Cisco Cisco TelePresence Video Communication Server Expressway 관리 매뉴얼
Firewall traversal
You can change these default ports if necessary but you must ensure that the ports are unique for
each traversal server zone.
each traversal server zone.
After the H.323 and SIP ports have been set on the VCS Expressway, matching ports must be
configured on the corresponding traversal client.
configured on the corresponding traversal client.
Note:
n
The default port used for the initial connections from MXP endpoints is the same as that used for
standard RAS messages, that is UDP/1719. While it is possible to change this port on the VCS
Expressway, most endpoints will not support connections to ports other than UDP/1719. You are
therefore recommended to leave this as the default.
standard RAS messages, that is UDP/1719. While it is possible to change this port on the VCS
Expressway, most endpoints will not support connections to ports other than UDP/1719. You are
therefore recommended to leave this as the default.
n
You must allow outbound connections through your firewall to each of the unique SIP and H.323
ports that are configured on each of the VCS Expressway’s traversal server zones.
ports that are configured on each of the VCS Expressway’s traversal server zones.
Default port summary
The following table shows the default ports used for connections to the VCS Expressway.
Protocol
Call signaling
Media
Assent
UDP/1719: listening port for RAS
messages
messages
TCP/2776: listening port for H.225
and H.245 protocols
and H.245 protocols
UDP/2776: RTP media port
UDP/2777: RTCP media control port
H.460.18/19 UDP/1719: listening port for RAS
messages
TCP/1720: listening port for H.225
protocol
protocol
TCP/2777: listening port for H.245
protocol
protocol
UDP/2776: RTP media port
UDP/2777: RTCP media control port
UDP/50000-52399: demultiplex media port
range
range
SIP
SIP call signaling uses the same
port as used by the initial connection
between the client and server.
port as used by the initial connection
between the client and server.
Where the traversal client is a VCS, SIP
media uses Assent to traverse the firewall.
The default ports are the same as for H.323:
media uses Assent to traverse the firewall.
The default ports are the same as for H.323:
UDP/2776: RTP media port
UDP/2777: RTCP media control port
You have the option to change these ports if necessary by going to the
page (
VCS
configuration > Expressway > Ports
).
If your VCS Expressway does not have any endpoints registering directly with it, and it is not part of a
cluster, then UDP/1719 is not required. You therefore do not need to allow outbound connections to
this port through the firewall between the VCS Control and VCS Expressway.
cluster, then UDP/1719 is not required. You therefore do not need to allow outbound connections to
this port through the firewall between the VCS Control and VCS Expressway.
TURN ports
The VCS Expressway can be enabled to provide
(Traversal Using Relays around
NAT) which can be used by SIP endpoints that support the ICE firewall traversal protocol.
The ports used by these services are configurable on the
page (
VCS configuration >
Expressway > TURN
).
Cisco VCS Administrator Guide (X6.1)
Page 173 of 401