Correct, look at page 12 for the firewall section at http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-5/Mobile-Remote-Access-via-VCS-Deployment-Guide-X8-5.pdf
Also, Nate mentioned newer port list, so double check your network settings from this doc. On Thu, Apr 2, 2015 at 7:36 PM, Erick Wellnitz <[email protected]> wrote: > We aren't doing advanced networking on either the c or e. > > I'm guessing because we do nat on the e we need to configure the nat > reflection, is that a correct assumption? > > On Apr 2, 2015 7:28 PM, "Charles Goldsmith" <[email protected]> wrote: >> >> Erick, are you doing advanced networking on the C or NAT reflection >> for the traversal? Is your traversal connected? I would check for >> firewall drops when trying to connect if the traversal is connected. >> >> On Thu, Apr 2, 2015 at 6:50 PM, Erick Wellnitz <[email protected]> >> wrote: >> > Not a security or a firewall guy so please bear with me. >> > >> > We've opened up the ports as advised in this: >> > >> > http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-1/Cisco-Expressway-IP-Port-Usage-for-Firewall-Traversal-Deployment_Guide-X8-1.pdf >> > >> > Now, the weird part is that with a jabber client on the internet we get >> > no >> > RTP with this configuration. Only when we open any to the Expressway-E >> > do >> > we get RTP, however we don't get signalling to the jabber client on the >> > internet. >> > >> > Are there any other ports we should be opening? >> > >> > I was under the impression that creating the UC Traversal zone opened up >> > the >> > logical channel between the C and the E so that everything outbound to >> > the >> > internet could get to the DMZ and out to the internet. Am I >> > misunderstanding? Is there more configuration I need to piece together >> > to >> > make the solution whole? >> > >> > Thanks in advance! >> > >> > _______________________________________________ >> > cisco-voip mailing list >> > [email protected] >> > https://puck.nether.net/mailman/listinfo/cisco-voip >> > _______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
