IP500 in SCN UDP/TCP ports 1

[george74]

Hello All.
Were trying to connect 2 IP500s via internet VPN connection.
We have Small Community Networking and Advanced Networking licenses.
What are the UDP or TCP ports that routers should leave open for the systems to communicate??

 

[amriddle01]

http://www.ipofficeinfo.com/References/ref_ipofficeports.htm

will help, port 50795 is SCN messages.

ACS - IP Office Implement

 

[kholladay]

http://www.ipofficeassistance.com/INFO_IPOFirewallPorts.html

Kyle Holladay
ACA-I, ACA Call Center, ACS-I, ACS-M, TIA-CTP, MCP/MCTS Exchange 2007
ACE Implement: IP Office

"Thinking is the hardest work there is, which is the probable reason why so few engage in it." - Henry Ford

 

[george74]

Thanks for the replies.
I know the known list of ports, i just need to know what ports are absolutely necessary in order to make calls from one site to another.

 

[tlpeter]

You need them all !

ACA - Implement IP Office
ACS - Implement IP Office
ACA - Voice Services Management
______________
Women and cats can do as they please and men and dogs should relax and get used to the idea!

 

[amriddle01]

SCN does not work very well over the Net though, a leased line or equivalent is needed otherwise you will have big voice quality issues not to mention others.

ACS - IP Office Implement

 

[kholladay]

Are you blocking ports within the VPN? Typically ports are blocked outside of the VPN and all ports are open and tunneled inside the VPN which would make the need to "open" ports unnecessary.

At a very minimum you'll need:
UDP 49152-53247* RTP/RTCP
UDP 50795 IPO Voice Networking
UDP 50799 IPO BLF
UDP 1720 H.323/H.245
UDP 1719 H.323 RAS

Kyle Holladay
ACA-I, ACA Call Center, ACS-I, ACS-M, TIA-CTP, MCP/MCTS Exchange 2007
ACE Implement: IP Office

"Thinking is the hardest work there is, which is the probable reason why so few engage in it." - Henry Ford

 

[george74]

Thanks Kyle. Yes they blocking most of the udp/tcp ports in the VPN routers and firewalls so they need to know only the "basic" ports for forwarding just to communicate.

 

[george74]

Update!
There isnt internet VPN connection between the 2 sites. Theyre trying to connect them both using simple cisco routers with static IP internet connections at both sides. They are forwarding the most of udp/tcp ports in the list except the big range 49152-53247. Too many ports for forwarding.

What i did was to setup crosswise the 2 static ip addresses as geteway in ip lines for letting the remote router to route the voice packets to its known IP500 internal LAN address.
It seems to work; in the System status i can see the whole scn extensions but when i called from one site to another im taking alert and connect info but no voice. Ping is less than 3 ms.
Any thoughts?
Does anyone tried to connect 2 sites via simple static internet connections ?

 

[kholladay]

Two issues there.

1) That "big range" (49152-53247) is the range used by the RTP. This is your speech path, without it you'll get no voice.

2) You're likely trying to NAT the connection to the IP Office from the Internet. So when you send the traffic from site 1 to site 2 it will contain the private IP information of the 1st IP Office, not the public IP information. Your return path will likely get lost as a result.

Kyle Holladay
ACA-I, ACA Call Center, ACS-I, ACS-M, TIA-CTP, MCP/MCTS Exchange 2007
ACE Implement: IP Office

"Thinking is the hardest work there is, which is the probable reason why so few engage in it." - Henry Ford

 

[george74]

Kyle
1) What if i try to reduce the range to only 4-5 ports and let them forward in/out?

2)I know this is NAT. Does it mean in practice it wont work ?

Thanks

 

[mattKnight]

>I know this is NAT. Does it mean in practice it wont work

Probably, as in general VOIP through NAT is unreliable. VPN is teh way forward...

Take Care

Matt
I have always wished that my computer would be as easy to use as my telephone.
My wish has come true. I no longer know how to use my telephone.