VT between firewalls

paal.fondevik · ‎09-27-2006

Hi, which protocols and ports must be open in an firewall for using Cisco VT? We are using Cisco 7940 phones and Cisco VT version 2.0.2.0

mmelbourne · ‎09-28-2006

Cisco VT Advantage communicates with the IP Phone using the CAST protocol (4224/tcp), so this needs to be opened between the Voice VLAN and the Data VLAN (The IP Phone effectively acts as a Skinny proxy to CTVA, in order to establish the video RTP streams). The video streams themselves use 5445/udp, so this port must be opened between CVTA video endpoints on the Data VLAN.

By default, when a video call is negotiated, both audio and video packets are marked with DSCP AF41 (not EF in the case of an audio-only call). This should be reflected in your QoS policies.

Please rate useful posts!

paal.fondevik · ‎09-29-2006

Hi, I have attached a gif file. We have an headquarter and several departments. Between these we have firewalls. The CCM is placed at the headquarter. An employee at the headquarter and an employee at the department are using Cisco VT. Is it enough to open for 5445/udp in the firewalls?

Best regards paal

mmelbourne · ‎09-29-2006

If there are no ACLs between Voice and Data VLANs at each site, then opening 5445/udp (inbound and outbound) on the firewalls should suffice. Presumably, you have entries to permit voice RTP streams and Skinny control traffic between remote sites and headquarters? Opening 5445/udp should allow the video RTP streams to be established.