ASA 5520 (9.1(5)21 IPSEC Passthrogh

[sdawson35]

Hi,

Not your usual question , We have an Avaya phone (9608) that needs to go out to the internet to create a VPN connection , between the phone and the internet is a Cisco ASA 5520 . We don't want this ASA to get in the way of the phone making this internet vpn connection however it does seem to be, we do have nat in place though.

Has anybody had this kind of requirement before and did they resolve it ?.

Regards

Scott. 

[Mohammed al Baqari]

Hi,

This is a common requirement. Cisco phones has this feature and they use AnyConnect VPN (port 443) to connect to their telephony environment. 

I am assuming that your Avaya phone is using encryption while talking to avaya call manager. If that is the case, then you need to allow the required ports only. NAT is usually tricky therefore you need to make sure that you have your phone NAT aware by enabling the required options