Cisco 8800 Series Manual page 146

Enable the Firewall
Before you begin
Access the Phone Web Interface, on page 104
Procedure
Step 1
Select Voice > System > Security Settings.
Step 2 In the Firewall drop down list, select Enabled.
You can also configure this parameter in the configuration file (cfg.xml) by entering a string in this format:
<Firewall ua="na">Enabled</Firewall>
The allowed values are Disabled|Enabled. The default value is Enabled.
Step 3
Click Submit All Changes.
This enables the firewall with its default open UDP and TCP ports.
Step 4
Select Disabled to disable the firewall if you wish your network to return to its prior behavior.
The following table describes the default open UDP ports.
Table 9: Firewall Default Open UDP Ports
Default Open UDP Port
DHCP/DHCPv6
SIP/UDP
RTP/RTCP
PFS (Peer Firmware
Sharing)
TFTP clients
TR-069
The following table describes the default open TCP ports.
Table 10: Firewall Default Open TCP Ports
Default Open TCP Port
Web server
Cisco IP Phone 8800 Series Multiplatform Phone Administration Guide for Release 11.3(1) and Later
126
Description
DHCP client Port 68
DHCPv6 client Port 546
Configure the Port in Voice > Ext<n> > SIP Settings > SIP Port (example:
5060), when Line Enable is set to Yes, and SIP Transport is set to UDP or
Auto.
UDP port range from RTP Port Min to RTP Port Max+1
Port 4051, when Upgrade Enable and Peer Firmware Sharing are set to
Yes.
Ports 53240-53245. You need this port range if the remote server uses a port
other than the standard TFTP port 69. You may turn it off if the server uses
standard port 69. See Configure Your Firewall with Additional Options, on
page 127.
UDP/STUN port 7999, when Enable TR-069 is set to Yes.
Description
Port configured via Web Server Port (default 80), when Enable Web Server
is set to Yes.
Cisco IP Phone Configuration