Unified Communications Port Reference - Cisco TelePresence Administrator's Manual

Reference material

Unified Communications port reference

This section summarizes the ports that need to be opened on the firewalls between your internal network
(where the VCS Control is located) and the DMZ (where the VCS Expressway is located) and between the
DMZ and the public internet.
Outbound from VCS Control (private) to VCS Expressway (DMZ)
Purpose
XMPP (IM and Presence)
SSH (HTTP/S tunnels)
Traversal zone SIP signaling
Traversal zone SIP media
Outbound from VCS Expressway (DMZ) to public internet
Purpose
SIP media
SIP signaling
Inbound from public internet to VCS Expressway (DMZ)
Purpose
XMPP (IM and Presence)
HTTP proxy (UDS)
Media
SIP signaling
HTTPS (administrative access)
From VCS Control to Unified CM / CUC
Purpose
XMPP (IM and Presence)
HTTP proxy (UDS)
HTTP (configuration file retrieval)
CUC (voicemail)
Media
SIP signaling
* The default media port range of 36000 to 59999 applies to new installations of X8.1 or later. The first 2 ports
in the range are used for multiplexed traffic only (with Large VM deployments the first 12 ports in the range –
Cisco VCS Administrator Guide (X8.1.1)
Protocol VCS Control (source)
TCP Ephemeral port
TCP Ephemeral port
TLS 25000 to 29999
UDP 36002 to 59999 *
Protocol VCS Expressway
(source)
UDP 36002 to 59999 *
TLS 25000 to 29999
Protocol Internet endpoint
(source)
TCP >= 1024
TCP >= 1024
UDP >= 1024
TLS >= 1024
TCP >= 1024
Protocol VCS Control (source)
TCP Ephemeral port
TCP Ephemeral port
TCP Ephemeral port
TCP Ephemeral port
UDP 36002 to 59999 *
TCP/TLS 25000 to 29999
Unified Communications port reference
VCS Expressway
(listening)
7400
2222
7001
36000 to 36001 *
Internet endpoint
(listening)
>= 1024
>= 1024
VCS Expressway
(listening)
5222
8443
36002 to 59999 *
5061
443
Unified CM (listening)
7400 (IM and Presence)
8443 (Unified CM)
6970
443 (CUC)
>= 1024
5060/5061
Page 395 of 507