to ASA (for cert based authentication) then configure phone VPN features such as groups, profiles, etc in CUCM. Here are some nice docs:

https://supportforums.cisco.com/docs/DOC-21469

https://supportforums.cisco.com/docs/DOC-9124

The CUCM Security guide has steps for this as well.

If you search this forum for "phone VPN" there have been a lot of good threads on this topic.

HTH, please rate all useful posts!

Chris

[Jaime Valencia]

Have you already gone thru all the configuration that is required for phone VPN??

If not, you may review all the steps in the CUCM security guide for the version you're running, all of them are available on CCO. Just search communications manager security guide.

HTH

java

if this helps, please rate

www.cisco.com/go/pdihelpdesk