CSPC Port Usage

[gustavo-braga]

Dear Cisco Support,

I am writing to request formal documentation regarding the ports used by the Cisco Common Services Platform Collector (CSPC). Specifically, I need information on the following:

1. Confirmation that CSPC uses high random ports for return traffic.
2. Details on the specific port ranges used for inbound and outbound communication.
3. Any additional port requirements for CSPC to function properly in a firewalled environment.

I look forward to receiving this information to ensure proper configuration of our firewall for CSPC communication.Thank you for your assistance in this matter.

Best regards,

[adias]

And you are using the CSPC just for the service SNTC  correct ?

[gustavo-braga]

I use it to collect and send information from devices to portal for control and lifecycle.

[gustavo-braga]

Hello,

Was it possible to validate?

[adias]

If it is just for the SNTC services, which you have not confirmed yet. the ports and domains below needs to be opened.

[gustavo-braga]

Dear Cisco Support,

Thank you for providing the port information. However, we are facing a specific issue with SNMP discovery that needs clarification. While we can see that SNMP requests are being sent from the collector, we are experiencing connectivity issues that appear to be related to return traffic.
Our current scenario:

1. The CSPC collector initiates SNMP discovery to network devices
2. The initial SNMP request reaches the target devices
3. The return traffic appears to be blocked, possibly because responses are using high UDP ports
4. Our customer's firewall possibly is blocking this return traffic

We would like to know:

1. The port behavior for SNMP responses in CSPC collector communications
2. Confirmation whether SNMP responses from devices use high UDP ports
3. If so, what is the recommended port range that should be opened in the firewall for proper SNMP response traffic.

Best regards.

[adias]

snmp request uses specific snmp ports, access problems is likely access list and or firewall or snmp view restrictions