Cisco Unified Communications Manager (CallManager)

Table Of Contents

Cisco Intercompany Media Engine
Release 8.0(2) TCP and UDP Port Usage

Port Descriptions

References

Port Usage Guides

Firewall Application Inspection Guides

IETF TCP/UDP Port Assignment List

Cisco Intercompany Media Engine
Release 8.0(2) TCP and UDP Port Usage

---

This document provides a list of the TCP and UDP ports that Cisco Intercompany Media Engine Release 8.0(2) uses for intracluster connections and for communications with external applications or devices. It provides important information for the configuration of firewalls, Access Control Lists (ACLs), and quality of service (QoS) on a network when an IP Communications solution is implemented.

---

Note Cisco has not verified all possible configuration scenarios for these ports. If you are having configuration problems using this list, contact Cisco technical support for assistance.

---

While virtually all protocols are bidirectional, this document gives directionality from the session originator perspective. In some cases, the administrator can manually change the default port numbers, though Cisco does not recommend this as a best practice. Be aware that Cisco IME opens several ports strictly for internal use.

Ports in this document apply specifically to Cisco Intercompany Media Engine Release 8.0(2). Some ports change from one release to another, and future releases may introduce new ports. Therefore, make sure that you are using the correct version of this document for the version of Cisco IME that is installed.

Installing Cisco Intercompany Media Engine 8.0(2) software automatically installs the following network services for serviceability and activates them by default. Refer to Table 1 for details:

•Cisco Log Partition Monitoring (To monitor and purge the common partition. This uses no custom common port.)

•Cisco Trace Collection Service (TCTS port usage.)

•Cisco RIS Data Collector (RIS server port usage)

•Cisco AMC Service (AMC port usage)

Configuration of firewalls, ACLs, or QoS will vary depending on topology, placement of telephony devices and services relative to the placement of network security devices, and which applications and telephony extensions are in use. Also, bear in mind that ACLs vary in format with different devices and versions.

---

Note The Ephemeral port range for the system is 32768 - 61000.

---

Port Descriptions

Table 1 Common Service Ports 

From (Sender)	To (Listener)	Destination Port	Purpose
Endpoint	Cisco IME	514 / UDP	System logging service
Cisco IME	RTMT	1090, 1099 / TCP	Cisco AMC Service for RTMT performance monitors, data collection, logging, and alerting
Endpoint	Cisco IME	7	Internet Control Message Protocol (ICMP) This protocol number carries echo-related traffic. It does not constitute a port as indicated in the column heading.
Cisco IME	Endpoint
Cisco IME	Endpoint	21 / TCP	FTP. Outgoing only.
Cisco IME	Cisco IME (DNS Client)	22 / TCP	Secure FTP service, SSH access
Endpoint	Cisco IME (DNS Client)	Ephemeral / UDP	Cisco IME acting as a DNS server or DNS client Note Cisco recommends that Cisco IME not act as a DNS client and that all IP telephony applications and endpoints use static IP addresses instead of hostnames.
Cisco IME	DNS Client
Endpoint	Cisco IME (DHCP Server)	67 / UDP	Cisco IME acting as a DHCP client Note Cisco does not recommend running DHCP client on Cisco IME.
Cisco IME	DHCP Client	68 / UDP	Cisco IME acting as a DHCP client Note Cisco does not recommend running DHCP client on Cisco IME. Configure Cisco IME with static IP addresses instead.
Cisco IME	NTP Server	123 / UDP	Network Time Protocol (NTP)
SNMP Server	Cisco IME	161 / UDP	SNMP service response (requests from management applications)
		162 / UDP	SNMP traps
Cisco IME	Cisco IME	6666 / UDP	Netdump server

Table 2 Web Requests to IME Server

From (Sender)	To (Listener)	Destination Port	Purpose
Browser	Cisco IME	80, 8080 / TCP	Hypertext Transport Protocol (HTTP)
Browser	Cisco IME	443, 8443 / TCP	Hypertext Transport Protocol over SSL (HTTPS)

Table 3 Communication Between Applications and IME Server 

From (Sender)	To (Listener)	Destination Port	Purpose
Unified CM	IME Server	5620 / TCP Cisco recommends a value of 5620 for this port, but you can change the value by executing the add ime vapserver or set ime vapserver port CLI command on the Cisco IME server.	VAP protocol used to communicate to the Cisco Intercompany Media Engine server.
Unified CM	IME Server	8470 / TCP	Cisco Intercompany Media Engine Validation
Unified CM	IME Server	6084 / TCP	Peer to peer TLS

References

Port Usage Guides

Cisco Unified Communications Manager 8.0(2) TCP and UDP Port Usage

http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_maintenance_guides_list.html

Firewall Application Inspection Guides

ASA Series reference information

http://www.cisco.com/en/US/products/ps6120/tsd_products_support_series_home.html

PIX 6.3 Application Inspection Configuration Guide

http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/fixup.html

PIX .1 Application Inspection Configuration Guide

http://www.cisco.com/en/US/docs/security/asa/asa71/configuration/guide/inspect.html

FWSM 3.1 Application Inspection Configuration Guide

http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/configuration/guide/inspct_f.html

IETF TCP/UDP Port Assignment List

Internet Assigned Numbers Authority (IANA) IETF assigned Port List

http://www.iana.org/assignments/port-numbers

---

CCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Nurse Connect, Cisco Pulse, Cisco SensorBase, Cisco StackPower, Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flipshare (Design), Flip Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Capital, Cisco Capital (Design), Cisco:Financed (Stylized), Cisco Store, Flip Gift Card, and One Million Acts of Green are service marks; and Access Registrar, Aironet, AllTouch, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Lumin, Cisco Nexus, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, Continuum, EtherFast, EtherSwitch, Event Center, Explorer, Follow Me Browsing, GainMaker, iLYNX, IOS, iPhone, IronPort, the IronPort logo, Laser Link, LightStream, Linksys, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, PCNow, PIX, PowerKEY, PowerPanels, PowerTV, PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, SenderBase, SMARTnet, Spectrum Expert, StackWise, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0910R)

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

© 2010 Cisco Systems, Inc. All rights reserved.