/mcpDefinition Field This field specifies the amount of time to wait for login or connect operations to complete while the system creates the VPN tunnel. Default: 30 seconds Fail to Connect When you check this check box, the gateway certificate subjectAltName or CN must match the URL to which the VPN client is connected. Default: Enabled Enable Host ID Check From the drop-down list, choose the client authentication method: • User and password • Password only • Certificate (LSC or MIC) Client Authentication Method When you check this check box, a user password gets saved in the phone until either a failed log in attempt occurs, a user manually clears the password, or the phone resets or loses power. Enable Password Persistence Configure VPN Feature Parameters Procedure Step 1 From Cisco Unified CM Administration, choose Advanced Features > VPN > VPN Feature Configuration. Step 2 Configure the fields in the VPN Feature Configuration window. For more information, see VPN Feature Parameters, on page 291. Step 3 Click Save. Perform the following tasks: • Upgrade the firmware for Cisco Unified IP Phones to a version that supports VPN. For more information about upgrading the firmware, see Cisco Unified IP Phone Administration Guide for your Cisco Unified IP Phone model. • Using a supported Cisco Unified IP Phone, establish the VPN connection. VPN Feature Parameters The table describes the VPN feature parameters. Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 291 Advanced System Security Configure VPN Feature Parameters