Cisco TelePresence Administrator's Manual page 236

H.323 ports start at UDP/6001 and increment by 1 for every new traversal server zone.
n
SIP ports start at TCP/7001 and increment by 1 for every new traversal server zone.
n
You can change these default ports if necessary but you must ensure that the ports are unique for each
traversal server zone.
After the H.323 and SIP ports have been set on the VCS Expressway, matching ports must be configured on
the corresponding traversal client.
Note:
The default port used for the initial connections from MXP endpoints is the same as that used for standard
n
RAS messages, that is UDP/1719. While it is possible to change this port on the VCS Expressway, most
endpoints will not support connections to ports other than UDP/1719. You are therefore recommended to
leave this as the default.
You must allow outbound connections through your firewall to each of the unique SIP and H.323 ports that
n
are configured on each of the VCS Expressway's traversal server zones.
Default port summary
The following table shows the default ports used for connections to the VCS Expressway.
Protocol Call signaling
Assent UDP/1719: listening port for RAS
messages
TCP/2776: listening port for H.225 and
H.245 protocols
H.460.18/19 UDP/1719: listening port for RAS
messages
TCP/1720: listening port for H.225
protocol
TCP/2777: listening port for H.245
protocol
SIP SIP call signaling uses the same port as
used by the initial connection between the
client and server.
You have the option to change these ports if necessary by going to the
Expressway > Ports).
If your VCS Expressway does not have any endpoints registering directly with it, and it is not part of a
cluster, then UDP/1719 is not required. You therefore do not need to allow outbound connections to this port
through the firewall between the VCS Control and VCS Expressway.
TURN ports
The VCS Expressway can be enabled to provide
which can be used by SIP endpoints that support the ICE firewall traversal protocol.
Cisco VCS Administrator Guide (X7.2)
Media
UDP/2776: RTP media port
UDP/2777: RTCP media control port
UDP/2776: RTP media port
UDP/2777: RTCP media control port
UDP/50000-54999: demultiplex media port range
Where the traversal client is a VCS, SIP media uses
Assent to traverse the firewall. The default ports are
the same as for H.323:
UDP/2776: RTP media port
UDP/2777: RTCP media control port
Ports
TURN services (Traversal Using Relays around NAT)
Firewall traversal
page (VCS configuration >
Page 236 of 498