Support for SSL VPN client on 7942, 7945, 7962, 7965, and 7975

[John Platts]

I have noticed that the SSL VPN client capability was added to the 7942, 7945, 7962, 7965, and 7975G phones in phone load release 9.0(2). This feature is also supported on the SPA525G phones. The release notes for this phone load release can be found at the URL below:

http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/firmware/9_0_2/english/release/notes/7900_902SR1.html

The SSL VPN client is currently supported on the SPA525G phones on the UC500 platform. When will a 9.0(2) or later phone load for TNP phones be included in the UC500 software pack?

[Mohamed Shameer Fareed]

Hi

Can you please share some ASA and CME side configuration for this remote SSL vpn phone.

I have beed trying to acoomplish this for nearly a week now.

Certificate is properly authenticating between CME and ASA. even web Vpn is working fine.

But cannot get the phones to work from remote broadband home router.

As soon as i entered username/password, i get authentication fail message.

If i use a certificate authentication method do i need to enter user/pass under Vpn configuration menu. or the phones will just register automatically.

Thanks shameer

[seandickson]

Has anyone had any luck with this?  I am running into an issue that seems to be related to the use of an existing self-signed signature that is in use for other SSL VPN users.  Is there a way, on CUCME, to store a certificate and trust it on the IP phones?  I see this functionality on CUCM but I am having trouble finding a way to do this on CUCME.

Sean Dickson

[rick.mancinelli]

Back to the original question... does anyone know when SSL VPN capabilities for 79xx phones will be supported on the UC540/60?   This is TNP firmware 9.x.

Thanks in advance!

Rick

[paolo bevilacqua]

I don't know and don't comment the Cisco offical statement on the matter, but It should work fine especially with latest IOS, 12.4(4)M4.

There is a chapter about it, quite consuing and not so clear, in the Administrator Guide.

[rick.mancinelli]

Paolo-  the SPA 525 g2 is supported in the current UC5xx release, but my understanding is that the 79xx phones are not.   This support requires CME 8.5 and the UC5xx platform is still stuck on 8.0.x. 

The new release is supposed to be CME 8.6 (if it ever actually releases!) but I would like to hear from Cisco that SSL VPN for 79xx WILL or WILL NOT be supported.   I'm not ready to go on another Cisco led wild goose chase....

[paolo bevilacqua]

As mentioned in other threads, 8.6 is released as beta now and shortly to everyone..

I've still have to complete testing with a 7945 on the same identical IOS version, using an ISR router.

Once I have done that, I'll report here.

[kevinsoliz]

Any updates for offical spport for SSL VPN on 79xx phones on the UC500?   We have several situations where this would be extremely helpful.

[paolo bevilacqua]

From my understanding, it should work already.

The issue is that one has first to configure the phones as local secure phones, due to that onerous requirement, I haven't completed my testing yet.

[gregatatt]

Any new information/update on this topic?

If it is supported, is there a config doc available?

Thanks!

[ripratt]

Correction:   The Small Business Support Center does NOT support SSL VPN on the UC500 using a 79xx phone.   The only supported SSL VPN phone on the UC500 is a SPA525g(2).    We will NOT be able to assist a customer attempting to use a 79xx phone for a SSL VPN connection either via CCA or CLI.

Thanks....Richard....SBSC supervisor.

[gregclarkson]

As we might not receive the same level of help as you did given it is not officially supported, can you please provide configuration examples for us to follow?

thanks in advance.

[ABCNewsRadioNYC]

+1 for a sample config.

[fredsson1]

i would love to see a sample config, too.

thanks in andvance. This topic is still relevant for me.