Why does endpoint "register" to VCS-E with port 33060 and not 1719?
We have a remote codec (C60) that is registered to our VCS-E via H460 and oddly enough the registration address is A.B.C.D:33060 and not A.B.C.D:1719. Port 33060 is not even open on our firewall, thus clearly the codec is registering via RAS (UDP-1719) but is showing as 33060 in the endpoint list of the VCS-E
There is a second C60 in the same location with exactly the same configuration that registered as expected A.B.C.C:1719.
Any ideas why or how to correct this issue? This problem is purely cosmetic, since the codec functions as desired, however support teams will be confused when they see this.
Why does endpoint "register" to VCS-E with port 33060 and not 17
Thanks for your answer.
I didn't mention NAT in my initial post, however I can confirm that we are using static NAT on the remote Firewall where the codecs are for one-for-one mappings (i.e. an RFC1918 address is statically natted to 1 unique public IP address). The VCS-E address is not natted, but is sitting on a DMZ that has public IP addressing.
Dynamic NAT is not supported by H460.18/19, ASSENT or SIP/ICE, meaning that an UDP-1719 RAS request will arrive on the frontal Firewall (i.e. the firewall protecting the VCS-E) with the same port number that it left with, i.e. 1719. It better, since if it didn't it wouldn't be allowed through the Firewall. A request to port 33060 would be dropped on the frontal l since it's not authorised/necessary for H460.
On the frontal firewall where the VCS-E is connected neither NAT nor PAT are used, meaning that a request from A.B.C.D:1719 and A.B.C.C:1719 are not altered in any way and it's not the VCS-E that's altering anything either, or perhaps it is?
Finally, since the frontal firewall has other working codecs coming into it on their way to the VCS-E, clearly all SIP/H323 INSPECTion /ALG has already been disabled. The same is true on the remote sites Firewall.
Thus my question still strand, where does the 33060 come from? H460 registration is done via RAS (1719) and not port 33060. But the 2nd codec is registed with it's IP address followed by :33060 and it functions perfect. Crazy!
By the way, the software version of our VCS-E is 7.2.
The short answer is that you don't.... That isn't entirely true while at
the same time it kind of is, but for the most part you don't configure
the softkeys. You enable or disable them via TCL. Here is the long
answer. Be sure to read the whole thing or e...
Topology: IP Phone > Switches > Microsoft NPS setup to forward 802.1x
proxy to > ISE 2.1 patch 3 Authentication: EAP-TLS using Cisco MIC SANs
Phone Models 802.1X support? 802.1x flavor Addtl Comment EAP-MD5 EAP-TLS
Cisco 3905 Y Y N Cisco 6911 Y Y N Cisco ...
This document describe how DST changes and how time changes are
implemented in DST. Daylight Saving Time (DST) is the practice of
setting the clocks forward 1 hour from standard time during the summer
months, and back again in the fall, in order to make b...