[cisco-voip] Expressway C&E issue

[Charles Goldsmith]

Correct, look at page 12 for the firewall section at
http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-5/Mobile-Remote-Access-via-VCS-Deployment-Guide-X8-5.pdf

Also, Nate mentioned newer port list, so double check your network
settings from this doc.

On Thu, Apr 2, 2015 at 7:36 PM, Erick Wellnitz <ewellnitzvoip at gmail.com> wrote:
> We aren't doing advanced networking on either the c or e.
>
> I'm guessing because we do nat on the e we need to configure the nat
> reflection, is that a correct assumption?
>
> On Apr 2, 2015 7:28 PM, "Charles Goldsmith" <wokka at justfamily.org> wrote:
>>
>> Erick, are you doing advanced networking on the C or NAT reflection
>> for the traversal?  Is your traversal connected?  I would check for
>> firewall drops when trying to connect if the traversal is connected.
>>
>> On Thu, Apr 2, 2015 at 6:50 PM, Erick Wellnitz <ewellnitzvoip at gmail.com>
>> wrote:
>> > Not a security or a firewall guy so please bear with me.
>> >
>> > We've opened up the ports as advised in this:
>> >
>> > http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-1/Cisco-Expressway-IP-Port-Usage-for-Firewall-Traversal-Deployment_Guide-X8-1.pdf
>> >
>> > Now, the weird part is that with a jabber client on the internet we get
>> > no
>> > RTP with this configuration.  Only when we open any to the Expressway-E
>> > do
>> > we get RTP, however we don't get signalling to the jabber client on the
>> > internet.
>> >
>> > Are there any other ports we should be opening?
>> >
>> > I was under the impression that creating the UC Traversal zone opened up
>> > the
>> > logical channel between the C and the E so that everything outbound to
>> > the
>> > internet could get to the DMZ and out to the internet.  Am I
>> > misunderstanding?  Is there more configuration I need to piece together
>> > to
>> > make the solution whole?
>> >
>> > Thanks in advance!
>> >
>> > _______________________________________________
>> > cisco-voip mailing list
>> > cisco-voip at puck.nether.net
>> > https://puck.nether.net/mailman/listinfo/cisco-voip
>> >