96xx VPN with ASA 5506

[bdelmar]

Anyone have this setup working? Ive gotten the phones to work with other older ASA devices but having problems with this 5506. If so can you share your settings for the ASA.

Problem Im getting is Aborting Connection: IKEv1 RA client which did not request an assigned IP is attempting to establish a phase 2 SA

Its aborting the connection because the phone isnt requesting an address which the 96xx phones do.

 

[stownsend]

We have several 5506 units that make the VPN Connection to the Corp Office and then just have the 5610 Phone (We do not have any 96xx) at the remote office connect though the 5506's VPN Connection. So the Phone itself is not doing the VPN. The ASA 5506 is connecting to a ASA5525 at the head end.

Here is the Config we have in the 5506 to setup the 5610

dhcpd dns 192.168.0.1
dhcpd ping_timeout 750
dhcpd auto_config outside
dhcpd option 176 ascii MCIPADD=10.1.0.40,MCPORT=1719,TFTPSRVR=10.1.0.12
dhcpd option 7 ascii 10.1.0.12
!
dhcpd address 192.168.10.50-192.168.0.200 inside
dhcpd enable inside

...

class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum client auto
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect ftp 
  inspect http 
  inspect ils 
  inspect rsh 
  inspect rtsp 
  inspect skinny  
  inspect sunrpc 
  inspect tftp 
  inspect xdmcp 
  inspect netbios 
  inspect dns preset_dns_map 
!

We also had to change the DSCP settings on the IPO. Our ISP was filtering Packets with DSCP 42 (I think that was the default). We could get the same setup working with another ISP, though had to change it to make it work with All the remote Office ISPs.

This is our settings in System, LAN1, VoIP