cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
436
Views
1
Helpful
2
Replies

IP Phone SPA525G with ASA 5520 and Asterisk

leoruben2308
Beginner
Beginner

Hi,

I am planning on using a number of these IP phones at users homes, from where they can connect over the VPN client built into the phone to the ASA 5520, then once connected to the network, they can be configured to work with Asterisk.

I have attained the licensing required on the ASA as you can see below;

Licensed features for this platform:

Maximum Physical Interfaces    : Unlimited

Maximum VLANs                  : 150      

Inside Hosts                   : Unlimited

Failover                       : Active/Active

VPN-DES                        : Enabled  

VPN-3DES-AES                   : Enabled  

Security Contexts              : 2        

GTP/GPRS                       : Disabled 

SSL VPN Peers                  : 10       

Total VPN Peers                : 750      

Shared License                 : Disabled

AnyConnect for Mobile          : Disabled 

AnyConnect for Cisco VPN Phone : Enabled  

AnyConnect Essentials          : Disabled 

Advanced Endpoint Assessment   : Disabled 

UC Phone Proxy Sessions        : 2        

Total UC Proxy Sessions        : 2        

Botnet Traffic Filter          : Disabled 

The problem I am having, is when I try and connect to the VPN from one of the IP phones, using an Anyconnect SSL connection I have configured on the ASA, I get "Failed to obtain WebVPN cookie" and it does not connect.

I have already looked at this guide https://supportforums.cisco.com/docs/DOC-21469 - but it does not really help as this only describes the process of sorting out the certificates with a CUCM, however I am using Asterisk as the call manager.

Can someone please explain what needs to be done to get this working? I have tried to search for answers but not getting anywhere, I cant find anything online about this.

Thanks,

Leo

2 Replies 2

paolo bevilacqua
Hall of Fame Master Hall of Fame Master
Hall of Fame Master

Cisco supports this architecture with CM and CME only.

If you using a different platforum, unfortunately you're on your own.

Hi Paolo,

I know that that you can use the Cisco SPA5xxx with Asterisk, as it describes the process in this official Cisco document;

http://www.scribd.com/doc/122825506/SPA5xx-Asterisk-ZeroTouch-04202010-II-1.

If Asterisk is supported as It looks like, is there a process somehow of getting the VPN on the phone to connect to our network in this setup?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers