Feedback
Contents
Cisco Intercompany Media Engine
Release 9.0(1) TCP and UDP Port Usage
This document provides a list of the TCP and UDP ports that Cisco Intercompany Media Engine Release 9.0(1) uses for intracluster connections and for communications with external applications or devices. It provides important information for the configuration of firewalls, Access Control Lists (ACLs), and quality of service (QoS) on a network when an IP Communications solution is implemented.
Note
Cisco has not verified all possible configuration scenarios for these ports. If you are having configuration problems using this list, contact Cisco technical support for assistance.
While virtually all protocols are bidirectional, this document gives directionality from the session originator perspective. In some cases, the administrator can manually change the default port numbers, though Cisco does not recommend this as a best practice. Be aware that Cisco IME opens several ports strictly for internal use.
Ports in this document apply specifically to Cisco Intercompany Media Engine Release 9.0(1). Some ports change from one release to another, and future releases may introduce new ports. Therefore, make sure that you are using the correct version of this document for the version of Cisco IME that is installed.
Installing Cisco Intercompany Media Engine 9.0(1) software automatically installs the following network services for serviceability and activates them by default.
- Cisco Log Partition Monitoring (To monitor and purge the common partition. This uses no custom common port.)
- Cisco Trace Collection Service (TCTS port usage.)
- Cisco RIS Data Collector (RIS server port usage)
- Cisco AMC Service (AMC port usage)
Configuration of firewalls, ACLs, or QoS will vary depending on topology, placement of telephony devices and services relative to the placement of network security devices, and which applications and telephony extensions are in use. Also, bear in mind that ACLs vary in format with different devices and versions.
Note
The Ephemeral port range for the system is 32768 - 61000. See, http://www.cisco.com/en/US/products/ps6120/tsd_products_support_series_home.html
Port Descriptions
Cisco recommends that you do not allow external Internet traffic to or from the ports in the following table. The server uses these ports for services, such as NTP and DNS.
The ports in the following table may require external Internet access, as indicated below. Cisco recommends that you block external Internet access for those ports requiring internal intranet access.
Table 2 HTTP protocols From (Sender)
To (Listener)
Destination Port
Purpose
GoDaddy
(External Internet connection required.)
80 / TCP
Hypertext Transport Protocol (HTTP)
GoDaddy
(External Internet connection required.)
443 / TCP
Hypertext Transport Protocol over SSL (HTTPS)
Endpoint
(Internal intranet connection required)
8080 / TCP
Hypertext Transport Protocol (HTTP)
Cisco recommends that you do not open this port to the external Internet.
Endpoint
(Internal intranet connection required)
8443 / TCP
Hypertext Transport Protocol over SSL (HTTPS)
Cisco recommends that you do not open this port to the external Internet.
The ports in the following table do not require external Internect connectivity. Cisco requires that you block external Internet connections to and from these ports.
Table 3 Communication between applications and Cisco IME server From (Sender)
To (Listener)
Destination Port
Purpose
Unified CM
5620 / TCP
Cisco recommends a value of 5620 for this port, but you can change the value by executing the add ime vapserver or set ime vapserver port CLI command on the Cisco IME server.
VAP protocol used to communicate to the Cisco Intercompany Media Engine server.
You are required to connect to and from the ports in the following table over the external Internet.
References
Port Usage Guides
Cisco Unified Communications Manager 9.0(1) TCP and UDP Port Usage
http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_maintenance_guides_list.html
Firewall Application Inspection Guides
ASA Series reference information
http://www.cisco.com/en/US/products/ps6120/tsd_products_support_series_home.html
PIX 6.3 Application Inspection Configuration Guide
http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/fixup.html
PIX .1 Application Inspection Configuration Guide
http://www.cisco.com/en/US/docs/security/asa/asa71/configuration/guide/inspect.html
FWSM 3.1 Application Inspection Configuration Guide
http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/configuration/guide/inspct_f.html
IETF TCP/UDP Port Assignment List
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
