Router Ports With SCN

[EpoUser08]

Does Avaya IPO V5 need any ports opening up on the router when implementing SCN between sites?

 

[hairlessupportmonkey]

erm. how are you implementing your SCN?

 

[EpoUser08]

Star, not mesh.

Does that effect which ports if any need to be open?

Thanks

 

[hairlessupportmonkey]

Erm, no, but is there a VPN involved here?

 

[EpoUser08]

erm yes.

VPN connecting IPOs in a mesh....

Its just a general question....

Should their be any ports open?

 

[hairlessupportmonkey]

my question, without trying to complicate your question, is, why would you need to open ports across a VPN?

the best method is simply to have unimpeded traffic across your VPN tunnel for the SCN / Speech to work properly.

 

[SCNIPOffice]

To answer your question, harlesssupportmonkey, the principle of least privilege.

Why let ports/traffic through unless you know they're expected and necessary?

Then again, just a speculative answer to why all traffic may not be allowed through. Avaya should publish a list of ports and data types used, no?

 

[tlpeter]

There is a list on the knowledgebase, the ipo matrix and ther is also a FAQ overhere with those ports.

Homo sapiens non urinat in ventum

honey, i fried the IP Office !!!

Sarcasm, it's only one of the services I offer.

 

[amriddle01]

Why let ports/traffic through unless you know they're expected and necessary?"

You know the reason why now, the only people who can access the VPN are people with the credentials to do so, people who you have allowed. Why restrict what you send down the link when it can only cause issues and gains no security above the VPN anyway, you are just introducing problems. A bit like padlocking a box inside the bank vault

ACSS (SME)
APSS (SME)

http://www.ipoffice.tel

"I'm just off to Hartlepool to buy some exploding trousers

 

[hairlessupportmonkey]

Dear SCNIPOffice,

Trawl through these forums and find someone who has had success running an SCN across a VPN with inspected traffic, then I will withdraw my question.

 

[montyzummer]

HSM , Is dead on, the whole point of a VPN is a secure connection that is only available to the people who have the details to connect to it , there truly is no need to open ports in a VPN enviroment , well certainly not for what you are trying to achive across SCN , the example of the bank vault is a good one , but also as stated for future use a full list of ports is on the knowledge base .