Which actions required for a firewall configuration on a Mobile and Remote Access
through Cisco Expressway deployment?
A.
The traversal zone on Expressway-c points to Expressway-e through the peer address field on the traversal zone, which specifies the Expressway-e server address. For dual NIC deployments, set the Expressway-e address using an FQDN that resolves the IP address of the internal interface
B.
The external firewall must allow these inbound connections to Expressway: SIP: TCP 5061; HTTPS: TCP 8443; XMPP TCP 5222; media: UDP 36002 to 59999
C.
Do not use a shared address for Expressway-e and Expressway-c, as the firewall
cannot distinguish between them. If static NAT for IP addressing on Expressway-e is used, ensure that any NAT operation on expressway-c does not resolve the same traffic IP address. Shared NAT IS not supported
D.
The internal firewall must allow these inbound and outbound connections between
expressway - c and Expressway-e :sip;HTTPS(tunneled over SSH between C and E.
TCP 2222: TCP 7001: Traversal Media: UDP 2776 to 2777(or 36000 to 36011 for large VM/appliance); XMPP:TCP 7400
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit