IP Phone SPA525G with ASA 5520 and Asterisk

[leoruben2308]

Hi,

I am planning on using a number of these IP phones at users homes, from where they can connect over the VPN client built into the phone to the ASA 5520, then once connected to the network, they can be configured to work with Asterisk.

I have attained the licensing required on the ASA as you can see below;

Licensed features for this platform:

Maximum Physical Interfaces    : Unlimited

Maximum VLANs                  : 150      

Inside Hosts                   : Unlimited

Failover                       : Active/Active

VPN-DES                        : Enabled  

VPN-3DES-AES                   : Enabled  

Security Contexts              : 2        

GTP/GPRS                       : Disabled 

SSL VPN Peers                  : 10       

Total VPN Peers                : 750      

Shared License                 : Disabled

AnyConnect for Mobile          : Disabled 

AnyConnect for Cisco VPN Phone : Enabled  

AnyConnect Essentials          : Disabled 

Advanced Endpoint Assessment   : Disabled 

UC Phone Proxy Sessions        : 2        

Total UC Proxy Sessions        : 2        

Botnet Traffic Filter          : Disabled 

The problem I am having, is when I try and connect to the VPN from one of the IP phones, using an Anyconnect SSL connection I have configured on the ASA, I get "Failed to obtain WebVPN cookie" and it does not connect.

I have already looked at this guide https://supportforums.cisco.com/docs/DOC-21469 - but it does not really help as this only describes the process of sorting out the certificates with a CUCM, however I am using Asterisk as the call manager.

Can someone please explain what needs to be done to get this working? I have tried to search for answers but not getting anywhere, I cant find anything online about this.

Thanks,

Leo

[paolo bevilacqua]

Cisco supports this architecture with CM and CME only.

If you using a different platforum, unfortunately you're on your own.

[leoruben2308]

Hi Paolo,

I know that that you can use the Cisco SPA5xxx with Asterisk, as it describes the process in this official Cisco document;

http://www.scribd.com/doc/122825506/SPA5xx-Asterisk-ZeroTouch-04202010-II-1.

If Asterisk is supported as It looks like, is there a process somehow of getting the VPN on the phone to connect to our network in this setup?