- Silver, 250 points or more
I know there are several threads regarding this upgrade, yet I don't think there is anything specifically relating to this question.
I see that the port ranges on several connections have changed, but if an upgrade from x.7.2.2 has been applied, then certain port ranges remain the same.
i.e. the traversal media ports for NEW installation are now 36000 – 59999, with the first two ports in this range being use for the media demultiplexing ports (36000 and 36001). However, if a VCS has been upgraded from x7.x than the port range could be 50000 - 54999 (with 50000 and 50001 being the media demultiplexing ports).
So, is the advice that we should update the port ranges on the VCS upgrade to marry with that of a new installation, especially considering that in some instance, firewall rule will need to be amended in any case? The port ranges are wider to account for future improvement and traffic flows and I suspect that they will be at these levels for some time.
Btw, the multiplex range can even be 36.000-36.011 in large VM deployments)
I would say practice is to update the ports using the default values for X8.1:
If you want to be future proof you might also want to see what going on on the "Cisco Expressway"
It might also depend on the security rules for you company/customer.
Some might ask you to limit the ports even more down, some will not care and have at least internally >1024UDP/TCP open
or even no firewall at all (not recommended, especially external!)
After the upgrade its always handy to double check the listening and outbound ports on the VCS
under "Maintenance > Tools > Port usage" and sure do a functionality test as well.