Can someone please verify what ports CallManager 4.1 uses for H.323 call control? I've found repeated documents that seem to contradict each other and packet captures I have performed. This link appears to be the most accurate:
The only issue I have with the above 4.1 document is that it mentions TCP 1718 for Gatekeeper Discovery. According to my packet captures and every ITU document I can find, this should really be UDP 1718 (More precisely a multicast to UDP 18.104.22.168:1718, but apparently some legacy H.323 devices could use unicast on UDP 1718).
I have also found several documents that list the dynamic ports used for H.245 call control as either TCP 1024-4999 or TCP 11000 11999. If you turn on AutoQoS on the router, it creates an ACL with TCP 11000 11999. Where did these ranges come from? If you do a packet capture, the ports used for H.245 vary widely, but have never been in the 11000 11999 range. Most of the time the port falls above TCP 50000. The above document states all Ephemeral TCP ports as the port range, which is validated again by packet traces.
Is there a way to specify the H.245 port range in CallManager? It seems fairly inconvenient to open all ephemeral ports on an ACL or firewall if the router or firewall is not capable of 'fixup' or 'inspect'.