Cisco Expressway Series Manuel utilisateur

Cisco Expressway IP Port Usage

Configuration Guide

First Published: April 2017

X8.9.2

Cisco Systems, Inc. www.cisco.com

Preface

Change History

Date Change Reason

July

2017

Correction Outbound SIPsignaling removed from MRAdiagram and table.

April

2017

New

document

New format for information previously held in Expressway IP Port Usage for Firewall

Traversal.

Table 1 Cisco Expressway IP Port Usage Configuration Guide Change History

Related Documents 2

How to Use This Document 5

Default Port Ranges 5

Basic Networking Connections 7

Basic Networking:Expressway 7

Networking Port Reference:Expressway 7

Basic Networking:Traversal Pair 9

Networking Port Reference:Expressway Traversal Pair 10

Clustering Connections 12

Cluster Connections Before X8.8 12

Cluster Port Reference Before X8.8 12

Cluster Connections X8.8 Onwards 13

Cluster Port Reference X8.8 Onwards 13

Provisioning, Registrations, Authentication, and Calls 14

SIP Calls 15

SIP Calls Port Reference 16

H.323 Calls 18

H.323 Calls Port Reference 20

TMS Connections 22

TMS Port Reference 22

LDAP Connections 24

LDAP Port Reference 24

Mobile and Remote Access 26

MRA Connections 26

MRA Port Reference 27

Jabber Guest Services 29

Jabber Guest:Dual NICDeployment 30

Jabber Guest:Dual NICDeployment Ports 31

Cisco Expressway IP Port Usage Configuration Guide

Jabber Guest:Single NICDeployment 32

Jabber Guest:Single NICDeployment Ports 33

Microsoft Interoperability Using Gateway Expressway 34

On-Premises Microsoft Clients 34

Off-Premises Microsoft Clients 35

Expressway with Microsoft Infrastructure Port Reference 36

Cisco Meeting Server 38

Web Proxy for Cisco Meeting Server WebRTC Connections 38

Web Proxy for Cisco Meeting Server Port Reference 39

SIP Edge for Meeting Server Connections 40

SIP Edge for Cisco Meeting Server Port Reference 41

XMPP Federation 43

XMPP Federation Connections 43

XMPP Port Reference 44

Serviceability 45

Serviceability:Expressway-C 45

Serviceability:Traversal Pair 46

Serviceability Ports:Traversal Pair 46

Cisco Legal Information 47

Cisco Trademark 47

Cisco Expressway IP Port Usage Configuration Guide

How to Use This Document

The purpose of this document is to help you configure and troubleshoot connections between infrastructure

components related to Expressway deployments.

There is a section for each of the popular Expressway deployments. Each has a diagram showing the major

infrastructure components and the connections between them, and also lists the connections in a table format.

The deployments build on each other where necessary. For example, if you wish to implement Mobile and Remote

Access, you should first configure a traversal pair. These relationships are described in the relevant deployment

guides.

Default Port Ranges

The following defaults are used throughout this document. Default port ranges may occasionally change (if

unavoidable) as new features are developed. Our documents list the current default ports for the given version

number.

Note:In some cases throughout this document we list port ranges used by third party infrastructure. These are default

values and we cannot guarantee that these are correct for your environment. We recommend you follow the

supplier's documentation to configure those connections.

Protocol Purpose Current

Range

Details

TCP Ephemeral ports 1024-65535 Outbound HTTP/S, LDAP

UDP Ephemeral ports 1024-65535 DNS, outbound TURNrequests

TCP Ephemeral ports 30000-

35999

UDP Ephemeral ports 30000-

35999

TCP Outbound SIP 25000-

29999

UDP&TCP Inbound TURN

requests on

Small/Medium

Expressway-E

3478 On Expressway-E only. Configurable to a port >= 1024

UDP&TCP Inbound TURN

requests on

Large

Expressway-E

3478-3483 On Large Expressway-E only. Configurable to a six port range with

first port >=1024.

UDP TURN relays 24000-

29999

On Expressway-E only.

Table 2 Default Port Ranges on Expressway

Cisco Expressway IP Port Usage Configuration Guide

Protocol Purpose Current

Range

Details

UDP RTP/RTCPmedia 36000-

59999

The range is configurable.

On S/MExpressway, the first two ports can be used for multiplexed

media if you do not use default/custom ports.

On LExpressway, the first twelve ports of the range are used for

multiplexed media. You cannot customize that subrange.

UDP Multiplexed

media on

Small/Medium

Expressway-E

systems

2776/2777

36000/36001

2776/2777 is older pair but kept as default by the ability to

customize when the new default range was introduced with

S/Msystem options. Custom pair is defined on Configuration

>Traversal >Ports.

On Expressway-E only.

Note:In the connection maps and port references we do not show

all the port options for the sake of clarity. For example, if the

diagram shows 2776/2776, but you have chosen to use

36000/36001 instead, then you don't need to also open 2776/2777.

UDP Multiplexed

media on Large

Expressway-E

systems

36000-

36011

New range introduced with Largesystem option. This range is

always the first twelve ports of the RTP/RTCPmedia range, so it

will be different if you configure a different media range.

On Expressway-E Large OVAs or large scale appliances only.

Note:In the connection maps and port references we do not show

all the port options for the sake of clarity. For example, if the

diagram shows 2776/2776, but you have a large Expressway, then

you should open the first twelve ports of the media range instead of

2776/2777.

TCP SIPtraversal 7001 Configurable. SIPlistening port on the first Expressway-E traversal

server zone. Subsequent traversal server zones will use incremental

port numbers, eg. 7002, by default.

UDP H.323 traversal 6001 Configurable. H.323 listening port on the first Expressway-E

traversal server zone. Subsequent traversal server zones will use

incremental port numbers, eg. 6002, by default.

Table 2 Default Port Ranges on Expressway (continued)

Cisco Expressway IP Port Usage Configuration Guide

Basic Networking Connections

Basic Networking:Expressway

Networking Port Reference:Expressway

Purpose Src. IP Src. ports Protocol Dest. IP Dst. Ports

Administrator SSH Admin PCs 1024-65535 TCP Expressway-C 22

Administrator HTTP*Admin PCs 1024-65535 TCP Expressway-C 80

Administrator HTTPS Admin PCs 1024-65535 TCP Expressway-C 443

Name resolution (DNS) Expressway-C 1024-65535 UDP & TCP†Internal name server 53

Time synchronization (NTP) Expressway-C 123 UDP Internal time server 123

Table 3 Basic Networking Ports for Expressway-C

Cisco Expressway IP Port Usage Configuration Guide

* Expressway redirects HTTPto HTTPSby default. You don't need to open the HTTP port, but you can allow HTTPfor

convenience and redirect to HTTPS.

† Expressway will attempt DNSresolution over TCPif the response is too large.

Cisco Expressway IP Port Usage Configuration Guide

Basic Networking:Traversal Pair

Cisco Expressway IP Port Usage Configuration Guide

Networking Port Reference:Expressway Traversal Pair

Purpose Src. IP Src. ports Protocol Dest. IP Dst. Ports

Administrator SSH Admin PCs 1024-65535 TCP Expressway-C 22

Administrator HTTP*Admin PCs 1024-65535 TCP Expressway-C 80

Administrator HTTPS Admin PCs 1024-65535 TCP Expressway-C 443

Name resolution (DNS) Expressway-C 1024-65535 UDP & TCP†Internal name server 53

Time synchronization (NTP) Expressway-C 123 UDP Internal time server 123

Table 4 Basic Networking Ports for Expressway-C

* Expressway redirects HTTPto HTTPSby default. You don't need to open the HTTP port, but you can allow HTTPfor

convenience and redirect to HTTPS.

† Expressway will attempt DNSresolution over TCPif the response is too large.

Purpose Src. IP Src. ports Protocol Dest. IP Dst.

Ports

Administrator SSH Admin PCs 1024-

65535

TCP Expressway-E private

Administrator HTTP Admin PCs 1024-

65535

TCP Expressway-E private

Administrator HTTPS Admin PCs 1024-

65535

TLS Expressway-E private

443

Internal name resolution (DNS)* Expressway-E private

1024-

65535

UDP

&TCP

Internal name server 53

External name resolution (DNS) Expressway-E public

1024-

65535

UDP

&TCP

External name server 53

Internal time synchronization

(NTP)*

Expressway-E private

123 UDP Internal time server 123

External time synchronization

(NTP)

Expressway-E public

123 UDP External time server 123

Table 5 Basic Networking Ports for Expressway-E

* You may prefer to connect Expressway-E to external DNSand NTP. You do not need both.

Cisco Expressway IP Port Usage Configuration Guide

Table des matières

Autres manuels Cisco Porte

Cisco

Cisco IC3000 Manuel de l'opérateur

Cisco

Cisco Linksys WAG54GP2 Manuel utilisateur

Cisco

Cisco SPA3000 Manuel utilisateur

Cisco

Cisco ATA 188 Manuel de service

Cisco

Cisco Explorer 9800 Manuel utilisateur

Cisco

Cisco 3825 - Voice Bundle Router Manuel utilisateur

Cisco

Cisco VG248 - Gateway Manuel

Cisco

Cisco IG21 Series Mode d’emploi

Cisco

Cisco VGD-1T3 Manuel utilisateur

Cisco

Cisco 3522 BRI Manuel d'installation et d'exploitation

Cisco

Cisco VG310 Mode d’emploi

Cisco

Cisco IG21 Series Manuel utilisateur

Cisco

Cisco TES301 Manuel utilisateur

Cisco

Cisco 450 Manuel

Cisco

Cisco DPC3949 Manuel utilisateur

Cisco

Cisco ENH900EXT Manuel utilisateur

Cisco

Cisco VG400 series Manuel utilisateur

Cisco

Cisco ASR 5000 Series Mode d’emploi

Cisco

Cisco VG30D Manuel utilisateur

Cisco

Cisco Meraki Z1 Manuel utilisateur

Cisco

Cisco Small Business Pro series Mode d’emploi

Cisco

Cisco VG30D Manuel utilisateur

Cisco

Cisco Linksys WAG354G(EU) Manuel utilisateur

Cisco

Cisco DPC2420 Manuel utilisateur

Manuels Porte populaires d'autres marques

LST

LST M500RFE-AS Manuel utilisateur

Kinnex

Kinnex Media Gateway Manuel utilisateur

2N Telekomunikace

2N Telekomunikace 2N StarGate Manuel utilisateur

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZYWALL2 ET 2WE Manuel utilisateur

Telsey

Telsey CPVA 500 - SIP Manuel utilisateur

RTA

RTA 460A-NNA4 Fiche technique

Shaw

Shaw Gateway HDPVR Manuel utilisateur

ABB

ABB VSN900 Guide de démarrage rapide

Commander

Commander Pulse Manuel utilisateur

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manuel utilisateur

NETGEAR

NETGEAR C6300BD Manuel utilisateur

Amit

Amit CDW531AM Manuel utilisateur

HMS

HMS Netbiter EasyConnect EC150 Manuel utilisateur

Huawei

Huawei EchoLife HG620 Manuel utilisateur

AT&T

AT&T U-verse 3801 Manuel d'utilisation et d'entretien

Logic IO

Logic IO RTCU MX2 turbo Manuel utilisateur

Suttle

Suttle MediaMAX MXM-521 Manuel utilisateur