Configuring The Ip Phone For Use With A Firewall Or Nat - Yealink CP969 Administrator's Manual

Administrator's Guide for SIP-T5 Series Smart Media Phones

Configuring the IP Phone for Use with a Firewall or NAT

A firewall protects an organization's IP network by controlling data traffic from outside the
network. If your IP phone communicates with other devices through a firewall, you must
configure your firewall to allow incoming and outgoing traffic to the IP phone through the
reserved ports and the required ports.
You must configure your firewall to allow incoming and outgoing traffic through the following
ports:
Port
5060
5060
5061
50000-50249
(default range)
Reserved Ports
By default, the IP phone communicates through UDP ports in the 50000 - 50249 range for video
and voice control. The phone uses only a small number of these ports during a call. The exact
number depends on the number of participants in the call, the protocol used, and the number
of ports required for the type of call: video or voice. It is not applicable to CP960 IP phones.
To minimize the number of UDP and TCP ports that are available for communication, you can
restrict the ports range.
The following tables identify the number of ports required per connection by protocol and the
type of call.
80
Port Type
UDP SIP (default transport protocol)
SIP (when selecting the TCP transport
TCP
protocol)
SIP (when selecting the TLS transport
TCP
protocol)
Reserved ports on the IP phone.
TCP/UDP
For more information, refer to
Ports
Description
on page 80.
Reserved