Port Usage Information for the IM and Presence Service · IMand ProprietaryTCP 6605* Ephemeral Presence IMand Presence CiscoPresenceDatastore dualnodepresence redundancygroup replication

Port Usage Information for the IM and PresenceService

• IM and Presence Service Port Usage Overview, on page 1• Information Collated in Table, on page 1• IM and Presence Service Port List, on page 2

IM and Presence Service Port Usage OverviewThis document provides a list of the TCP and UDP ports that the IM and Presence Service uses for intraclusterconnections and for communications with external applications or devices. It provides important informationfor the configuration of firewalls, Access Control Lists (ACLs), and quality of service (QoS) on a networkwhen an IP Communications solution is implemented.

Cisco has not verified all possible configuration scenarios for these ports. If you are having configurationproblems using this list, contact Cisco technical support for assistance.

Note

While virtually all protocols are bidirectional, this document gives directionality from the session originatorperspective. In some cases, the administrator can manually change the default port numbers, though Ciscodoes not recommend this as a best practice. Be aware that the IM and Presence Service opens several portsstrictly for internal use.

Ports in this document apply specifically to the IM and Presence Service. Some ports change from one releaseto another, and future releases may introduce new ports. Therefore, make sure that you are using the correctversion of this document for the version of IM and Presence Service that is installed.

Configuration of firewalls, ACLs, or QoS will vary depending on topology, placement of devices and servicesrelative to the placement of network security devices, and which applications and telephony extensions arein use. Also, bear in mind that ACLs vary in format with different devices and versions.

Information Collated in TableThis table defines the information collated in each of the tables in this document.

Port Usage Information for the IM and Presence Service1

Table 1: Definition of Table Information

DescriptionTable Heading

The client sending requests to this portFrom

The client receiving requests on this portTo

A client or server application or processRole

Either a Session-layer protocol used for establishing and ending communications,or an Application-layer protocol used for request and response transactions

Protocol

A Transport-layer protocol that is connection-oriented (TCP) or connectionless(UDP)

Transport Protocol

The port used for receiving requestsDestination / Listener

The port used for sending requestsSource / Sender

IM and Presence Service Port ListThe following tables show the ports that the IM and Presence Service uses for intracluster and interclustertraffic.

Table 2: IM and Presence Service Ports - SIP Proxy Requests

RemarksSource /Sender

Destination/ Listener

TransportProtocol

ProtocolTo (Listener)From (Sender)

Default SIP Proxy UDPand TCP Listener

Ephemeral5060TCP/UDPSIPIM andPresence

--------------

SIP Gateway

SIP Gateway

--------------

IM andPresence

TLS ServerAuthentication listenerport

Ephemeral5061TLSSIPIM andPresence

SIP Gateway

TLS MutualAuthentication listenerport

Ephemeral5062TLSSIPIM andPresence

IM andPresence

Internal port. Localhosttraffic only.

Ephemeral5049UDP /TCP

SIPIM andPresence

IM andPresence

Used for HTTP requestsfrom the Config Agent toindicate a change inconfiguration.

Ephemeral8081TCPHTTPIM andPresence

IM andPresence


Port Usage Information for the IM and Presence ServiceIM and Presence Service Port List



TransportProtocol


Default IM and PresenceHTTP Listener. Used forThird-Party Clients toconnect

Ephemeral8082TCPHTTPIM andPresence

Third-partyClient

Default IM and PresenceHTTPS Listener. Usedfor Third-Party Clients toconnect

Ephemeral8083TLS / TCPHTTPSIM andPresence

Third-partyClient

Table 3: IM and Presence Service Ports - Presence Engine Requests



TransportProtocol


Default SIP UDP/TCPListener port

Ephemeral5080UDP /TCP

SIPIM andPresence(PresenceEngine)

IM andPresence

Internal port. Localhosttraffic only. LiveBusmessaging port. The IMand Presence Serviceuses this port for clustercommunication.

Ephemeral50000UDPLivebusIM andPresence(PresenceEngine)

IM andPresence(PresenceEngine)

Table 4: IM and Presence Service Ports - Cisco Tomcat WebRequests



TransportProtocol


Used for web accessEphemeral8080TCPHTTPSIM andPresence

Browser

Provides database andserviceability access viaSOAP

Ephemeral8443TLS / TCPAXL /HTTPS

IM andPresence

Browser

Provides access to Webadministration


Browser

Provides access to Useroption pages


Browser





TransportProtocol


Provides access to CiscoUnified PersonalCommunicator, CiscoUnified MobilityAdvantage, andthird-party API clientsvia SOAP

Ephemeral8443TLS / TCPSOAPIM andPresence

Browser

Table 5: IM and Presence Service Ports - External Corporate Directory Requests

RemarksSource /SenderDestination/ Listener

TransportProtocolProtocolTo (Listener)From (Sender)

Allows the Directoryprotocol to integrate withthe external CorporateDirectory. The LDAPport depends on the

Corporate Directory (389is the default). In case ofNetscape Directory,

customer can configuredifferent port to accept

LDAP traffic.

Allows LDAP tocommunicate betweenIM&P and the LDAP

server for authentication.

Ephemeral389

/ 3268

TCPLDAPExternalCorporateDirectory

--------------

IM andPresence

IM andPresence

--------------

ExternalCorporateDirectory

Allows the Directoryprotocol to integrate withthe external CorporateDirectory. LDAP port

depends on the CorporateDirectory (636 is the

default).

Ephemeral636TCPLDAPSExternalCorporateDirectory

IM andPresence

Table 6: IM and Presence Service Ports - Configuration Requests



TransportProtocol


Config Agent heartbeatport

Ephemeral8600TCPTCPIM andPresence(ConfigAgent)

IM andPresence(ConfigAgent)



Table 7: IM and Presence Service Ports - Certificate Manager Requests



TransportProtocol


Internal port - Localhosttraffic only

Ephemeral7070TCPTCPCertificateManager

IM andPresence

Table 8: IM and Presence Service Ports - IDS Database Requests



TransportProtocol


Internal IDS port forDatabase clients.Localhost traffic only.

Ephemeral1500TCPTCPIM andPresence(Database)

IM andPresence(Database)

Internal port - this is analternate port to bring upa second instance of IDSduring upgrade.Localhost traffic only.

Ephemeral1501TCPTCPIM andPresence(Database)


Internal port. Localhosttraffic only. DBreplication port

Ephemeral1515TCPXMLIM andPresence(Database)


Table 9: IM and Presence Service Ports - IPSec Manager Request



TransportProtocol

ProtocolTo(Listener)

FromSender

Internal port - cluster manager portused by the ipsec_mgr daemon forcluster replication of platform data(hosts) certs

85008500UDP/TCPProprietaryIM andPresence(IPSec)

IM andPresence(IPSec)

Table 10: IM and Presence Service Ports - DRF Master Agent Server Requests



TransportProtocol


DRFMaster Agent serverport, which acceptsconnections from LocalAgent, GUI, and CLI

Ephemeral4040TCPTCPIM andPresence(DRF)

IM andPresence(DRF)



Table 11: IM and Presence Service Ports - RISDC Requests



TransportProtocol


Real-time InformationServices (RIS) databaseserver. Connects to otherRISDC services in thecluster to provideclusterwide real-timeinformation

Ephemeral2555TCPTCPIM andPresence(RIS)

IM andPresence(RIS)

Real-time InformationServices (RIS) databaseclient for Cisco RIS.Allows RIS clientconnection to retrievereal-time information

Ephemeral2556TCPTCPIM andPresence(RIS)

IM andPresence(RTMT/AMC/

SOAP)

Internal port. Localhosttraffic only. Used byRISDC (System Access)to link to servM via TCPfor service status requestand reply

88888889TCPTCPIM andPresence(RIS)

IM andPresence(RIS)

Table 12: IM and Presence Service Ports - SNMP Requests



TransportProtocol


Provides services forSNMP-basedmanagement applications

Ephemeral161, 8161UDPSNMPIM andPresence

SNMPServer

Native SNMP agent thatlistens for requestsforwarded by SNMPmaster agents

Ephemeral6162UDPSNMPIM andPresence

IM andPresence

SNMP Master agent thatlistens for traps from thenative SNMP agent, andforwards to managementapplications

Ephemeral6161UDPSNMPIM andPresence

IM andPresence

Used as a socket for thecdp agent tocommunicate with thecdp binary

Ephemeral7999TCPTCPIM andPresence

SNMPServer





TransportProtocol


Used for communicationbetween the SNMPMaster agent andsubagents


IM andPresence

Sends SNMP traps tomanagement applications

Ephemeral162UDPSNMPSNMP TrapMonitor

IM andPresence

Internal SNMP trapreceiver

61441ConfigurableUDPSNMPIM andPresence

IM andPresence

Table 13: IM and Presence Service Ports - Racoon Server Requests



TransportProtocol


Enables Internet SecurityAssociation and theKeyManagementProtocol

Ephemeral500UDPIpsecIM andPresence

--------------

Gateway

Gateway

--------------

IM andPresence

Table 14: IM and Presence Service Ports - System Service Requests



TransportProtocol


Internal port. Localhosttraffic only. Used tolisten to clientscommunicating with theRIS Service Manager(servM).

Ephemeral8888 and8889

TCPXMLIM andPresence(RIS)

IM andPresence(RIS)

Table 15: IM and Presence Service Ports - DNS Requests



TransportProtocol


The port that DNS serverlisten on for IM andPresence DNS queries.

To: DNS Server | From:IM and Presence

Ephemeral53UDPDNSDNS ServerIM andPresence



Table 16: IM and Presence Service Ports - SSH/SFTP Requests



TransportProtocol


Used by manyapplications to getcommand line access tothe server. Also usedbetween nodes forcertificate and other fileexchanges (sftp)

Ephemeral22TCPSSH /SFTP

EndpointIM andPresence

Table 17: IM and Presence Service Ports - ICMP Requests



TransportProtocol


Internet ControlMessageProtocol (ICMP). Usedto communicate with theCisco UnifiedCommunicationsManager server

EphemeralNotApplicable

IPICMPCiscoUnifiedCommunicationsManager

--------------

IM andPresence

IM andPresence

--------------

CiscoUnifiedCommunicationsManager

Table 18: IM and Presence Service Ports - NTP Requests



TransportProtocol


Cisco UnifiedCommunicationsManager is the actingNTP server. Used bysubscriber nodes tosynchronize timewith thepublisher node.

Ephemeral123UDPNTPNTP ServerIM andPresence



Table 19: IM and Presence Service Ports - Microsoft Exchange Notify Requests



TransportProtocol


Microsoft Exchange usesthis port to sendnotifications (usingNOTIFY message) toindicate a change to aparticular subscriptionidentifier for calendarevents. Used to integratewith any Exchange serverin the networkconfiguration. Both portsare created. The kind ofmessages that are sentdepend on the type ofCalendar PresenceBackend gateway(s) thatare configured.

EphemeralIM andPresenceserver port(default50020)

)WebDAV- HTTP/UDP/IPnotifications

2) EWS -HTTP/TCP/IP SOAPnotifications

HTTP(HTTPu)

IM andPresence

MicrosoftExchange

Table 20: IM and Presence Service Ports - SOAP Services Requests



TransportProtocol


SOAP monitor portEphemeral5007TCPTCPIM andPresence(SOAP)

IM andPresence(Tomcat)

Table 21: IM and Presence Service Ports - AMC RMI Requests



TransportProtocol


AMC RMI Object port.Cisco AMC Service forRTMT performancemonitors, data collection,logging, and alerting.

Ephemeral1090TCPTCPRTMTIM andPresence

AMCRMIRegistry port.Cisco AMC Service forRTMT performancemonitors, data collection,logging, and alerting.

Ephemeral1099TCPTCPRTMTIM andPresence



Table 22: IM and Presence Service Ports - XCP Requests



TransportProtocol


Client access portEphemeral5222TCPTCPIM andPresence

XMPP Client

Server to Serverconnection (S2S) port


IM andPresence

HTTP listening port usedby the XCP WebConnection Manager forBOSH third-party APIconnections


Third-partyBOSH client

XCP Router MasterAccept Port. XCPservices that connect tothe router from an OpenPort Configuration (forexample XCPAuthenticationComponent Service)typically connect on thisport.

Ephemeral7400TCPTCPIM andPresence(XCP Router

IM andPresence(XCPServices)

MDNS port. XCP routersin a cluster use this portto discover each other.

Ephemeral5353UDPUDPIM andPresence(XCP Router

IM andPresence(XCP Router

MFT File transfer(On-Premises only).

HTTPS7336TCPTCPIM andPresence(XCP Router

IM andPresence(XCP Router

Table 23: IM and Presence Service Ports - External Database Requests



TransportProtocol


PostgreSQL databaselistening port

Ephemeral54321TCPTCPPostgreSQLdatabase

IM andPresence

Oracle database listeningport

Ephemeral1521TCPTCPOracledatabase

IM andPresence

MSSQL databaselistening port

Ephemeral1433TCPTCPMSSQLdatabase

IM andPresenc

1 This is the default port, however you can configure the PostgreSQL database to listen on any port.



Table 24: IM and Presence Service Ports - High Availability Requests



TransportProtocol


The port that CiscoServer RecoveryManager uses to provideadmin rpc requests.

Ephemeral20075TCPTCPIM andPresence(ServerRecoveryManager)

IM andPresence(ServerRecoveryManager)

The port that CiscoServer RecoveryManager uses tocommunicate with itspeer.

Ephemeral21999UDPUDPIM andPresence(ServerRecoveryManager)

IM andPresence(ServerRecoveryManager)

Table 25: IM and Presence Service Ports - In Memory Database Replication Messages



TransportProtocol


Cisco Presence DatastoreEphemeral6603*TCPProprietaryIM andPresence

IM andPresence

Cisco Login DatastoreEphemeral6604*TCPProprietaryIM andPresence

IM andPresence

Cisco SIP RegistrationDatastore

Ephemeral6605*TCPProprietaryIM andPresence

IM andPresence

Cisco Presence Datastoredual node presenceredundancy groupreplication.

Ephemeral9003TCPProprietaryIM andPresence

IM andPresence

Cisco Login Datastoredual node presenceredundancy groupreplication.


IM andPresence

Cisco SIP RegistrationDatastore dual nodepresence redundancygroup replication.


IM andPresence

* If you want to run the Administration CLI Diagnostic Utility, using the utils imdb_replication statuscommand, these ports must be open on all firewalls that are configured between IM and Presence Servicenodes in the cluster. This setup is not required for normal operation.



Table 26: IM and Presence Service Ports - In Memory Database SQL Messages



TransportProtocol


Cisco Presence DatastoreSQL Queries.


IM andPresence

Cisco Login DatastoreSQL Queries.


IM andPresence

Cisco SIP RegistrationDatastore SQL Queries.


IM andPresence

Cisco Route DatastoreSQL Queries.


IM andPresence

Table 27: IM and Presence Service Ports - In Memory Database Notification Messages



TransportProtocol


Cisco Presence DatastoreXML-based changenotification.


IM andPresence

Cisco Login DatastoreXML-based changenotification.


IM andPresence

Cisco SIP RegistrationDatastore XML-basedchange notification.


IM andPresence

Cisco Route DatastoreXML-based changenotification.


IM andPresence

Table 28: IM and Presence Service Ports - Force Manual Sync/X.509 Certificate Update Requests



TransportProtocol


Cisco Intercluster SyncAgent service uses thisport to establish a socketconnection for handlingcommands.

Ephemeral37239TCPTCPIM andPresence(InterclusterSync Agent)

IM andPresence(InterclusterSync Agent)



Table 29: IM and Presence Service Ports - ICMP Requests

PurposeDestination PortTo (Listener)From (Sender)

Internet Control MessageProtocol (ICMP) Thisprotocol number carriesecho-related traffic. Itdoes not constitute a portas indicated in the columnheading.

7IM and PresenceEndpoint/IM and Presence

Endpoint/IM and PresenceIM and Presence

Table 30: Ports used for IM and Presence - Cisco Unified CM communication and IM and Presence Publisher - Subscriber communication


Destination /Listener

TransportProtocol

To (Listener)From (Sender)

Internal ID port for Databaseclients. Localhost trafficonly.

Bi-directional1500TCPIM andPresencePublisher

Cisco UnifiedCommunicationsManager

Provides access to Webadministration.



AMC RMI Object port.Cisco AMC Service forRTMT performancemonitors, data collection,logging, and alerting.



Bi-directional Real-timeInformation Services (RIS)database server. Connects toother RISDC services in thecluster to provide clusterwidereal-time information.



Internal port - clustermanager port used by theipsec_mgr daemon forcluster replication ofplatform data (hosts)certificates.



Config Agent heartbeat portBi-directional8600TCPIM andPresencePublisher


Network TimeProtocol(NTP) used for timesynchronization.

Bi-directional123UDPIM andPresencePublisher






TransportProtocol


Internal port. Localhosttraffic only. LiveBusmessaging port. TheIM andPresenceService uses thisport for clustercommunication.

Bi-directional50000UDPIM andPresenceSubscriber

IM andPresencePublisher

The port that Cisco ServerRecovery Manager uses tocommunicate with its peer.

Bi-directional21999UDPIM andPresenceSubscriber


DRF Master Agent serverport that accepts connectionsfrom Local Agent, GUI, andCLI.

Bi-directional4040TCPCisco UnifiedCommunicationsManager


Used while configuringpersistent chat.



Used while configuringmanaged file transfer (MFT).



Used while configuringexternal database (MSSQL).

Bi-directional7TCPIM andPresenceSubscriber


The port that Cisco ServerRecovery Manager uses toprovide admin RPC requests.

Bi-directional20075TCPIM andPresenceSubscriber


Config Agent heartbeat portBi-directional8600TCPIM andPresenceSubscriber


Cisco SIP RegistrationDatastore dual node presenceredundancy groupreplication.


IM andPresenceSubscriber

Cisco Presence Datastoredual node presenceredundancy groupreplication.



The port that Cisco ServerRecovery Manager uses toprovide admin RPC requests.







TransportProtocol


Cisco Login Datastore dualnode presence redundancygroup replication.



Used on a call configurationBi-directional5070TCPIM andPresencePublisher


Used on a call configurationBi-directional44000TCPIM andPresenceSubscriber


Table 31: On-a-call_Presence

RemarksProtocolDestinationPort

Source PortTo (Listener)From (Sender)

TCP5070[37240 –61000]



Client Access PortTCP648465222XMPP client(Jabber)


Client Access PortTCP563615222XMPP client(Jabber)


Table 32: MS-SQL DB Configuration

ProtocolDestination PortSource PortTo (Listener)From (Sender)

TCP7[37240 – 61000]DatabaseIM and PresencePublisher

Table 33: MS-SQL Persistent Chat Configuration


TCP143337240 – 61000DatabaseIM and PresencePublisher

Table 34: Managed File Transfer (MFT) Configuration


TCP737240 – 61000External File ServerIM and PresencePublisher






TCP543254288 - 54292DatabaseIM and PresencePublisher

See the Cisco Unified Serviceability Administration Guide for information about SNMP.



Port Usage Information for the IM and Presence ServiceIM and Presence Service Port Usage OverviewInformation Collated in TableIM and Presence Service Port List

Documents

Port Usage Information for the IM and Presence Service · IMand ProprietaryTCP 6605* Ephemeral Presence IMand Presence CiscoPresenceDatastore dualnodepresence redundancygroup replication