acl for wireless ip phones

[ohassairi]

hi

to enhance our lan security we want to implement acl in our switch to open only necessary traffic for wireless ip phones.

any idea about the ports needed to communicate to cucm and voice gateway and of course to each other and normal phones ?

thanks

[Chris Deren]

Port 2000 is using SCCP, 5060 if using SIP as the control.

Then port 69 for TFTP, port 80 and 8080 for http and/or http access for directory, etc.  

Ports UDP 16384-32767 for RTP.

Here is more details:

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/port/8_6_1/portlist861.html