Cisco Cisco Expressway
11
SIP call to endpoint with public IP address
Expressway-E
source port
Internet endpoint
server (listening) port
Expressway-E
listening port
Internet endpoint
source port
Call direction
Outbound to an endpoint in the
Internet
Inbound from an endpoint in the
Internet
Open firewall
DMZ to Internet
Internet to DMZ
IP address
IP address of
Expressway-E
Any IP address
IP address of
Expressway-E
Any IP address
IP Po
rt
s
SIP signaling
UDP C
5060
TCP & TLS A
25000 to 29999
UDP & TCP &
TLS F
5060 or >= 1024
UDP: C
5060
TCP: K
5060
TLS: L
5061
UDP G
5060 or >= 1024
TCP & TLS H
>= 1024
RTP
UDP Y
E
36002 to 59999 *
UDP E
>= 1024
UDP Y
E
36002 to 59999 *
UDP E
>= 1024
RTCP
UDP Y
E
36002 to 59999 *
UDP E
>= 1024
UDP Y
E
36002 to 59999 *
UDP E
>= 1024
C = Protocols > SIP > UDP port: default = 5060
A = Protocols > SIP > TCP Outbound port start to
end: default = 25000 to 29999
F = IP port is defined by DNS lookup; any port >=
1024, often 5060 for UDP
K = Protocols > SIP > TCP port: default = 5060
L = Protocols > SIP > TLS port: default =5061
G = any port >= 1024, often 5060 for hard endpoints
H = any port >= 1024
Y
E
= Local Zone > Traversal Subzone > Traversal
Media port start to end (configured on
Expressway-E): default =
Expressway-E): default =
36000 to 59999 *
E = Endpoint media port range; value used is
specified in the SDP:
= any IP port above 1024
= 36000 to 59999 * for another Expressway
= 2326 to 2385 for MXP static setting
= 11000 to 65000 for MXP dynamic setting
= any IP port above 1024
= 36000 to 59999 * for another Expressway
= 2326 to 2385 for MXP static setting
= 11000 to 65000 for MXP dynamic setting
* The first 2 ports in the range are used for multiplexed
traffic only (with Large VM deployments the first 12 ports in
the range – 36000 to 36011 – are used).
traffic only (with Large VM deployments the first 12 ports in
the range – 36000 to 36011 – are used).
Internet
Expressway-C
Expressway-E
DMZ