IP Office Release 11.1 Ports

SystemDirectionPortRangeProtocolProtocolSwitch On/OffDefault StateExternal DeviceDescriptionAuthenticated
IP OfficeIngress22-TCPSSHNoOpenAdmin terminal or SAL GatewayRemote maintenance connectionUsername+password
IP OfficeIngress53-DNS-NoOpenDNS clientIP Office acts as a DNS relay 
IP OfficeIngress67-UDPDHCPYesOpenDHCP clients such as IP PhonesIP Office DHCP service-
IP OfficeIngress67-UDPBOOTP ServerYesOpenManagerManager BOOTP server for IP address and firmware for IP Office-
IP OfficeIngress69-UDPTFTPNoOpenLegacy Manager, Voicemail Pro, Upgrade Wizard, SoftConsole.IP Office status, configuration data, program data, Whois #1. The information that is obtained can be controlled with security settingsObfuscated password
IP OfficeIngress801-100TCPHTTPYesOpenFile transfer Manager and phones, Web client, DECT R4 Provisioning, SoftConsole, WebSocket SCN, Voicemail Pro. General purpose HTTP file and WebSocket server. Phone settings files, firmware download, backup/restore. IX Workplace.Some URIs RFC2617 Authenticated
IP OfficeIngress123-NTPNoOpenDECT R4, IP OfficeNTP (RFC4330) Service - SNTP-
IP OfficeIngress161161,1024-65535UDPSNMPYesOpenSNMP AgentRead-only access to MIB entriesCommunity string
IP OfficeIngress411-TCPTCP/HTTPSYesOpenH.323 phonePhone settings, backup/restore-
IP OfficeIngress443-TCPHTTPSYesOpenSoftphone, Manager and phones, Web client, DECT R4 Provisioning, SoftConsole, WebSocket SCN, Voicemail Pro. General purpose HTTP file and WebSocket server. Phone settings files, firmware download, backup/restore. IX Workplace.Shared secret (Softphone)
X.509 certificate (IP Office)
IP OfficeIngress520-UDPRIPYesOpenRouterExchange routing information with adjacent IP routers or receive information-
IP OfficeIngress1300-TLSH323 SigYesClosedH323 PhoneSecure H323 signalling from IP phones-
IP OfficeIngress1701-UDPL2TPYesClosedRemote Network devicesFrom layer 2 tunnels to remote network devicesCHAP
IP OfficeIngress1718-UDPH.323 discoveryYesFilteredH.323 phoneH.323 service to IP PhonesShared secret (password)
HMAC-SHA1-96
IP OfficeIngress1719-UDPH.323 statusYesFilteredH.323 phoneH.323 service to IP PhonesShared secret (password)
HMAC-SHA1-96
IP OfficeIngress1720-TCPH.323 signallingYesFilteredH.323 phoneH.323 service to IP PhonesShared secret (password)
HMAC-SHA1-96
IP OfficeIngress4097-TCP-NoFilteredN/ADebug (disabled)-
IP OfficeIngress50561024-64510UDPSIPYesClosedSIP endpoint, trunk or proxyIP Office Cloud (Powered By, On Avaya) unsecured SIP port: SIP extensions, Avaya Communicator, one-X Mobile Preferred, IP Office Softphone, ASBCE, IX Workplace.MD5 CHAP
IP OfficeIngress50561024-64510TCPSIPYesClosedSIP endpoint, trunk or proxyIP Office Cloud (Powered By, On Avaya) unsecured SIP port: SIP extensions, Avaya Communicator, one-X Mobile Preferred, IP Office Softphone, ASBCE, IX Workplace.MD5 CHAP
IP OfficeIngress50601024-64510UDPSIPYesOpenSIP endpoint, trunk or proxySIP extensions, Avaya Communicator, one-X Mobile Preferred, IP Office Softphone, ASBCE, IX Workplace.MD5 CHAP
IP OfficeIngress50601024-64510TCPSIPYesOpenSIP endpoint, trunk or proxySIP extensions, Avaya Communicator, one-X Mobile Preferred, IP Office Softphone, ASBCE, IX Workplace.MD5 CHAP
IP OfficeIngress50611024-64510TLSSIPYesOpenSIP endpoint, trunk or proxySIP extensions, Avaya Communicator, one-X Mobile Preferred, IP Office Softphone, ASBCE, IX Workplace.MD5 CHAP
IP OfficeIngress5443-TCPHTTPSYesOpenBackup/Restore client, UC client, UpgradeSecure server for solution backup/restore.
Secure URI for VM listen for UC client.
Upgrade for Hosted deployment
Applies only to IP Office Linux and Application Server
-
IP OfficeIngress5480-TCPHTTPSYesOpenWeb interface for Virtual Appliance Management Infrastructure (VAMI)Applies only to IP Office Linux and Application Server
No firewall configuration needed
Authenticated
IP OfficeIngress5488-TCP-YesOpenCIM client for VAMIApplies only to IP Office Linux and Application Server
No firewall configuration needed
Authenticated
IP OfficeIngress5489-TCP-YesOpenCIM client for VAMIApplies only to IP Office Linux and Application Server
No firewall configuration needed
Authenticated
IP OfficeIngress7070-TCPHTTPSYesOpenWeb Management clientApplies only to IP Office Linux and Application Server/UCMUsername+password
IP OfficeEgress7070-TCPHTTPSNoOpenWeb Management clientApplies only to IP Office Linux and Application Server/UCMUsername+password
IP OfficeIngress7071-TCPHTTPSYesOpenIP Office Primary, IP Office SecondaryStatus and management traffic between COM and Server Edition.
IP OfficeIngress7080-TCPHTTPSNoOpenWeb Management clientHTTP listener for COM admin client.
IP OfficeIngress8000-TCPHTTPNoOpenWeb Management client. Upgrade.Upgrade web service
Log download
Username+password
IP OfficeIngress8411-TCPHTTPYesOpenH.323 phonePhone settings files, firmware download, backup/restore. IX Workplace.-
IP OfficeIngress84431-65535TCPTCP/HTTPSYesOpenWeb Management clientIX Workplace for Unified Portal. Web meet me (WebRTC) signaling and web collaboration server. -
IP OfficeIngress9080-TCPHTTPNoOpenWeb Management client-Username+password
IP OfficeIngress35000-40000-UDP-YesN/A-IX Workplace for SIP connectivity - media-
IP OfficeIngress347850000-55000UDP-YesN/A-IX Workplace for Web meet me connectivity - media-
IP OfficeIngress40750-50750Min start 1024. Min end 2048.UDPRTP-RTCPYesN/AMedia end pointsIP Office Linux uses the port range 32768-61000 for RTP connections.
Default IP500 V2 range 40750-50750. IX Workplace.
-
IP OfficeIngress40750-50750Min start 1024. Min end 2048.UDPSRTP-SRTCPYesN/AMedia end pointsIP Office Linux uses the port range 32768-61000 for RTP connections.
Default IP500 V2 range 40750-50750
-
IP OfficeIngress50780-UDPProprietaryYesOpenDongle applicationNot used-
IP OfficeIngress50792-UDPVoicemailYesOpenVoicemail serverVoicemail Pro media-
IP OfficeIngress50793-TCPProprietaryYesOpenSolo ServerTAPI Wave Driver - audio stream interface for TAPI based applications-
IP OfficeIngress50794-UDPSysMonitorYesOpenSystem MonitorEvent, trace and diagnostics outputsPassword
IP OfficeIngress50794-TCPSysMonitorYesOpenSystem MonitorEvent, trace and diagnostics outputsPassword
IP OfficeIngress50795-UDPVoicenetYesOpenSCN TrunksSmall Community Networks peer to peer trunk signaling-
IP OfficeIngress50796-TCPTLSYesOpenIPOCC/ACCSCTI link for Contact Center applicationAuthenticated Password
IP OfficeIngress50797-TCPTAPIYesOpenTAPI clients
CPA, PC Dialer, Web Agent
Control of telephones for TAPI or Outbound contact express-
IP OfficeIngress50801-TCPProprietaryYesOpenVoice Conferencing application--
IP OfficeIngress50802-TCPProprietaryYesOpenIP Office Manager, Web ManagementWhois #2 and Whois #3, TCP discovery-
IP OfficeIngress50804 49152-65280TCPProprietaryYesOpenIP Office ManagerIP Office configuration interfaceHMAC SHA-1 challenge sequence
IP OfficeIngress50805 49152-65280TCPTLSYesOpenIP Office ManagerIP Office configuration interface secure (encrypted)HMAC SHA-1 challenge sequence
X.509 Certificate
IP OfficeIngress5080849152-65280TCPProprietaryYesOpenSystem Status ApplicationIP Office status informationHMAC SHA-1 challenge sequence
IP OfficeIngress50809 49152-65280TCPTLSYesOpenSystem Status ApplicationIP Office status information secure (encrypted)HMAC SHA-1 challenge sequence
IP OfficeIngress5081249152-65280TCPProprietaryYesOpenIP Office ManagerIP Office security settingsHMAC SHA-1 challenge sequence
IP OfficeIngress5081349152-65280TCPTLSYesOpenIP Office ManagerIP Office security settings secure (encrypted)HMAC SHA-1 challenge sequence
X.509 Certificate
IP OfficeIngress5081449152-65280TCPProprietaryYesOpenOne-X serverIP Office CTI control for One-XHMAC SHA-1 challenge sequence
IP OfficeIngress50823-TCP-NoClosedN/ADebug IP Office Linux (disabled)-
IP OfficeIngress52233-TCPHTTPSYesClosedWebLM clientWebLM server for licensingX.509 certificate
IP OfficeIngress56000-58000-UDPSTRPNoOpenWebRTC Media gatewayMedia endpoints-
IP OfficeEgress25-TCPSMTPYesN/ASMTP email serverEmail transmission from IP Office-
IP OfficeEgress37-UDPTIMEYesN/AManager and VMProTIME (RFC868) Service-
IP OfficeEgress53-UDPDNSYesN/ADNS serverName Service-
IP OfficeEgress68-UDPDHCPYesN/ADHCP serverIP Office obtaining DHCP address from a server-
IP OfficeEgress68-UDPBOOTPYesN/AManagerIP Office obtaining IP address and firmware-
IP OfficeEgress69-UDPFTPYesN/AManagerIP Office obtaining firmware on behalf of phones-
IP OfficeEgress123-UDPNTPYesN/ANTP serverNTP (RFC 4330) Service - SNTP-
IP OfficeEgress162ConfigurableUDPSNMPYesN/ASNMP ReceiverTrap generation from IP OfficeCommunity string
IP OfficeEgress389-TCPLDAPYesN/ALDAP serviceImport of directory information from LDAP databaseKerberos 4 or simple password
IP OfficeEgress443-TCPHTTPSYesN/ASCEP serverSCEP to System ManagerPassword
IP OfficeEgress443-TCPHTTPSYes-Google Cloud StorageAccess for subscription backup, restore, upgrade.Authentication OAuth 2.0
IP OfficeEgress500-UDPIKEYesN/ARemote deviceForm IPSec association with remote security devicesShared secret MD5 or SHA
IP OfficeEgress514ConfigurableUDPSyslogYesN/ASyslog server--
IP OfficeEgress514ConfigurableTCPSyslogYesN/ASyslog server--
IP OfficeEgress520---YesOpenRouterExchange routing information with adjacent IP routers or receive information-
IP OfficeEgress5060-UDPSIPYesN/ASIP trunk-MD5 CHAP
IP OfficeEgress5060-TCPSIPYesN/ASIP trunk-MD5 CHAP
IP OfficeEgress5061-TLSSIPYesN/ASIP trunk-MD5 CHAP
IP OfficeEgress5443-TCPHTTPSYesN/AHTPS serverSolution backup/restore using HTTPSUsername+password
IP OfficeEgress6514-TLSSyslogYesN/ASyslog server--
IP OfficeEgress10162-UDPSNMPYesN/ASNMP trapSNMP trap to System Manager-
IP OfficeEgress40750-50750 Min start 1024. Min end 2048.UDPRTPYesN/AMedia end pointsIP Office Linux uses the port range of 32768-61000 for RTP connections with the media server
Default IP500 V2 range 46750-50750
-
IP OfficeEgress40750-50750 Min start 1024. Min end 2048.UDPRTCPYesN/AMedia end pointsIP Office Linux uses the port range of 32768-61000 for RTP connections with the media server
Default IP500 V2 range 46750-50750
-
IP OfficeEgress40750-50750 Min start 1024. Min end 2048.UDPSRTPYesN/AMedia end pointsIP Office Linux uses the port range of 32768-61000 for RTP connections with the media server
Default IP500 V2 range 46750-50750
-
IP OfficeEgress40750-50750 Min start 1024. Min end 2048.UDPSRTCPYesN/AMedia end pointsIP Office Linux uses the port range of 32768-61000 for RTP connections with the media server
Default IP500 V2 range 46750-50750
-
IP OfficeEgress50791-UDPVoicemailYesN/AVoicemail serverVoicemail Pro signaling/media-
IP OfficeEgress50795-UDPVoicenetYesN/ASCN trunksSCN peer to peer trunk signalling
Legacy trunks only, WebSocket SCN uses 80/443
-
IP OfficeEgress50815-TCPTLSNoOpenone-X PortalIP Office CTI control for one-XHMAC SHA-1 challenge sequence
IP OfficeEgress52233-TCPHTTPSYesN/AWebLM serverUsed for WebLM licensingX.509 certificate
IP OfficeIntra-Device4096-TCP-YesOpenIP Office SNMP Agent-Internal
IP OfficeIntra-Device4444-TCPJMXYesOpenWebRTC signalling gatewayManagement port used by WebRTC signal gateway to communicate with media gatewayInternal
IP OfficeIntra-Device4445-TCPJMXYesOpenWebRTC signalling gatewayMessaging port used by WebRTC signal gateway to communicate with media gatewayInternal
IP OfficeIntra-Device5005ConfigurableTCP-YesOpenRCTP monitoring-Internal
IP OfficeIntra-Device5555-TCPJMXYesOpenMessaging port used by WebRTC signal gateway to communicate with media gatewayInternal
IP OfficeIntra-Device5556-TCPJMXYesOpenMessaging port used by WebRTC signal gateway to communicate with media gatewayInternal
IP OfficeIntra-Device6006-TCP-YesOpenQoS-Internal
IP OfficeIntra-Device17777-TCP-YesOpenIP Office and JadeCommunication between IP Office and JADEInternal
IP OfficeIntra-Device42004ConfigurableTCPSIPYesOpenWebRTC signalling gatewaySIP client connections from IP OfficeInternal
IP OfficeIntra-Device42008ConfigurableTCPSIPYesOpenWebRTC signalling gatewaySIP trunk connections from IP OfficeInternal
Voicemail ProIngress25-TCP/SMTP/TLS-YesOpenSMTPVoicemail Pro client for SMTP operations - TLS enforced-
Voicemail ProIngress37-UDPTIMEYesOpenIP OfficeTIME (RFC868) Service for IP Office-
Voicemail ProIngress80-TCPHTTPYesOpenBrowser, UC client, one-X Portal serverShare access to Voicemail Pro media files with one-X Portal server
Web voicemail support
Windows server only
Authenticated
Voicemail ProIngress143-TCPIMAP4YesOpenIMAP4 clientAccess to voicemails using IMAP4 over non-secure connection-
Voicemail ProIngress993--IMAP4 - SSLYesOpen IMAP4 client - SSLAccess to voicemails using IMAP4 over SSL connection-
Voicemail ProIngress5443-TCPHTTPSNoOpenUC client, one-X Portal serverSecured share access to Voicemail Pro media files with one-X Portal server and UC clients
Linux server only
 
Voicemail ProIngress50791-UDPVoicemailYesOpenVoicemail Pro clientVoicemail Pro communication with IP Office. This is also used for one-X Portal communication-
Voicemail ProIngress50791-TCPVoicemailYesOpenVoicemail Pro clientVoicemail Pro communication with IP Office. This is also used for one-X Portal communication-
Voicemail ProIngress50792-TCPVoicemailYesOpenVoicemail Pro MAPI proxy serviceThese ports are required on the Windows server machine which runs the Voicemail Pro MAPI service-
Voicemail ProIngress50793-TCPVoicemailYesOpenVoicemail Pro MAPI proxy serviceThese ports are required on the Windows server machine which runs the Voicemail Pro MAPI service-
Voicemail ProEgress22-TCPFTPYesN/AContact Recorder, Media Manager
Backup file server
FTP or SFTP-
Voicemail ProEgress25-TCP/SMTP/TLS-YesN/ASMTPVoicemail email integration - TLS enforced-
Voicemail ProEgress443-TCPHTTPSYesN/AExchange serverWeb service API client for Exchange integration-
Voicemail ProEgress50792-UDPVoicemailYesN/AIP OfficeVoicemail Pro media-
Voicemail ProEgress50792-SSLVoicemailYesN/AExchange MAPI proxyExchange MAPI proxy connector-
Voicemail ProEgress50793-SSLVoicemailYesN/AExchange MAPI proxyExchange MAPI proxy connector-
Voicemail ProEgress50802-TCPProprietaryNoN/AIP OfficeWhois-
Voicemail ProIntra-Device25-TCP/SMTP/TLS-YesOpenSMTPMessaging and configuration updates between Voicemail Pro servers - TLS enforced-
one-XIngress1300-TCPTLSYesClosedH.323 phoneSecure H.323 signalling to IP phones.-
one-XIngress3478-UDP-YesN/ASTUN Server-STUN client in previous IP Office releases.-
one-XIngress4560-TCPLog4jNoOpenLog4j appender--
one-XIngress5222-TCPXMPPYesOpenXMPP clientInstant message clientsUsername+password
one-XIngress5269-TCPXMPPYesOpenXMPP federationInstant message federationUsername+password
one-XIngress7171-TCPBOSHYesOpenOpenFire for BOSH-Username+password
one-XIngress7443-TCPBOSHYesOpenOpenFire for BOSH-Username+password
one-XIngress8005-TCPTomcat shutdownNoFilteredTomcat shutdown listener--
one-XIngress8080-TCPHTTPYesOpenWeb Clientone-X Portal Username+password
one-XIngress8443-TCPHTTPSYesOpenWeb ClientSecure user access to Windows one-X Portal server. Username+password
one-XIngress8666-TCPJMXYesOpenJava extension-Username+password
one-XIngress9092-TCPJDBCNoOpenDatabase client listener-Username+password
one-XIngress9443-TCPHTTPSYesOpenWeb Client one-X Mobile Web Collaboration client, Media Manager client, WebRTC clientone-X Portal Linux secure/Web Collaboration/Media Manager/WebRTC Gateway Username+password
X.509 Certificate
one-XIngress50815-TCPTLSNoOpenIP OfficeIP Office CTI control for one-XHMAC SHA-1 challenge sequence
one-XEgress80-TCPHTTPYesN/AVoicemail ProVoicemail Pro communication with one-X Portal-
one-XEgress8000-TCPHTTPYesN/AVoicemail ProVoicemail Pro communication with one-X Portal-
one-XEgress9843-TCPTLSNoOpenWeb CollaborationPolicy file check-
one-XEgress5433-TCPJDBCNoOpenone-X PortalGeo-redundant one-X Portal server database syncUsername and Password
one-XEgress61615-TCPProprietaryNoOpenone-X PortalGeo-redundant one-X Portal server database syncUsername and Password
one-XEgress50791-TCPVoicemailYesN/AVoicemail ProVoicemail Pro communication with one-X Portal-
one-XEgress5081449152-65280TCPProprietaryYesOpenIP OfficeIP Office CTI control for one-X PortalHMAC SHA-1 challenge sequence
one-XEgress5433-TCPJDBCNoOpenone-X Portal serverGeo-redundant portal database sync.-
one-XEgress61615-TCPProprietaryNoOpenone-X Portal serverGeo-redundant portal status sync.-
one-XIntra-Device8086-TCPHTTPNoOpenXMPPInternal REST interface-
one-XIntra-Device61616-TCPProprietaryNoOpenInternal one-X serverActive MQ JMS Broker-
Media ManagerIngress9444-TCPHTTPSNoOpenWeb clientHTTP listener port.-
Media ManagerrIngress9888-TCPHTTPNoOpenWeb clientHTTP listener port.-
Media ManagerEgress21-TCPFTPYesOpenFTP FTP server for transferring Voicemail Pro recordings to Media Manager.-
Contact RecorderEgress22-TCPSFTPYesOpenSFTPSFTP server for transferring Voicemail Pro recordings to Contact Recorder.-
Media ManagerEgress22-TCPSFTPYesOpenSFTPSFTP server for transferring Voicemail Pro recordings to Media Manager.-