[cisco-voip] tcp/8088

[Ed Leatherman]

We're on CM 6.1 at the moment but planning to move to 7 soon -
actually just got UCCX upgraded to facilitate that this past weekend.
This change to services is something I need to explore in the lab.

IPPA is using (I think) port 6793 or something in that neighborhood,
definitely not 8088 at the moment.

On Tue, Mar 23, 2010 at 5:01 PM, Wes Sisk <wsisk at cisco.com> wrote:
> Hmm, 8088 was the port associated with IPPhone Agent service.  Phones now
> figure out appropriate URL based on configuration; they don't follow the
> URLs provided in the config file directly.  See CSCtc19931.
>
> /Wes
>
> On Tuesday, March 23, 2010 4:38:09 PM, Ed Leatherman
> <ealeatherman at gmail.com> wrote:
>
> URL's all look "correct" in the xml file.
>
> Think I found the problem, Ryan was right at first I believe.
>
> I was able to get a packet cap of a phone trying to initiate this
> connection, and directly before that it had a voice mail left to it,
> and Unity tried to initiate the phone view operation on the phone.
> Phone sent an auth request to the auth URL, it was denied, and in the
> reply back the authentication server specified a URL http://pub:8088.
> The phone immediately tried to connect to port 8088 on the publisher.
> Pub replied with a Reset packet and then ignored further attempts to
> connect.
>
> We've had IPCC setup as the authentication server for awhile now, IIRC
> in the past we had to have this setup for IP Phone Agent to work
> properly. Perhaps this is no longer the case.
>
> 2 questions i'm going to have to figure out - A) can I switch the auth
> URL back to the normal one for the publisher and not break anything,
> and B) why did Unity try to initiate phone view, when the
> phone/account isn't setup for that feature.
>
> Thanks for all the suggestions everyone.
>
> On Tue, Mar 23, 2010 at 10:30 AM, Wes Sisk <wsisk at cisco.com> wrote:
>
>
> Ed,
>
> You might fetch the phone's config file manually and check the URL's
> provided to the phones in the config file.
>
> tftp -i <cm_tftp> get SEP<mac>.cnf.xml
>
> /Wes
>
> On Monday, March 22, 2010 2:42:40 PM, Ed Leatherman <ealeatherman at gmail.com>
> wrote:
>
> I got a RSPAN on one of the phones that had a number of hits on the
> ACL earlier today - maybe I can catch it in the act. Only service
> provisioned on the phone is FastDials, which is pointing at <pub
> IP>:8080.
>
> On Mon, Mar 22, 2010 at 1:45 PM, Wes Sisk <wsisk at cisco.com> wrote:
>
>
> I don't believe port 8088 is open in the firewall by default.  I also don't
> see anything listening on 8088.
>
>
>
>
>
>
>
>
>



-- 
Ed Leatherman