Cisco Cisco TelePresence Video Communication Server Expressway

Appendix 2: IP Ports and Protocols

External Firewalls Between Peers

It is unusual to have any sort of external firewall between cluster peers, but if there is, the IP protocols and ports that
must be open between each and every VCS peer in the cluster are listed below.

For cluster communications between VCS peers:

■

TCP port 4371 is used for cluster recovery (over TLS)

■

TCP port 4372 is used for cluster database synchronization (over TLS)

For calls between VCS peers:

■

Standard SIP and H.323 signaling ports are used for calls

■

UDP port 1719 is used for bandwidth updates between VCS peers

Firewall Rules on the Peers

If you are using the VCS's built-in Firewall rules feature, make sure that your rules allow the following connections:

Purpose

Protocol

Source

Port

Destination

Port

Cluster communication

TCP/TLS

Other peers

Ephemeral

This peer

4372

Cluster recovery

TCP/TLS

Other peers

Ephemeral

This peer

4371

Table 2 Clustering Connections

Cisco TelePresence Management Suite Provisioning Extension

For cluster communications between VCS peers and a Cisco TMS when running in Provisioning Extension mode:

■

VCS ephemeral port to port 443 on Cisco TMS (secure) or

■

VCS ephemeral port to port 80 on Cisco TMS

Note:

Ports 443 and 80 are the default values; they can be configured in the Cisco TMS IIS, and VCS if

different ports are required.

Cisco TelePresence VCS Cluster Creation and Maintenance Deployment Guide

Appendix 2: IP Ports and Protocols