Expressway-E Dual NIC

[VCsupport17]

Hello community,

We have Expressway E dual NIC deployment and i have question regarding the ports H323. On the firewall port 1720 TCP already open but still it showing closed on the TAC CSA SRV and port test.

On the Expressway E H323 protocol configuration, why the LAN 2 (outside int.) IP and ports are not showing while for SIP is showing??? Is this normal? We are thinking port 1720 is not activated on LAN 2 of Expressway-E tha'ts why port 1720 is not reachable from internet.

[Scott Leport]

Hi there,

Do you have the appropriate DNS SRV records required for H.323?

Port 1720 should be showing as open on the CSA under normal circumstances, so no this is not normal.

Have you checked the event logs on Expressway C and E for anything untoward?

What version of Expressway are you running? Have you consulted the IP Port Usage document for your version of Expressway? As an example, here is the 12.5 version:

https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X12-5/Cisco-Expressway-IP-Port-Usage-for-Firewall-Traversal-Deployment-Guide-X12-5.pdf

Regards,

Scott

[VCsupport17]

Hi Scott,

Expressway version is X12.6.4. 

My question is why in the Expressway H323 protocol config, the LAN 2 is not showing? 

[Scott Leport]

Hi there,

Having checked an Expressway E which has dual-NIC and H.323 enabled, this is only displaying LAN 1 under the H.323 protocol config so I would believe this is expected. This is also with H.323 enabled on the Expressway C.

Regards,

Scott

[Nithin Eluvathingal]

I never tried h323, but I think the h.323 status showing is as expected. I will update you testing on my lab. 

Have you  enabled H323 on expressway C ?

[VCsupport17]

Hi Nithin,

H323 is enabled on both Expressway and the traversal zone is active for H323 and SIP. 

Checking on Expressway-C the Assent and H460.18 are inactive.

But on Expressway-E all are active:

Please let me know if you have the same status?

[Scott Leport]

I have the same status too. Having done a bit of digging, I expect this is normal behaviour.

Did you notice this thread at all? Looks like it's a similar query to yours:

https://community.cisco.com/t5/telepresence-and-video/vcs-control-should-assent-and-h460-be-active/td-p/1932642

[Nithin Eluvathingal]

Can you try the port using  putty option.