ACL in front of CM

[tjess]

I used to be able to allow host or networks, now I'm being tasked with only allowing the specific ports and protocols. I think this ACL allows everything Avaya uses.
Thoughts?

permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any eq 1039
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any eq 2945
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any eq 1956
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any range 5005 5220
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any eq 5424
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any range 5060 5080
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any range 7007 7011
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any eq 8765
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any eq 9000
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any eq 12080
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any range 20873 21874
permit tcp xxx.xxx.xxx.xxx.0.0.0.0 any range 59000 59200
permit tcp xxx.xxx.xxx.xxx 0.0.0.0 any range 1719 1720
permit udp xxx.xxx.xxx.xxx.0.0.0.0 any gt 2048

[srajasekharan]

Hello,

Hope you are doing well!!!

Yes, it pretty much cover everything.

Please check the below link which gives you the list of ports used by Avaya Applications, it has detailed port matrix for all Avaya applications :-

https://support.avaya.com/helpcenter/getGenericDetails?detailId=C201082074362003

Please get back to us in case you need additional details.

Regards,
Sree