Cisco Cisco Expressway Manual De Mantenimiento
n
Ports 8191/8192 TCP and 8883/8884 TCP are used internally within the Expressway-C and the
Expressway-E applications. Therefore these ports must not be allocated for any other purpose. The
Expressway-E listens externally on port 8883; therefore we recommend that you create custom firewall
rules on the external LAN interface to drop TCP traffic on that port.
Expressway-E applications. Therefore these ports must not be allocated for any other purpose. The
Expressway-E listens externally on port 8883; therefore we recommend that you create custom firewall
rules on the external LAN interface to drop TCP traffic on that port.
n
The Expressway-E listens on port 2222 for SSH tunnel traffic. The only legitimate sender of such traffic is
the Expressway-C (cluster). Therefore we recommend that you create the following firewall rules for the
SSH tunnels service:
the Expressway-C (cluster). Therefore we recommend that you create the following firewall rules for the
SSH tunnels service:
l
one or more rules to allow all of the Expressway-C peer addresses (via the internal LAN interface, if
appropriate)
appropriate)
l
followed by a lower priority (higher number) rule that drops all traffic for the SSH tunnels service (on the
internal LAN interface if appropriate, and if so, another rule to drop all traffic on the external interface)
internal LAN interface if appropriate, and if so, another rule to drop all traffic on the external interface)
Cisco Expressway Administrator Guide (X8.1.1)
Page 261 of 343
Reference material
Unified Communications port reference