Cisco Cisco Prime Infrastructure 2.2 Installation Guide

The following topics provide reference information about Prime Infrastructure and its support options. 

Table 3 lists the ports used by Prime Infrastructure and Assurance. These ports must be open in firewalls if you are using these 
services. 

7

TCP/UDP Server to endpoints

Endpoint discovery via ICMP

20, 21

TCP

Bidirectional server/devices FTP transfer of files to and from devices

Server to Cisco.com

FTP download of files from Cisco.com

22

TCP

Server to endpoints

To initiate SSH connection to endpoints during troubleshooting processes

Client to server

To connect to the Prime Infrastructure server

23

TCP

Server to devices

Telnet communication with devices

25

TCP

Server to SMTP server

SMTP email routing

49

TCP/UDP Server to TACACS server

Authenticate users using TACACS

53

TCP/UDP Server to DNS server

DNS

69

UDP

Devices to server

TFTP

161

UDP

Server to devices

SNMP polling 

162

TCP/UDP Endpoints to server

SNMP Trap receiver port

443

TCP

Client to server

Browser access to Prime Infrastructure via HTTPS (enabled by default). 
This port is also used to check for software updates between the Prime 
Infrastructure server and cisco.com.

514

UDP

Devices to server

Syslog server

1099

TCP/UDP AAA server to server

RMI registry

1522

TCP/UDP Primary to secondary 

server, Secondary to 
primary server

To configure high availability database connection between the primary 
and secondary Prime Infrastructure

1645

UDP

Server to RAS

Authenticate Prime Infrastructure users via RADIUS Remote Access 
Server

1646

RAS to server

1812

Server to RAS

1813

RAS to server

4444

TCP

AAA server to server

RMI server

8082

TCP

Client to server

Health Monitor web interface, Apache/Tomcat JSP engine

8087

TCP

Client to server

Secondary server software update page

9991

UDP

Devices to server

NetFlow data receiver