Cisco Cisco TelePresence Video Communication Server Expressway
Mobile and remote access port reference
This section summarizes the ports that need to be opened on the firewalls between your internal network
(where the VCS Control is located) and the DMZ (where the VCS Expressway is located) and between the
DMZ and the public internet.
(where the VCS Control is located) and the DMZ (where the VCS Expressway is located) and between the
DMZ and the public internet.
Outbound from VCS Control (private) to VCS Expressway (DMZ)
Purpose
Protocol
VCS Control (source)
VCS Expressway
(listening)
(listening)
XMPP (IM and Presence)
TCP
Ephemeral port
7400
SSH (HTTP/S tunnels)
TCP
Ephemeral port
2222
Traversal zone SIP signaling
TLS
25000 to 29999
7001
Traversal zone SIP media
(for small/medium systems on X8.1 or
later)
later)
UDP
36000 to 59999*
36000 (RTP), 36001
(RTCP) (defaults)
(RTCP) (defaults)
2776 (RTP), 2777 (RTCP)
(old defaults*)
(old defaults*)
Traversal zone SIP media
(for large systems)
UDP
36000 to 59999*
36000 to 36011 (6 pairs of
RTP and RTCP ports for
multiplexed media
traversal)
RTP and RTCP ports for
multiplexed media
traversal)
Outbound from VCS Expressway (DMZ) to public internet
Purpose
Protocol
VCS Expressway
(source)
(source)
Internet endpoint
(listening)
(listening)
SIP media
UDP
36002 to 59999 or
36012 to 59999
>= 1024
SIP signaling
TLS
25000 to 29999
>= 1024
Inbound from public internet to VCS Expressway (DMZ)
Purpose
Protocol
Internet endpoint
(source)
(source)
VCS Expressway
(listening)
(listening)
XMPP (IM and Presence)
TCP
>= 1024
5222
HTTP proxy (UDS)
TCP
>= 1024
8443
Media
UDP
>= 1024
36002 to 59999 or
36012 to 59999*
SIP signaling
TLS
>= 1024
5061
HTTPS (administrative access)
TCP
>= 1024
443
Unified Communications Mobile and Remote Access via Cisco VCS Deployment Guide (X8.5.1)
Page 36 of 50
Mobile and remote access port reference