Cisco SPA501G Administration Guide - Page 151

Configuring Security, Quality, and Network Features Configuring SSL VPN on the Cisco SPA525G or Cisco SPA525G2 5 Configuring SSL VPN on the Cisco SPA525G or Cisco SPA525G2 The Cisco SPA525G or Cisco SPA525G2 can be used in a virtual private network (VPN) to allow users secure access to the office phone network from remote locations or to connect the Internet and use VPN to access the company phone network. This feature works on the Cisco SPA525G or Cisco SPA525G2 using either SIP or SPCP. The phone works with the Cisco AnyConnect VPN client and the following VPN devices: • Cisco 500 Series Secure Router • Cisco 5500 Series Adaptive Security Appliance • Cisco Unified Communications 520 Series You must configure the SSL VPN device to ensure proper routing of voice data by using VLAN and QoS at the end of the SSL VPN server. The following restrictions apply: • HTTP proxy is not supported. • SSL client certificate verification is not supported. • CDP and VLAN tagging and QoS for the voice and PC port are not supported on the SSL VPN tunnel. Because using VPN requires internal phone resources, performance can suffer if using memory-intensive applications or configurations on the phone when the phone is connected to the VPN. The following restrictions apply: • Only the G.711 Audio Codec is supported. • SRTP for secured audio is not supported. • Video monitoring is not supported. To configure and use the Cisco SPA525G or Cisco SPA525G2 on a VPN, you must do the following: 1. Configure the VPN on the VPN server by using Cisco AnyConnect VPN client software. 2. Configure the VPN administrative settings on the IP phone by using the phone web user interface. Cisco Small Business SPA300 Series, SPA500 Series, and WIP310 IP Phone Administration Guide 150