Cisco Expressway Series User Manual

Web Proxy for Cisco Meeting Server Port Reference
Purpose Src. IP Src.
ports
Protocol Dest. IP Dst. Ports
WebRTC client
access
Guest PCs 1024-
65535
TLS Expressway-E public
IP
443
†
Web interface
access
Administrator
PCs
1024-
65535
TLS Expressway-E IP NOT443
*
SSHtunnels for
firewall traversal
Expressway-
C
30000-
35999
TCP Expressway-E private
IP
2222
SIPsignaling Expressway-
C
25000-
29999
TCP or
TLS
Expressway-E 7001 (for first traversal zone;
7002 for second etc.)
TURNclient
requests
Any IP UDP and
TCP
Expressway-E
TURNserver public IP
3478
TURNclient
requests
Meeting
Server
3478 UDP and
TCP
Expressway-E
TURNserver private IP
3478
TURNrelays
‡
Expressway-E
public IP
24000-
29999
UDPand
TCP
Expressway-E public
IP
24000-29999
Table 20 Web Proxy for Meeting Server
† You must change the administration port because WebRTCclients use 443. If the WebRTCbrowser tries to access
port 80, the Expressway-E redirects the connection to 443.
*Options for alternative management ports are shown on the web interface. You can use the CLIto change it to a
different port, eg. 7443, so that you can lock it down. We strongly advise against opening an external management
port on the public IPaddress. If the browser tries to access port 80, the Expressway-E redirects the connection to
your chosen port.
‡ You must configure your external firewall to allow NATreflection for the Expressway-Epublic IPaddress. (Firewalls
typically mistrust packets that have the same source and destination IPaddress)
39
Cisco Expressway IP Port Usage Configuration Guide

Cisco Expressway Series Specifications

General

Category	Gateway
Deployment Options	On-premises, Cloud
Protocols	SIP, H.323
Security	TLS, SRTP
Management	CLI
Virtualization	VMware
Form Factor	Appliance, Virtual
Functionality	Interoperability
Integration	Cisco Unified Communications Manager
Network Interfaces	Gigabit Ethernet