How does SCCS use TCP/IP? 1

[brownlg]

I'm having trouble accessing SCCS via our VPN. I used to be able to access it, but our Internet Engineering team recently locked down ports. They've offered to open up the ports over the VPN, but when running netstat, it appears that SCCS uses random high tcp/ip ports.

Does anyone know how SCCS uses TCP/IP between the client and the server. Is it indeed random port assignment? Is it random port assignment within a range? Is it documented somewhere?

Les Brown
Kelly Services, Inc.

 

[MrToad6378]

We've asked or vendor and never go a response. The only place I've found a list is on the server. You get by going
to
Start
Programs
Symposium Call Center Server
Configuration
Click on the Address Table Tab

 

[brownlg]

found that it goes through port 135 (we did a scan on the firewall while trying to access the server)

Les Brown
Kelly Services, Inc.

 

[fonchick]

brownlg,

We have experienced the same problem...in fact I have posted the same question on a different message board. Are you able to successfully get into Symposium yet from a VPN connection? I have asked my vendor what ports they talk on and this is the answer I received...

" Cannot answer that question. Do know that SCCS is dynamic
with regards to client functions. The port range it utilizes if extremely
large. Given this, Nortel cannot support filtering by ports. All of this
means that in order for clients on the other side of a firewall from the
SCCS, cannot filter by port.

If a client is on the opposite side of a firewall from the SCCS, and
the site is filtering by port, it is highly likely that the client will
have connectivity issues. Could work sometimes, could not work at all.
Port filtering is level 4 filtering. SCCS can only support level 3
filtering, which is IP filtering."

 

[brownlg]

i have not got it working yet because i am waiting on our network engineers to allow the traffic through the choke router.

we did our own investigating on this and determined it was port 135. our vendor called today and confirmed that is the port we need to allow traffic on.

i'll follow up here and tell if you if it works or not once we get the router issue squared away.

Les Brown
Kelly Services, Inc.

 

[brownlg]

there's another message board for symposium? where?

Les Brown
Kelly Services, Inc.

 

[fonchick]

http://www.pbxinfo.com...there

are message boards on there...for both symposium and the pbx...This looks like it is used more...

 

[m1tech]

The SCCS uses the following ports

0, 135, 161, 162, 530. These are the basic TCP/IP ports that are required. The application then uses ports 1024 - 65525 dynamically

 

[fonchick]

Hi All,

We just are now able to talk to Symposium via the VPN. The network guys had port 154 blocked and when they took that block off, I was able to get into Symposium...

Fonchik

 

[brownlg]

did you unblock all those other ports listed by m1tech as well? i don't see 154 in that list. i don't see a clear answer on this just yet. maybe i'll just login through the vpn and use remote desktop.

anyway, i haven't got an answer back on whether they'll allow my traffic through the choke router, so we'll see how this all pans out.

Les Brown
Kelly Services, Inc.

 

[fonchick]

Hi Les,

Port 154 was the only port that was being blocked. So once we opened that port up, then we were fine. It sounds like Symposium does not like to play nicely with any ports being blocked.

Fonchick

 

[brownlg]

oh! that's gonna be a problem for sure. i'm already having to jump through hoops just to get one unlocked. hmmm. good reason to move to webclient? (assume it works through port 80 which IS open).

Les Brown
Kelly Services, Inc.

 

[sandyml]

The traditional Symposium fat client uses dynamically allocated TCP ports to communicate with the server and cannot be separated from the server by a packet
filtering firewall.

The Web Client uses the following ports:

80
3389
25 (SMTP)
8200
UDP Ports 6020,6030, 6040, 6050, 6060, 6070, 6080, 6090, 6100, 6110, 6120, 6130
UDP Ports 7020, 7030, 7040, 7050, 7060, 7070, 7080, 7090, 7100, 7110, 7120, 7130

To minimize the potential points of failure (in a nodal call center setting), place the server in Symposium Call Center Server and the Symposium Web Client application server on the same subnet.

 

[JDup]

If you are using PCAnywhere for console level access to the server make sure to open these ports as well. It's a security risk though. Terminal services should provide decent access as well.

 

[RBeaudoin]

I convinced my Network guys to leave all ports on the SCCS open since the SCCS was not using DNS services and therefore fairly protected from outside attacks. I access all my SCCS servers using VPN when I am off site.