Block VOIP Traffic

[mtnuga]

Hi

I would like to Block VOIP traffic on my Upstream Routers, Anyone with any readings on this effect will be very helpful

thanks

KM

[thisisshanky]

Voip uses random UDP ports ranging from 16384 through 32767. If this is H323 signalling, then also block 1720 TCP port.

[kyaw_thu]

H323

tcp - 1719/1720

SIP

tcp - 5060/5061

[hattingh]

I don't have any particular reading references, but you can use normal ACLs for this purpose.

Thx,

CH

[geoff.belknap]

Just to add to what has already been suggested here...

You'll definately want to block RTP / RTCP (UDP 16384 - 32767) as Shanky suggests. But, here are some additional ports used by various VoIP protocols you can block as well.

H.323/H.245 = TCP 11xxx (Standard Connect)

H.323/H.245 = TCP 1720 (Fast Connect)

H.323/H.225 RAS = TCP 1719

Skinny = TCP 2000-2002 (CM Encore)

ICCP = TCP 8001-8002 (CM Encore)

MGCP = UDP 2427, TCP 2428 (CM Encore)

SIP = UDP 5060, TCP 5060 (configurable)

Hope this helps,

-Geoff