CUCMBE5000 Behind a firewall

[feisalb]

Hello All

I have attached a topology of what the customer has requested.

Security is high on the agenda and I wanted to know if this is a valid  design?

What ports will the firewall need to open up for all traffic to talk to each  other?

I have started a list of communications that will take please can someone add  and/or correct.

Tftp port for phones to download configuration from cucmbe (tftp server)

sccp between phones and cucmbe

H323 between GW and cucmbe

Comms between cucmbe and attendant console

Traffic between Attendant Console server and clients

Traffic between subscribers and unity connection.

Traffic between Fax machines/ analog phones and VG224

.

.

I am going to use extension mobility as well.

I have a the url for the ports used on cucm but wanted a definitive  answer.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/port/8_5_1/portlist851.html

Thanks in advance for your help and assistance.

Feisal

[Joseph Martini]

You'll want to open all the ports on the port usage guide you already found and things should work properly.  Be aware that if you use any NAT you would have to make sure all NAT devices are SCCP aware meaning they will do SCCP inspection.

[feisalb]

What ports need to opened for communication between SRST Gateway and ip phones?

Is it just port 2000 or do I need rtp ports as well?

Thanks

Feisal