VoIP through a firewall to the CCM. What ports are needed?

[pritchda78]

I am attempting to route a 7940 through a firewall to my CCM. What ports do I need to allow?

I have the basic 69, 2000,2001, 2427, and 2428 open with no luck.

[dvanzee]

Try 16384-32768 as well

[MARTIN STREULE]

Here are the ports used by CUCM.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/port/6_0/60plrev1.pdf

Do you already have some kind of luck?

Where are you stuck? Is the phone downloading th phoneload, ..?

Does the phone have the correct settings (DHCP, TFTP, ...)?

BTW: tftp opens high ports, the other post mentions the ports.

Prior to OS 2000.2.7 the ports picked up by the call manager were in the range 1024-4999 and now from 2000.2.7 the ephemeral ports in the range 49152 -65534 need to be opened for the communication between the phones and TFTP to work properly and also for other communications.

The Ephemeral port range is 32768 - 61000 for 6.X (linux).

Hope that helps

/Martin

[pritchda78]

I was missing the higher ports. Following are the ports needed by the 7940:

UDP: 67, 68 DHCP - This will usually be on the phone's Local LAN

UDP: 69 TFTP server (Call Manager Server)

TCP: 80 HTTP - 7940 Services and Phone Directory

TCP: 2000 Call Manager Skinny

TCP: 2443 Call Manager Secure Skinny

TCP: 3804 Call Manager CAPF (For sending/verifying certificates)

UDP: 24576 - 32767 Call Manager RTP ports

TCP: 4224 Video