/mcpPurpose Command or Action Configure ASA for VPN client on an IP Phone. Perform this action if you want to configure ASA VPN. Configure ASA for VPN Client on IP Phone, on page 285 Step 4 To avoid long delays when the user upgrades the firmware or configuration information on a remote phone, set up the Configure the VPN concentrators for each VPN Gateway. Step 5 VPN concentrator close in the network to the TFTP or Unified Communications Manager server. If this is not feasible in your network, you can set up an alternate TFTP or load server that is next to the VPN concentrator. Upload the VPN concentrator certificates. Upload VPN Concentrator Certificates, on page 287 Step 6 Configure the VPN gateways. Configure VPN Gateway, on page 288 Step 7 After you create a VPN group, you can add one of the VPN gateways that you just configured to it. Configure VPN Group, on page 289 Step 8 You must configure a VPN profile only if you have multiple VPN groups. The VPN Profile fields take precedence over the VPN Feature Configuration fields. Perform one of the following: Step 9 • Configure VPN Profile, on page 290 • Configure VPN Feature Parameters, on page 291 Add the VPN Group and VPN Profile to a Common Phone Profile. Add VPN Details to Common Phone Profile, on page 293 Step 10 To run the Cisco VPN client, a supported Cisco Unified IP Phone must be running firmware release 9.0(2) or Upgrade the firmware for Cisco Unified IP Phone to a version that supports VPN. Step 11 higher. For more information about upgrading the firmware, see Cisco Unified IP Phone Administration Guide for Unified Communications Manager for yourCisco Unified IP Phone model. Connect your Cisco Unified IP Phone to a VPN. Using a supported Cisco Unified IP Phone, establish the VPN connection. Step 12 Complete Cisco IOS Prerequisites Use this procedure to complete Cisco IOS Prerequisites. Procedure Step 1 Install Cisco IOS Software version 15.1(2)T or later. Feature Set/License: Universal (Data & Security & UC) for IOS ISR-G2 and ISR-G3 Feature Set/License: Advanced Security for IOS ISR Step 2 Activate the SSL VPN License. Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 282 Advanced System Security Complete Cisco IOS Prerequisites