Configuring The Vpn On The Security Appliance - Cisco SPA303 Administration Manual

Configuring Security, Quality, and Network Features
Configuring SSL VPN on the Cisco SPA525G/525G2
NOTE
Cisco Small Business SPA300 Series, SPA500 Series, and WIP310 IP Phone Administration Guide
The Cisco SPA525G/525G2 works with the Cisco AnyConnect VPN client and the
following VPN devices:
• Cisco 500 Series Secure Router
• Cisco 5500 Series Adaptive Security Appliance
• Cisco Unified Communications 520 Series
You must configure the SSL VPN device to ensure proper routing of voice data
with desired VLAN and QoS at the end of the SSL VPN server. The following
restrictions apply:
• HTTP proxy is not supported.
• SSL client certificate verification is not supported.
• CDP and VLAN tagging and QoS for the voice and PC port are not
supported on the SSL VPN tunnel.
Because using the VPN requires internal phone resources, performance can suffer
if using memory-intensive applications or configurations on the phone when the
phone is connected using the VPN. The following restrictions apply:
• Only the G.711 Audio Codec is supported.
• SRTP for secured audio is not supported.
• Video monitoring is not supported.
To configure and use the Cisco SPA525G/525G2 on a VPN, you must do the
following:
1. Configure the VPN on the VPN server using Cisco AnyConnect VPN client
software.
2. Configure the VPN administrative settings on the Cisco SPA500 Series IP phone
using the configuration utility.
3. Configure the VPN user settings using the configuration utility or on the IP phone
using the phone menu.

Configuring the VPN on the Security Appliance

Specific configuration instructions are not presented in this document. For detailed
instructions for your particular device, see the application notes in the
Business Support Community.
5
Cisco Small
156