Port Usage Marcelo Zanata

Intracluster Ports Between CUCMs

From (Sender) To (Listener) Des Port Purpouse
Endpoint CUCM 514/udp System Logging Service
CUCM RTMT 1090,1099/tcp Cisco AMC Service for RTMT performance monitors, data collection, logging, and alerting
CUCM (DB) CUCM (DB) 1500,1501/tcp Database connection (1501/tcp is the secondary connection)
CUCM (DB) CUCM (DB) 1515/tcp Database replication between nodes during installation
Cisco Extended
Functions (QRT)
CUCM (DB) 2552/tcp Allows subscribers to receive CUCM database change notification
CUCM CUCM 2551/tcp Intracluster communication between Cisco Extended Services for Active/Backup determination
CUCM (RIS) CUCM (RIS) 2555/tcp Real-time Information Services (RIS) database server
CUCM
(RTMT/AMC/SOAP)
CUCM (RIS) 2556/tcp Real-time Information Services (RIS) database client for Cisco RIS
CUCM (DRF) CUCM (DRF) 4040/tcp DRF Master Agent
CUCM (Tomcat) CUCM (SOAP) 5007/tcp SOAP monitor
Endpoint License Manager 5555/tcp License Manager to listen to license request
CUCM (RTMT) CUCM (TCTS) Ephemeral/tcp
Cisco Trace Collection Tool Service (TCTS) -- the backend service for RTMT Trace & Log Central
(TLC)
CUCM (Tomcat) CUCM (TCTS)
7000 then
Ephemeral
(Linux)/tcp
This port is used for communication between Cisco Trace Collection Tool Service and Cisco Trace
Collection servlet.
CUCM Certificate Manager 7070/tcp Certificate Manager service
CUCM (DB) CUCM (CDLM) 8001/tcp Client database change notification
CUCM (SDL) CUCM (SDL) 8002/tcp Intracluster communication service
CUCM (SDL) CUCM (SDL) 8003/tcp Intracluster communication service (to CTI)
CUCM CMI Manager 8004/tcp Intracluster communication between CUCM and CMI Manager
CUCM (Tomcat) CUCM (Tomcat) 8005/tcp Internal listening port used by Tomcat shutdown scripts
CUCM (IPSec) CUCM (IPSec) 8500/tcp,udp Intracluster replication of system data by IPSec Cluster Manager
CUCM (RIS) CUCM (RIS) 8888-8889/tcp RIS Service Manager status request and reply
Common Service Ports
From (Sender) To (Listener) Des Port Purpouse
Endpoint CUCM
7
Internet Control Message Protocol (ICMP) This protocol number carries echo-related traffic. It does
not constitute a port as indicated in the column heading. CUCM Endpoint
CUCM Endpoint 22/tcp Secure FTP service, SSH access
Endpoint CUCM (DNS Server)
Ephemeral/udp CUCM acting as a DNS server or DNS client
CUCM DNS Server
Endpoint
CUCM (DHCP
Server)
67/udp CUCM acting as a DHCP server (Note: Cisco does not recommend running DHCP server on CUCM.)
CUCM DHCP Server 68/udp CUCM acting as a DHCP client
Endpoint or
Gateway
CUCM
69, 6969, then
Ephemeral/udp
Trivial File Transfer Protocol (TFTP) service to phones and gateways
CUCM NTP Server 123/udp Network Time Protocol (NTP)
SNMP Server CUCM 161/udp SNMP service response (requests from management applications)
SNMP Server CUCM 199/tcp Native SNMP agent listening port for SMUX support
CUCM CUCM 6161/udp
Used for communication between Master Agent and Native Agent to process Native agent MIB
requests
CUCM CUCM 6162/udp
Used for communication between Master Agent and Native Agent to forward notifications
generated from Native Agent
CUCM CUCM 6666/udp Netdump server
Centralized TFTP Alternate TFTP 6970/tcp Centralized TFTP File Locator Service
CUCM CUCM 7161/tcp Used for communication between SNMP Master Agent and subagents
SNMP Server CUCM 7999/tcp Cisco Discovery Protocol (CDP) agent communicates with CDP executable
CUCM CUCM 9050/tcp Service CRS requests through the TAPS residing on CUCM
CUCM CUCM 61441/udp
CUCM applications send out alarms to this port via UDP. CUCM MIB agent listens on this port and
generates SNMP traps per CUCM MIB definition.
CUCM CUCM Ephemeral Provide trunk-based SIP services
Between CUCM and LDAP Directory
From (Sender) To (Listener) Des Port Purpouse
CUCM External Directory
Ephemeral/ tcp Lightweight Directory Access Protocol
External Directory CUCM
CUCM LDAP Server 3268/??? Microsoft AD Global Catalog Search
CUCM LDAP Server 389 Subtree specific search (LDAP Default Port)
Web Requests from CCMAdmin or CCMUser to CUCM
From (Sender) To (Listener) Des Port Purpouse
CUCM
QRT
RTMT
Find and List
Phones page
Phone
Phone 80/tcp Hypertext Transport Protocol (HTTP)
Port Usage Marcelo Zanata

Configuration
page

Signaling, Media, and Other Communication Between Phones and CUCM
From (Sender) To (Listener) Des Port Purpouse
Phone CUCM (TFTP) 69, Ephemeral/udp Trivial File Transfer Protocol (TFTP) used to download firmware and configuration files
Phone CUCM 8080/tcp
Phone URLs for XML applications, authentication, directories, services, and so on. You can
configure these ports on a per-service basis.
Phone CUCM 2000/tcp Skinny Client Control Protocol (SCCP)
Phone CUCM 2443/tcp Secure Skinny Client Control Protocol (SCCPS)
Phone CUCM (CAPF) 3804/tcp
Certificate Authority Proxy Function (CAPF) listening port for issuing Locally Significant Certificates
(LSCs) to IP phones
Phone CUCM
5060/tcp,udp Session Initiation Protocol (SIP) phone
CUCM Phone
Phone CUCM
5061/tcp,udp Secure Session Initiation Protocol (SIPS) phone
CUCM Phone
IP VMS Phone
16384 - 32767/udp
Real-Time Protocol (RTP), Secure Real-Time Protocol (SRTP) (Note: CUCM only uses 24576-32767
although other devices use the full range.)
Phone IP VMS
Signaling, Media, and Other Communication Between Gateways and CUCM
From (Sender) To (Listener) Des Port Purpouse
Gateway CUCM
47, 50, 51
Generic Routing Encapsulation (GRE), Encapsulating Security Payload (ESP), Authentication Header
(AH). These protocols numbers carry encrypted IPSec traffic. They do not constitute a port as
indicated in the column heading.
CUCM Gateway
Gateway CUCM
500/udp Internet Key Exchange (IKE) for IP Security protocol (IPSec) establishment
CUCM Gateway
Gateway CUCM (TFTP)
69, then
Ephemeral/udp
Trivial File Transfer Protocol (TFTP)
Gatekeeper CUCM 1719/udp Gatekeeper (H.225) RAS
Gateway CUCM
1720/tcp H.225 signaling services for H.323 gateways and Intercluster Trunk (ICT)
CUCM Gateway
Gateway CUCM
Ephemeral/tcp
H.225 signaling services on gatekeeper-controlled trunk
CUCM Gateway
Gateway CUCM
Ephemeral/tcp
H.245 signaling services for establishing voice, video, and data
CUCM Gateway
Gateway CUCM 2000/tcp Skinny Client Control Protocol (SCCP)
Gateway CUCM 2001 /tcp Upgrade port for 6608 gateways with Cisco CUCM deployments
Gateway CUCM 2002 /tcp Upgrade port for 6624 gateways with Cisco CUCM deployments
Gateway CUCM 2427/udp Media Gateway Control Protocol (MGCP) gateway control
Gateway CUCM 2428/tcp Media Gateway Control Protocol (MGCP) backhaul
Gateway CUCM 2727/tcp Media Gateway Control Protocol (MGCP) backhaul
Gateway CUCM
5060/tcp ,udp Session Initiation Protocol (SIP) gateway and Intercluster Trunk (ICT)
CUCM Gateway
Gateway CUCM
5061/tcp ,udp Secure Session Initiation Protocol (SIPS) gateway and Intercluster Trunk (ICT)
CUCM Gateway
Gateway CUCM
16384 - 32767/udp
Real-Time Protocol (RTP), Secure Real-Time Protocol (SRTP) (Note: CUCM only uses 24576-32767
although other devices use the full range.) CUCM Gateway
Signaling, Media, and Other Communication Between Phones and CUCM
From (Sender) To (Listener) Des Port Purpouse
CTL Client CUCM CTL Provider 2444/tcp Certificate Trust List (CTL) provider listening service in CUCM
Unified Comm. App CUCM 2748/tcp CTI application server
Unified Comm. App CUCM 2749/tcp TLS connection between CTI applications (JTAPI/TSP) and CTIManager
Unified Comm. App CUCM 2789/tcp JTAPI application server
CUCM Assistant
Console
CUCM 2912/tcp CUCM Assistant server (formerly IPMA)
CUCM Attendant
Console
CUCM 1103 -1129/tcp CUCM Attendant Console (AC) JAVA RMI Registry server
CUCM Attendant
Console
CUCM 1101/tcp RMI server sends RMI callback messages to clients on these ports.
CUCM Attendant
Console
CUCM 1102/tcp Attendant Console (AC) RMI server bind port -- RMI server sends RMI messages on these ports.
CUCM Attendant
Console
CUCM 3223/udp CUCM Attendant Console (AC) server line state port receives ping and registration message from,
and sends line states to, the attendant console server.
CUCM Attendant
Console
CUCM 3224/udp CUCM Attendant Console (AC) clients register with the AC server for line and device state
information.
CUCM Attendant
Console
CUCM 4321/udp CUCM Attendant Console (AC) clients register to the AC server for call control.
Port Usage Marcelo Zanata

Cisco Unified
Communications
App
CUCM 8443/tcp AXL / SOAP API for programmatic reads from or writes to the CUCM database that third parties
such as billing or telephony management applications use.




Communication Between CTL Client and Firewalls
Sender Listener Dest Port Purpouse
CTL Client TLS Proxy Server 2444/tcp Certificate Trust List (CTL) provider listening service in an ASA firewall
Special Ports on HP Servers
Sender Listener Dest Port Purpouse
Endpoint HP SIM 280/tcp HTTP port to HP SIM
Endpoint HP SIM 2301/tcp HTTP port to HP agent
Endpoint HP SIM 2381/tcp HTTPS port to HP agent
Endpoint
Compaq Mgmt
Agent
25375, 25376,
25393/udp
COMPAQ Management Agent extension (cmaX)
Endpoint HP SIM 50000 - 50004/tcp HTTPS port to HP SIM
Communication Between IP Phone and Cisco VT Advantage
Sender Listener Dest Port Purpouse
CUVA Endpoint
4224/tcp Tunnel (CAST) traffic between Video Advantage and IP Phone
Endpoint CUVA

Ephemeral = port range from 32768 to 61000