/mcpProcedure Purpose Command or Action Complete Cisco IOS prerequisites. Perform this action if you want to configure Cisco IOS VPN. Complete Cisco IOS Prerequisites, on page 87 Step 1 Configure Cisco IOS for VPN client on an IP Phone. Perform this action if you want to configure Cisco IOS VPN. Configure Cisco IOS SSL VPN to Support IP Phones , on page 87 Step 2 Complete ASA prerequisites for AnyConnect. Perform this action if you want to configure ASA VPN. Complete ASA Prerequisites for AnyConnect, on page 89 Step 3 Configure ASA for VPN client on an IP Phone. Perform this action if you want to configure ASA VPN. Configure ASA for VPN Client on IP Phone, on page 89 Step 4 To avoid long delays when the user upgrades the firmware or configuration information on Configure the VPN concentrators for each VPN Gateway. Step 5 a remote phone, set up the VPN concentrator close in the network to the TFTP or Unified Communications Manager server. If this is not feasible in your network, you can set up an alternate TFTP or load server that is next to the VPN concentrator. Upload the VPN concentrator certificates. Upload VPN Concentrator Certificates, on page 92 Step 6 Configure the VPN gateways. Configure VPN Gateway, on page 92 Step 7 After you create a VPN group, you can add one of the VPN gateways that you just configured to it. Configure VPN Group, on page 93 Step 8 You must configure a VPN profile only if you have multiple VPN groups. The VPN Profile Perform one of the following: Step 9 • Configure VPN Profile, on page 94 fields take precedence over the VPN Feature Configuration fields. • Configure VPN Feature Parameters, on page 96 Add the VPN Group and VPN Profile to a Common Phone Profile. Add VPN Details to Common Phone Profile, on page 97 Step 10 To run the Cisco VPN client, a supported Cisco Unified IP Phone must be running firmware Upgrade the firmware for Cisco Unified IP Phone to a version that supports VPN. Step 11 release 9.0(2) or higher. For more information about upgrading the firmware, see Cisco Unified IP Phone Administration Guide for Unified Communications Manager for yourCisco Unified IP Phone model. Feature Configuration Guide for Cisco Unified Communications Manager, Release 15 and SUs 86 Remote Network Access VPN Client Configuration Task Flow