Cisco Unified Communications Manager TCP and UDP Port Usage

Cisco Unified Communications Manager TCP and
UDP Port Usage

This chapter provides a list of the TCP and UDP ports that Cisco Unified Communications Manager uses for
intracluster connections and for communication with external applications or devices. You will also find
important information for the configuration of firewalls, Access Control Lists (ACLs), and quality of service
(QoS) on a network when an IP Communications solution is implemented.
• Cisco Unified Communications Manager TCP and UDP Port Usage Overview, on page 1
• Port Descriptions, on page 3
• Port References, on page 17
Cisco Unified Communications Manager TCP and UDP Port

Usage Overview
Cisco Unified Communications Manager TCP and UDP ports are organized into the following categories:
• Intracluster Ports Between Cisco Unified Communications Manager Servers
• Common Service Ports
• Ports Between Cisco Unified Communications Manager and LDAP Directory
• Web Requests From CCMAdmin or CCMUser to Cisco Unified Communications Manager
• Web Requests From Cisco Unified Communications Manager to Phone
• Signaling, Media, and Other Communication Between Phones and Cisco Unified Communications
Manager
• Signaling, Media, and Other Communication Between Gateways and Cisco Unified Communications
Manager
• Communication Between Applications and Cisco Unified Communications Manager
• Communication Between CTL Client and Firewalls
• Special Ports on HP Servers
See “Port Descriptions” for port details in each of the above categories.
Cisco Unified Communications Manager TCP and UDP Port Usage

1
Cisco Unified Communications Manager TCP and UDP Port Usage Overview
Note Cisco has not verified all possible configuration scenarios for these ports. If you are having configuration
problems using this list, contact Cisco technical support for assistance.
Port references apply specifically to Cisco Unified Communications Manager. Some ports change from one
release to another, and future releases may introduce new ports. Therefore, make sure that you are using the
correct version of this document for the version of Cisco Unified Communications Manager that is installed.
While virtually all protocols are bidirectional, directionality from the session originator perspective is presumed.
In some cases, the administrator can manually change the default port numbers, though Cisco does not
recommend this as a best practice. Be aware that Cisco Unified Communications Manager opens several ports
strictly for internal use.
Installing Cisco Unified Communications Manager software automatically installs the following network
services for serviceability and activates them by default. Refer to “Intracluster Ports Between Cisco Unified
Communications Manager Servers” for details:
• Cisco Log Partition Monitoring (To monitor and purge the common partition. This uses no custom
common port.)
• Cisco Trace Collection Service (TCTS port usage)
• Cisco RIS Data Collector (RIS server port usage)
• Cisco AMC Service (AMC port usage)
Configuration of firewalls, ACLs, or QoS will vary depending on topology, placement of telephony devices
and services relative to the placement of network security devices, and which applications and telephony
extensions are in use. Also, bear in mind that ACLs vary in format with different devices and versions.
Note You can also configure Multicast Music on Hold (MOH) ports in Cisco Unified Communications Manager.
Port values for multicast MOH are not provided because the administrator specifies the actual port values.
Note The ephemeral port range for the system is 32768 to 61000, and the ports needs to be open to keep the phones
registered. For more information, see http://www.cisco.com/c/en/us/support/security/
asa-5500-series-next-generation-firewalls/tsd-products-support-series-home.html.
Note Make sure that you configure your firewall so that connections to port 22 are open, and are not throttled.
During the installation of IM and Presence subscriber nodes, multiple connections to the Cisco Unified
Communications Manager publisher node are opened in quick succession. Throttling these connections could
lead to a failed installation.

2
Port Descriptions
Port Descriptions
Intracluster Ports Between Cisco Unified Communications Manager Servers
Table 1: Intracluster Ports Between Cisco Unified Communications Manager Servers
From (Sender) To (Listener) Destination Port Purpose
Endpoint Unified Communications 514 / UDP System logging service

Manager
Unified Communications Unified Communications 443 / TCP This port is used for
Manager Manager communication between
the subscriber and
publisher during COP file
installation in the
subscriber node.
Unified Communications RTMT 1090, 1099 / TCP Cisco AMC Service for
Manager RTMT performance
monitors, data collection,
logging, and alerting
Unified Communications Unified Communications 1500, 1501 / TCP Database connection

Manager (DB) Manager (DB) (1501 / TCP is the
secondary connection)
Unified Communications Unified Communications 1510 / TCP CAR IDS DB. CAR IDS
Manager (DB) Manager (DB) engine listens on waiting
for connection requests
from the clients.
Unified Communications Unified Communications 1511 / TCP CAR IDS DB. An

Manager (DB) Manager (DB) alternate port used to
bring up a second instance
of CAR IDS during
upgrade.
Unified Communications Unified Communications 1515 / TCP Database replication

Manager (DB) Manager (DB) between nodes during
installation
Cisco Extended Functions Unified Communications 2552 / TCP Allows subscribers to

(QRT) Manager (DB) receive Cisco Unified
Communications Manager
database change
notification

3
Unified Communications Unified Communications 2551 / TCP Intracluster

Manager Manager communication between
Cisco Extended Services
for Active/Backup
determination
Unified Communications Unified Communications 2555 / TCP Real-time Information

Manager (RIS) Manager (RIS) Services (RIS) database
server
Unified Communications Unified Communications 2556 / TCP Real-time Information

Manager Manager (RIS) Services (RIS) database
(RTMT/AMC/SOAP) client for Cisco RIS
Unified Communications Unified Communications 4040 / TCP DRS Primary Agent

Manager (DRS) Manager (DRS)
Unified Communications Unified Communications 5001/TCP This port is used by SOAP

Manager (Tomcat) Manager (SOAP) monitor for Real Time
Monitoring Service.

Manager (Tomcat) Manager (SOAP) monitor for Performance
Monitor Service.

Manager (Tomcat) Manager (SOAP) monitor for Control
Center Service.

Manager (Tomcat) Manager (SOAP) monitor for Log
Collection Service.
Standard CCM Admin Unified Communications 5005 / TCP This port is used by SOAP
Users / Admin Manager CDROnDemand2 services
Unified Communications Unified Communications 5007 / TCP SOAP monitor

Manager (Tomcat) Manager (SOAP)
Unified Communications Unified Communications Ephemeral / TCP Cisco Trace Collection

Manager (RTMT) Manager (TCTS) Tool Service (TCTS) --
the back end service for
RTMT Trace and Log
Central (TLC)
Unified Communications Unified Communications 7000, 7001, 7002 / TCP This port is used for
Manager (Tomcat) Manager (TCTS) communication between
Cisco Trace Collection
Tool Service and Cisco
Trace Collection servlet.

4
Unified Communications Unified Communications 8001 / TCP Client database change

Manager (DB) Manager (CDLM) notification

Manager (SDL) Manager (SDL) communication service

Manager (SDL) Manager (SDL) communication service (to
CTI)
Unified Communications CMI Manager 8004 / TCP Intracluster

Manager communication between
Cisco Unified
and CMI Manager
Unified Communications Unified Communications 8005 / TCP Internal listening port

Manager (Tomcat) Manager (Tomcat) used by Tomcat shutdown
scripts
Unified Communications Unified Communications 8080 / TCP Communication between

Manager (Tomcat) Manager (Tomcat) servers used for diagnostic
tests
Gateway Unified Communications 8090 HTTP Port for

Manager communication between
CuCM and GW (Cayuga
Unified Communications Gateway interfae) for Gateway
Manager Recording feature.
Unified Communications Unified Communications 8500 / TCP and UDP Intracluster replication of
Manager (IPSec) Manager (IPSec) system data by IPSec
Cluster Manager
Unified Communications Unified Communications 8888 - 8889 / TCP RIS Service Manager
Manager (RIS) Manager (RIS) status request and reply
Location Bandwidth Location Bandwidth 9004 / TCP Intracluster

Manager (LBM) Manager (LBM) communication between
LBMs
Unified Communications Unified Communications 22 / TCP Cisco SFTP service. You

Manager Publisher Manager Subscriber must open this port when
installing a new
subscriber.
Unified Communications Unified Communications 8443 / TCP Allows access to Control

Manager Manager Center - Feature and
Network service between
nodes.

5
Common Service Ports

Table 2: Common Service Ports
Endpoint Unified Communications 7 Internet Control Message

Manager Protocol (ICMP) This
protocol number carries
Unified Communications Endpoint echo-related traffic. It
Manager does not constitute a port
as indicated in the column
heading.
Unified Communications SFTP server 22 / TCP Send the backup data to

Manager (DRS, CDR) SFTP server. (DRS Local
Agent)
Send the CDR data to
SFTP server.
Endpoint Unified Communications 67 / UDP Cisco Unified

Manager (DHCP Server) Communications Manager
acting as a DHCP server
Note Cisco does not
recommend
running DHCP
server on Cisco
Unified
Communications
Manager.
Unified Communications DHCP Server 68 / UDP Cisco Unified

Manager Communications Manager
acting as a DHCP client
Note Cisco does not
recommend
running DHCP
client on Cisco
Unified
Communications
Manager.
Configure Cisco
Unified
Communications
Manager with
static IP
addresses
instead.)

6
Endpoint or Gateway Unified Communications 69, 6969, then Ephemeral Trivial File Transfer
Manager / UDP Protocol (TFTP) service
to phones and gateways
Endpoint or Gateway Unified Communications 6970 / TCP Trivial File Transfer

Manager Protocol (TFTP) between
primary and proxy
servers.
HTTP service from the
TFTP server to phones
and gateways.
Unified Communications NTP Server 123 / UDP Network Time Protocol

Manager (NTP)
SNMP Server Unified Communications 161 / UDP SNMP service response

Manager (requests from
management applications)
CUCM Server SNMP SNMP trap destination 162 / UDP SNMP traps
Primary Agent application
SNMP Server Unified Communications 199 / TCP Native SNMP agent

Manager listening port for SMUX
support
Unified Communications DHCP Server 546 / UDP DHCPv6. DHCP port for
Manager IPv6.
Unified Communications Location Bandwidth 5546 / TCP Enhanced Location CAC

Manager Serviceability Manager (LBM) Serviceability
Unified Communications Location Bandwidth 5547 / TCP Call Admission requests

Manager Manager (LBM) and bandwidth deductions
Unified Communications Unified Communications 6161 / UDP Used for communication

Manager Manager between Primary Agent
and Native Agent to
process Native agent MIB
requests
Unified Communications Unified Communications 6162 / UDP Used for communication

Manager Manager between Primary Agent
and Native Agent to
forward notifications
generated from Native
Agent
Centralized TFTP Alternate TFTP 6970 / TCP Centralized TFTP File

Locator Service

7
Unified Communications Unified Communications 7161 / TCP Used for communication

Manager Manager between SNMP Primary
Agent and subagents
SNMP Server Unified Communications 7999 / TCP Cisco Discovery Protocol

Manager (CDP) agent
communicates with CDP
executable
Endpoint Unified Communications 443, 8443 / TCP Used for Cisco User Data
Manager Services (UDS) requests
Unified Communications Unified Communications 9050 / TCP Service CRS requests

Manager Manager through the TAPS
residing on Cisco Unified
Unified Communications Unified Communications 61441 / UDP Cisco Unified

Manager Manager Communications Manager
applications send out
alarms to this port through
UDP. Cisco Unified
MIB agent listens on this
port and generates SNMP
traps per Cisco Unified
MIB definition.
Unified Communications Unified Communications 5060, 5061 / TCP Provide trunk-based SIP
Manager Manager services
Unified Communications Unified Communications 7501 Used by Intercluster

Manager Manager Lookup Service (ILS) for
certificate based
authentication.
Unified Communications Unified Communications 7502 Used by ILS for password

Manager Manager based authentication.
-- -- 8000-48200 ASR and ISR G3

platforms default port
range.
16384-32766 ISR G2 platform default

port range.

8
Ports Between Cisco Unified Communications Manager and LDAP Directory
Ports Between Cisco Unified Communications Manager and LDAP Directory

Table 3: Ports Between Cisco Unified Communications Manager and LDAP Directory
Unified Communications External Directory 389, 636, 3268, 3269 / Lightweight Directory
Manager TCP Access Protocol (LDAP)
query to external directory
External Directory Unified Communications Ephemeral (Active Directory,
Manager Netscape Directory)
Web Requests From CCMAdmin or CCMUser to Cisco Unified Communications

Manager
Table 4: Web Requests From CCMAdmin or CCMUser to Cisco Unified Communications Manager
Browser Unified Communications 80, 8080 / TCP Hypertext Transport

Manager Protocol (HTTP)
Browser Unified Communications 443, 8443 / TCP Hypertext Transport

Manager Protocol over SSL
(HTTPS)
Web Requests From Cisco Unified Communications Manager to Phone

Table 5: Web Requests From Cisco Unified Communications Manager to Phone
Unified Communications Phone 80 / TCP Hypertext Transport

Manager Protocol (HTTP)
• QRT
• RTMT
• Find and List Phones
page
• Phone Configuration
page

9
Signaling, Media, and Other Communication Between Phones and Cisco Unified Communications Manager
Signaling, Media, and Other Communication Between Phones and Cisco

Unified Communications Manager
Table 6: Signaling, Media, and Other Communication Between Phones and Cisco Unified Communications Manager
Phone Unified Communications 53/ TCP Session Initiation Protocol

Manager (SIP) phones resolve the
Fully Qualified Domain
Name (FQDN) using a
Domain Name System
(DNS)
Note By default,
some wireless
access points
block TCP 53
port, which
prevents
wireless SIP
phones from
registering
when CUCM
is configured
using FQDN.
Phone Unified Communications 69, then Ephemeral / UDP Trivial File Transfer
Manager (TFTP) Protocol (TFTP) used to
download firmware and
configuration files
Phone Unified Communications 2000 / TCP Skinny Client Control

Manager Protocol (SCCP)
Phone Unified Communications 2443 / TCP Secure Skinny Client

Manager Control Protocol (SCCPS)
Phone Unified Communications 2445 / TCP Provide trust verification

Manager service to endpoints.
Phone Unified Communications 3804 / TCP Certificate Authority

Manager (CAPF) Proxy Function (CAPF)
listening port for issuing
Locally Significant
Certificates (LSCs) to IP
phones

10
Signaling, Media, and Other Communication Between Phones and Cisco Unified Communications Manager
Phone Unified Communications 5060 / TCP and UDP Session Initiation Protocol
Manager (SIP) phone
Unified Communications Phone

Manager
Phone Unified Communications 5061 TCP Secure Session Initiation

Manager Protocol (SIPS) phone
Unified Communications Phone

Manager
Phone Unified Communications 6970 TCP HTTP-based download of

Manager (TFTP) firmware and
configuration files
Phone Unified Communications 6971, 6972 / TCP HTTPS interface to TFTP.
Manager (TFTP) Phones use this port to
download a secure
configuration file from
TFTP.
Phone Unified Communications 8080 / TCP Phone URLs for XML

Manager applications,
authentication, directories,
services, etc. You can
configure these ports on a
per-service basis.
Phone Unified Communications 9443 / TCP Phone use this port for
Manager authenticated contact
search.
Phone Unified Communications 9444 Phones utilizes this port

Manager number to use the Headset
Management feature.
IP VMS Phone 16384 - 32767 / UDP Real-Time Protocol

(RTP), Secure Real-Time
Phone IP VMS Protocol (SRTP)
Note Cisco Unified
Communications
Manager only
uses
24576-32767
although other
devices use the
full range.

11
Signaling, Media, and Other Communication Between Gateways and Cisco Unified Communications Manager
Signaling, Media, and Other Communication Between Gateways and Cisco

Unified Communications Manager
Table 7: Signaling, Media, and Other Communication Between Gateways and Cisco Unified Communications Manager
Gateway Unified Communications 47, 50, 51 Generic Routing

Manager Encapsulation (GRE),
Encapsulating Security
Unified Communications Gateway Payload (ESP),
Manager Authentication Header
(AH). These protocols
numbers carry encrypted
IPSec traffic. They do not
constitute a port as
indicated in the column
heading.
Gateway Unified Communications 500 / UDP Internet Key Exchange

Manager (IKE) for IP Security
protocol (IPSec)
Unified Communications Gateway establishment
Manager
Gateway Unified Communications 69, then Ephemeral / UDP Trivial File Transfer
Manager (TFTP) Protocol (TFTP)
Unified Communications CIME ASA 1024-65535 / TCP Port mapping service.

Manager with Cisco Only used in the CIME
Intercompany Media off-path deployment
Engine (CIME) trunk model.
Gatekeeper Unified Communications 1719 / UDP Gatekeeper (H.225) RAS

Manager
Gateway Unified Communications 1720 / TCP H.225 signaling services

Manager for H.323 gateways and
Intercluster Trunk (ICT)
Unified Communications Gateway
Manager
Gateway Unified Communications Ephemeral / TCP H.225 signaling services

Manager on gatekeeper-controlled
trunk
Manager

12
Signaling, Media, and Other Communication Between Gateways and Cisco Unified Communications Manager
Gateway Unified Communications Ephemeral / TCP H.245 signaling services

Manager for establishing voice,
video, and data
Manager Note The H.245 port
used by the
remote system
depends on the
type of
gateway.
For IOS
gateways, the
H.245 port
range is from
11000 to
65535.
Gateway Unified Communications 2000 / TCP Skinny Client Control

Manager Protocol (SCCP)
Gateway Unified Communications 2001 / TCP Upgrade port for 6608

Manager gateways with Cisco
Unified Communications
Manager deployments
Gateway Unified Communications 2002 / TCP Upgrade port for 6624

Manager gateways with Cisco
Manager deployments
Gateway Unified Communications 2427 / UDP Media Gateway Control

Manager Protocol (MGCP)
gateway control
Gateway Unified Communications 2428 / TCP Media Gateway Control

Manager Protocol (MGCP)
backhaul
-- -- 4000 - 4005 / TCP These ports are used as

phantom Real-Time
Transport Protocol (RTP)
and Real-Time Transport
Control Protocol (RTCP)
ports for audio, video and
data channel when Cisco
Manager does not have
ports for these media.

13
Communication Between Applications and Cisco Unified Communications Manager
Gateway Unified Communications 5060 / TCP and UDP Session Initiation Protocol
Manager (SIP) gateway and
Intercluster Trunk (ICT)
Manager
Gateway Unified Communications 5061 / TCP Secure Session Initiation

Manager Protocol (SIPS) gateway
and Intercluster Trunk
Unified Communications Gateway (ICT)
Manager
Gateway Unified Communications 16384 - 32767 / UDP Real-Time Protocol

Manager (RTP), Secure Real-Time
Protocol (SRTP)
Manager Note Cisco Unified
Communications
Manager only
uses
24576-32767
although other
devices use the
full range.
Communication Between Applications and Cisco Unified Communications

Manager
Table 8: Communication Between Applications and Cisco Unified Communications Manager
CTL Client Unified Communications 2444 / TCP Certificate Trust List

Manager CTL Provider (CTL) provider listening
service in Cisco Unified
Cisco Unified Unified Communications 2748 / TCP CTI application server

Communications App Manager
Cisco Unified Unified Communications 2749 / TCP TLS connection between

Communications App Manager CTI applications
(JTAPI/TSP) and
CTIManager
Cisco Unified Unified Communications 2789 / TCP JTAPI application server

Communications App Manager

14
Communication Between Applications and Cisco Unified Communications Manager
Unified Communications Unified Communications 2912 / TCP Cisco Unified

Manager Assistant Manager Communications Manager
Console Assistant server (formerly
IPMA)
Unified Communications Unified Communications 1103 -1129 / TCP Cisco Unified

Manager Attendant Manager Communications Manager
Console Attendant Console (AC)
JAVA RMI Registry
server
Unified Communications Unified Communications 1101 / TCP RMI server sends RMI
Manager Attendant Manager callback messages to
Console clients on these ports.
Unified Communications Unified Communications 1102 / TCP Attendant Console (AC)

Manager Attendant Manager RMI server bind port --
Console RMI server sends RMI
messages on these ports.

server line state port
receives ping and
registration message from,
and sends line states to,
the attendant console
server.

clients register with the
AC server for line and
device state information.

ManagerAttendant Manager Communications Manager
clients register to the AC
server for call control.
Unified Communications IOS Router running SAF 5050 / TCP Multi-Service IOS Router
Manager with SAF/CCD image running EIGRP/SAF
Protocol.

15
Communication Between CTL Client and Firewalls
Unified Communications Cisco Intercompany 5620 / TCP VAP protocol used to

Manager Media Engine (IME) communicate to the Cisco
Cisco recommends a
Server Intercompany Media
value of 5620 for this
Engine server.
port, but you can change
the value by executing the
add ime vapserver or set
ime vapserver port CLI
command on the Cisco
IME server.
Cisco Unified Unified Communications 8443 / TCP AXL / SOAP API for
Communications App Manager programmatic reads from
or writes to the Cisco
Manager database that
third parties such as
billing or telephony
management applications
use.
Communication Between CTL Client and Firewalls

Table 9: Communication Between CTL Client and Firewalls
CTL Client TLS Proxy Server 2444 / TCP Certificate Trust List
(CTL) provider listening
service in an ASA firewall
Communication Between Cisco Smart Licensing Service and Cisco Smart

Software Manager
Cisco Smart Licensing Service in Unified Communications Manager sets up direct communication with Cisco
Smart Software Manager through Call Home.
Table 10: Communication Between Cisco Smart Licensing Service and Cisco Smart Software Manager
Unified Communications Cisco Smart Software 443 / HTTPS Smart Licensing Service
Manager (Cisco Smart Manager (CSSM) sends the license usage to
Licensing Service) CSSM to check whether
Unified CM is a
complaint or not.

16
Special Ports on HP Servers
Special Ports on HP Servers

Table 11: Special Ports on HP Servers
Endpoint HP SIM 2301 / TCP HTTP port to HP agent
Endpoint HP SIM 2381 / TCP HTTPS port to HP agent
Endpoint Compaq Management 25375, 25376, 25393 / COMPAQ Management

Agent UDP Agent extension (cmaX)
Endpoint HP SIM 50000 - 50004 / TCP HTTPS port to HP SIM
Port References
Firewall Application Inspection Guides
ASA Series reference information
http://www.cisco.com/c/en/us/support/security/asa-5500-series-next-generation-firewalls/
tsd-products-support-series-home.html
PIX Application Inspection Configuration Guides
http://www.cisco.com/c/en/us/support/security/pix-firewall-software/
products-installation-and-configuration-guides-list.html
FWSM 3.1 Application Inspection Configuration Guide
http://www-author.cisco.com/c/en/us/td/docs/security/fwsm/fwsm31/configuration/guide/fwsm_cfg/inspct_
f.html
IETF TCP/UDP Port Assignment List

Internet Assigned Numbers Authority (IANA) IETF assigned Port List
http://www.iana.org/assignments/port-numbers
IP Telephony Configuration and Port Utilization Guides

Cisco CRS 4.0 (IP IVR and IPCC Express) Port Utilization Guide
http://www.cisco.com/en/US/products/sw/custcosw/ps1846/products_installation_and_configuration_guides_list.html
Port Utilization Guide for Cisco ICM/IPCC Enterprise and Hosted Editions
http://www.cisco.com/en/US/products/sw/custcosw/ps1001/products_installation_and_configuration_guides_list.html
Cisco Unified Communications Manager Express Security Guide to Best Practices
http://www.cisco.com/en/US/netsol/ns340/ns394/ns165/ns391/networking_solutions_design_guidance09186a00801f8e30.html

17
VMware Port Assignment List
Cisco Unity Express Security Guide to Best Practices

http://www.cisco.com/en/US/netsol/ns340/ns394/ns165/ns391/networking_solutions_design_guidance09186a00801f8e31.html#wp41149
VMware Port Assignment List

TCP and UDP Ports for vCenter Server, ESX hosts, and Other Network Components Management Access

18

Cisco Unified Communications Manager TCP and UDP Port Usage

Uploaded by

Copyright:

Available Formats

Cisco Unified Communications Manager TCP and UDP Port Usage

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Cisco Unified Communications Manager TCP and UDP Port Usage

Uploaded by

Copyright:

Available Formats

Cisco Unified Communications Manager TCP and

UDP Port Usage