[cisco-voip] tcp/8088

[Ed Leatherman]

This answers one question..

If you are upgrading from Cisco Unified Contact Center Express 3.x,
and you changed the default URL Authentication parameter in Unified CM
Administration, you should now change it back to the original setting.
This parameter is located on the System > Enterprise Parameters page,
in the Phone
URL Parameters section. It should be:
http://<Unified CM IP address>:8080/ccmcip/authenticate.jsp

I've had the wrong authentication URL in there for... a long time.
Surprised it never broke phone agent.

On Tue, Mar 23, 2010 at 5:27 PM, Ed Leatherman <ealeatherman at gmail.com> wrote:
> We're on CM 6.1 at the moment but planning to move to 7 soon -
> actually just got UCCX upgraded to facilitate that this past weekend.
> This change to services is something I need to explore in the lab.
>
> IPPA is using (I think) port 6793 or something in that neighborhood,
> definitely not 8088 at the moment.
>
> On Tue, Mar 23, 2010 at 5:01 PM, Wes Sisk <wsisk at cisco.com> wrote:
>> Hmm, 8088 was the port associated with IPPhone Agent service.  Phones now
>> figure out appropriate URL based on configuration; they don't follow the
>> URLs provided in the config file directly.  See CSCtc19931.
>>
>> /Wes
>>
>> On Tuesday, March 23, 2010 4:38:09 PM, Ed Leatherman
>> <ealeatherman at gmail.com> wrote:
>>
>> URL's all look "correct" in the xml file.
>>
>> Think I found the problem, Ryan was right at first I believe.
>>
>> I was able to get a packet cap of a phone trying to initiate this
>> connection, and directly before that it had a voice mail left to it,
>> and Unity tried to initiate the phone view operation on the phone.
>> Phone sent an auth request to the auth URL, it was denied, and in the
>> reply back the authentication server specified a URL http://pub:8088.
>> The phone immediately tried to connect to port 8088 on the publisher.
>> Pub replied with a Reset packet and then ignored further attempts to
>> connect.
>>
>> We've had IPCC setup as the authentication server for awhile now, IIRC
>> in the past we had to have this setup for IP Phone Agent to work
>> properly. Perhaps this is no longer the case.
>>
>> 2 questions i'm going to have to figure out - A) can I switch the auth
>> URL back to the normal one for the publisher and not break anything,
>> and B) why did Unity try to initiate phone view, when the
>> phone/account isn't setup for that feature.
>>
>> Thanks for all the suggestions everyone.
>>
>> On Tue, Mar 23, 2010 at 10:30 AM, Wes Sisk <wsisk at cisco.com> wrote:
>>
>>
>> Ed,
>>
>> You might fetch the phone's config file manually and check the URL's
>> provided to the phones in the config file.
>>
>> tftp -i <cm_tftp> get SEP<mac>.cnf.xml
>>
>> /Wes
>>
>> On Monday, March 22, 2010 2:42:40 PM, Ed Leatherman <ealeatherman at gmail.com>
>> wrote:
>>
>> I got a RSPAN on one of the phones that had a number of hits on the
>> ACL earlier today - maybe I can catch it in the act. Only service
>> provisioned on the phone is FastDials, which is pointing at <pub
>> IP>:8080.
>>
>> On Mon, Mar 22, 2010 at 1:45 PM, Wes Sisk <wsisk at cisco.com> wrote:
>>
>>
>> I don't believe port 8088 is open in the firewall by default.  I also don't
>> see anything listening on 8088.
>>
>>
>>
>>
>>
>>
>>
>>
>>
>
>
>
> --
> Ed Leatherman
>



-- 
Ed Leatherman