*** Bitte beachten Sie auch die aktuell gültigen Sicherheitshinweise zur SwyWare-Konfiguration ***
Die zentralen Dienste einer SwyxWare im Netzwerk sind der SwyxServer und der ConfigDataStore. Der SwyxServer übernimmt in erster Linie Vermittlungsfunktion zum Gesprächsaufbau, aber auch viele Aufgaben darüber hinaus (Statussignalisierung, Scripting etc.).
Der ConfigDataStore stellt hauptsächlich die Konfiguration für alle SwyxWare-Komponenten zur Verfügung, aber auch Telefonbücher, Ruflisten etc..
Damit kann die Netzwerkkommunikation der SwyxWare in 3 Teile gegliedert werden:
- Laden/Speichern der Konfiguration
- Auf- und Abbau von Rufen per CallControl
- Übertragung von Sprach-/Faxdaten einer Verbindung
Der ConfigDataStore ist als WebService realisiert und damit greifen die Clients und Serverkomponenten immer per TCP auf einen vom CDS-Service zur Verfügung gestellten TCP Port (9094) auf ihn zu. Für die SwyxWare SDC Variante wird zusätzlich der Port 9095 genutzt. Der ConfigDataStore initiiert selber keine Netzwerkverbindungen.
Ab SwyxWare 2011 wird nur noch SIP als CallControl Protokoll verwendet. Die einzige Ausnahme hiervon bilden die SwyxPhones Lxxx, die mit proprietären Protokollen angesteuert werden.
Sowohl die Sprachdaten, als auch die Faxdaten selbst werden immer per UDP verschickt. Die einzelnen Audioframes werden in RTP (Real Time Protocol) verpackt und die Faxdaten werden mit T.38 versendet – beide Protokolle nutzen UDP für den Transport.
Eine Besonderheit ist, dass obwohl sämtliche Verbindungsaufbauten per CallControl immer über den zentralen SwyxServer abgewickelt werden, fließen die Sprach- und Faxdaten dennoch direkt zwischen den beteiligten Clients.
In der angehängten Datei folgen Tabellen, die für alle SwyxWare Komponenten die verwendeten Konfigurations-, CallControl- und Audio-/Faxdaten-Protokolle, deren Typ und Ports aufführen und falls vorhanden Registrykeys mit denen diese umkonfiguriert werden können.
Dieser Artikel wird mit jedem Release einer SwyxWare 13 Version aktualisiert und ist für diese gültig.
SwyxWare Server
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | 9094 / for SDC 9095 | ||
| Client REST API | HTTPS | TCP | Any | 9100 | ||
| IMAP | TCP | Any | Any IP:Any Port | WAN access | ||
| SMTP | TCP | Any | Any IP:Any Port | WAN access | ||
| CallControl | SIP | TCP | Any | Any IP:Any Port | ||
| CallControl | SIP | UDP | 5060 | Any IP:Any Port | ||
| Audio | RTP | UDP | 51000 - 51499 | Any IP:Any Port | Registry: RTPFirstPort, RTPLastPort | |
| PhoneWhitelist | HTTPS | TCP | Any | https://cpe.swyx.com/whitelist/PhoneWhitelist.dat | WAN access | |
| IntersitePresence | WCF | TCP | Any | Any IP:9093 | WAN access |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| CallControl | SIP | TCP | Any IP:Any Port | 5060 | ||
| CallControl | SIP | UDP | Any IP:Any Port | 5060 | ||
| Audio | RTP | UDP | Any IP:Any Port | 51000 - 51499 | Registry: RTPFirstPort, RTPLastPort | |
| IntersitePresence | WCF | TCP | Any IP:Any Port | 9093 | WAN access |
CDS
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| Licensing | HTTPS | TCP | Any | https://license.swyx.com:443 | SwyxFlex, SwyxPerpetual, Instant Messaging, SwyxMeeting | WAN access |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| CDS API (configuration) | WCF | TCP | Any IP:Any Port | 9094 / for SDC 9095 | ||
| Client REST API (full) | HTTPS | TCP | Any IP:Any Port | 9100 | ||
| Client REST API (authentication service only) | HTTPS | TCP | Any IP:Any Port | 9101 | WAN access | |
| Provisioning | HTTP | TCP | Any IP:Any Port | 9200 |
SwyxGate
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| Audio/Fax | RTP/T.38 | UDP | 52000 - 52499 | Any IP:Any Port | Registry: RtpPortRangeStart, RtpPortRangeEnd |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5064 | Registry: LowerBoundSipPort, UpperBoundSipPort |
| Audio/Fax | RTP/T.38 | UDP | Any IP:Any Port | 52000 - 52499 | Registry: RtpPortRangeStart, RtpPortRangeEnd |
LinkManager
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | ||
| CallControl (local EP) | SIP | TCP | Any | IpPbxSrv IP:5060 | ||
| CallControl (local EP) | SIP | UDP | 65001 | IpPbxSrv IP:5060 | Registry: TcpPortOfLocalSipEndpoint | |
| CallControl (remote EP) | SIP | TCP/TLS | Any | Any IP:Any Port | WAN access | |
| CallControl (remote EP) | SIP | UDP | 65002 | Any IP:Any Port | Registry: TcpPortOfRemoteSipEndpoint | WAN access |
| CallControl (remote EP) | STUN Message | UDP | 65002 | Any IP:3478 | Registry: TcpPortOfRemoteSipEndpoint | WAN access |
| Audio/Fax | RTP/T.38 | UDP | 55000 – 56000 | Any IP:Any Port | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp | WAN access |
| Audio/Fax | STUN Message | UDP | 55000 – 56000 | Any IP:3478 | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp | WAN access |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| CallControl (local EP) | SIP | TCP | IpPbxSrv IP:Any Port | 65001 | Registry: TcpPortOfLocalSipEndpoint | |
| CallControl (local EP) | SIP | UDP | IpPbxSrv IP:5060 | 65001 | Registry: TcpPortOfLocalSipEndpoint | |
| CallControl (remote EP) | SIP | TCP | Any IP:Any Port | 65002 | Registry: TcpPortOfRemoteSipEndpoint | WAN access |
| CallControl (remote EP) | SIP | UDP | Any IP:Any Port | 65002 | Registry: TcpPortOfRemoteSipEndpoint | WAN access |
| CallControl (remote EP) | STUN Message | UDP | Any IP:Any Port | 65002 | Registry: TcpPortOfRemoteSipEndpoint | WAN access |
| Audio/Fax | RTP/T.38 | UDP | Any IP:Any Port | 55000 – 56000 | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp | WAN access |
| Audio/Fax | STUN Message | UDP | Any IP:Any Port | 55000 – 56000 | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp | WAN access |
Conference Manager
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| Audio | RTP | UDP | 56000 - 57000 | Any IP:Any Port | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5062 | Registry: LowerBoundSipPort, UpperBoundSipPort |
| Audio | RTP | UDP | Any IP:Any Port | 56000 - 57000 | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp |
Phone Manager
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| Configuration | DLS/HTTP | TCP | Any |
Any IP:8085 |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | used in Version |
|---|---|---|---|---|---|---|
| CallControl | CorNet TC | TCP, TLS | Any IP:Any Port | 4060, 4061 | ||
| CallControl | H.323 | TCP, TLS | Any IP:Any Port | 1300, 1720, 1721 | < 12.0 | |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 65007 | Registry: SipCallSignalingPort | |
| Configuration | DLS | TCP | Any IP:Any Port | 18443 |
FaxServer
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | ||
| Client REST API | HTTPS | TCP | Any | IpPbxSrv IP:9100 | ||
| SMTP | TCP | Any | Any IP:Any Port | WAN access | ||
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | ||
| Fax | RTP/T.38 | UDP | 2000 - 8000 | Any IP:Any Port | Registry: T38PortRangeStart, T38PortRangeEnd |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 61000 | Registry: LowerBoundSipPort, UpperBoundSipPort |
| Fax | RTP/T.38 | UDP | Any IP:Any Port | 2000 - 8000 | Registry: T38PortRangeStart, T38PortRangeEnd |
FaxServer Printer Gateway
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 |
MobileExtensionManager
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 5070 - 5170 | IpPbxSrv IP:5060 | Registry: SipListenerPort |
| Audio | RTP | UDP | 50000 - 50999 | Any IP:Any Port | Registry: PortrangeBegin, PortrangeEnd |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5070 - 5170 | Registry: SipListenerPort |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5070 - 5170 | Registry: SipListenerPort |
| Audio | RTP | UDP | Any IP:Any Port | 50000 - 50999 | Registry: PortrangeBegin, PortrangeEnd |
PushNotificationService
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| Push Notification Gateway Apple | HTTPS | TCP | Any | api.push.apple.com:443 | WAN access | |
| Push Notification Gateway Google | HTTPS | TCP | Any | fcm.googleapis.com:443 | WAN access | |
| CallControl | SIP | TCP | Any | Any IP:Any Port (IpPbxSrv, RemoteConnector, Clients) | ||
| CallControl | SIP | UDP | 5096 | Any IP:Any Port (IpPbxSrv, RemoteConnector, Clients) | Registry: BindPort |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | Any IP:Any Port (IpPbxSrv, RemoteConnector, Clients) | 5096 | Registry: BindPort |
| CallControl | SIP | UDP | Any IP:Any Port (IpPbxSrv, RemoteConnector, Clients) | 5096 | Registry: BindPort |
Remote Connector
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 / IpPbxSrv IP:5096 | |
| CallControl | SIP | UDP | 10000 - 15000 | IpPbxSrv IP:5060 / IpPbxSrv IP:5096 | |
| Audio | RTP | UDP | 15000 - max (Typical number of connections * 2) | Any IP:Any Port | |
| "TCP Forwarding" | TCP |
Until 12.20: 712,9100 Since 12.20: 712,9100,9980|80 |
|
Until 12.20: Registry: TcpForwardingPorts Since 12.20: Registry: TcpForwarding |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| Tunnel (WAN EP) | TLS | TCP | Any IP:Any Port | 16203, 57203 | Registry: TunnelListeningPorts | WAN access |
| CallControl | SIP | TCP | IpPbxSrv IP:Any | 10000 - 15000 | ||
| CallControl | SIP | UDP | IpPbxSrv IP:5060 / IpPbxSrv IP:5096 | 10000 - 15000 | ||
| Audio | RTP | UDP | Any IP:Any Port | 15000 - max (Typical number of connections * 2) |
SwyxCTI+
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 65009 | IpPbxSrv IP:5060 | Registry: SipCallSignalingPort |
| Audio | RTP | UDP | 60000 – 60100 | Registry: PortrangeBegin, PortrangeEnd |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 65009 | Registry: SipCallSignalingPort |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 65009 | Registry: SipCallSignalingPort |
| Audio | RTP | UDP | 60000 – 60100 | Registry: PortrangeBegin, PortrangeEnd |
Swyx uaCSTA
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | Any IP:Any Port | |
| CallControl | SIP | UDP | 65012 | Any IP:Any Port | Registry: Port |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | Any IP:Any Port | 65012 | Registry: Port |
| CallControl | SIP | UDP | Any IP:Any Port | 65012 | Registry: Port |
SwyxIt! / FaxClient
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| REST API (Authentication) | HTTPS | TCP | Any | Any IP:9101 | Swyx Configuration URL | WAN access |
| REST API | HTTPS | TCP | Any | IpPbxSrv IP:9100 | ||
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | ||
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | ||
| CallControl | SIP | UDP | 5070 - 5170 | IpPbxSrv IP:5060 | Registry: SIPListenerPort | |
| Audio/Video | RTP | UDP | 50000 - 50999 | Any IP:Any Port | Registry: PortrangeBegin, PortrangeEnd | |
| VisualContacts | LDAP | TCP + UDP | Any | Any IP:712 | ||
| Tunnel | TLS | TCP | Any | Any IP:16203,57203 | WAN access | |
| SwyxIt! Web Extension | HTTP/HTTPS | TCP | Any | Any IP:Any Port | Skin | WAN access |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5070 - 5170 | Registry: SIPListenerPort |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5070 - 5170 | Registry: SIPListenerPort |
| Audio/Video | RTP | UDP | Any IP:Any Port | 50000 - 50999 | Registry: PortrangeBegin, PortrangeEnd |
| VisualContacts | LDAP | UDP | Any IP:Any Port | Any |
Swyx Messenger (part of SwyxIt!)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| REST API to SwyxWare | HTTPS | TCP | Any | 9100 | |
| REST API to Coligo Stepping Stone Service (acquiring Coligo token) (https://swyx-im-security.k8s.ispworks.nl/) |
HTTPS | TCP | Any | 443 | |
|
Communication with Coligo Backend - Chat (wss://iam.voipoperator.eu/socket) |
WSS | TCP | Any | 443 | |
|
Communication with Coligo Backend - File Upload and Download (https://iamfile.voipoperator.eu:4006) |
HTTPS | TCP | Any | 4006 | |
| Communication with SwyxIt! (localhost - 127.0.0.1) | SignalR | TCP | Any | random port |
Swyx Connector for MS Teams (needs SwyxIt!)
Outbound
| Classification | Protocol | Type | Source Port | Target Host |
Target Port |
| Download of the Swyx MS Teams Web App | HTTPS | TCP | Any | https://msteams-app.swyx.com | 443 |
| Communication with SwyxIt! (localhost - 127.0.0.1) | SignalR | TCP | Any | Localhost | 12042 (default) Alternative ports if default is blocked: 17042, 22042, 27042, 32042, 37042, 42042 |
| Communication with SwyxIt! (localhost - 127.0.0.1) in Microsoft Remote Desktop Services environment | SignalR | TCP | Any | Localhost | random port - redirected via SwyxIt! Discovery Service (see below) |
SwyxWare Administration
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 | ||
| Certificate request and download | HTTPS | TCP | Any | https://acme-v02.api.letsencrypt.org:443 | WAN access |
Swyx Connectivity Setup Tool (SCST)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 | ||
| Certificate request and download | HTTPS | TCP | Any | https://acme-v02.api.letsencrypt.org:443 |
WAN access
|
Swyx Trace Tool
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Trace Upload | HTTPS | TCP | Any | https://bits.swyx.com:443 | WAN access |
SwyxPhone L4xx; L5xx; L6xx; L6x
Outbound
| Classification | Protocol | Type | Port(source) | Port(target) | used in Version | Comment |
|---|---|---|---|---|---|---|
| CallControl | CorNet | TCP, TLS | Any | 4060, 4061 | ||
| CallControl | H.323/H.225 | TCP, TLS | Any | 1300, 1720, 1721 |
L6x: not L6xx,L5xx,L4xx: <=V2 R1.5.0 |
|
| Audio | RTP | UDP | Any | 5000 - 5020 (mostly 5012, 5013) | ||
| FW-Update | FTP | TCP | Any | Any to 21 | WAN access | |
| Network Time | NTP | UDP | Any | unspecified to 123 |
Inbound
| Classification | Protocol | Type | Port(source) | Port (target) |
|---|---|---|---|---|
| Configuration/PhoneSearch | HTTP | TCP | Any | 8085 |
| local web interface | HTTPS | TLS | Any | 443 |
DCF phone Yealink T4xS, T5x
Outbound
Classification |
Protocol |
Type |
Port(source) |
Port (target) |
used with Version |
Comment |
|---|---|---|---|---|---|---|
| Audio | RTP | UDP | 11780 - 12780 | Any IP:Any Port | configurable via WebInterface | |
| PhoneBook | LDAP | TCP | Any | 389 | < SwyxWare v12.30 | |
| PhoneBook | LDAPS | TLS | Any | 636 | >= SwyxWare v12.30 | |
| Provisioning | HTTP | TCP | Any | 9200 | ||
| VoIP | SIP | UDP/TCP | 5060/Any | 5060 | ||
| uaCSTA | SIP | UDP/TCP | 5060/Any | 65012 | ||
| RPS, Firmware download | HTTP | TCP | any to 80 | WAN access | ||
| RPS, Firmware download | HTTPS | TLS | any to 443 | WAN access |
Inbound
Classification |
Protocol |
Type |
Port(source) |
Port (target) |
Comment |
|---|---|---|---|---|---|
| Audio | RTP | UDP | Any IP:Any Port | 11780 - 12780 | configurable via WebInterface |
| local SIP stack | SIP | UDP/TCP | 5060/Any | 5060 | |
| local web interface | HTTPS | TLS | Any | 443 |
Swyx Remote Connector für Yealink
- Since SwyxWare 13.30 for SwyxON only.
Outbound
Classification |
Protocol |
Type |
Port(source) |
Port (target) |
Comment |
|---|---|---|---|---|---|
| PS | HTTPS | TCP | Any |
https://rps.yealink.com:443 Controlled by Yealink Firmware |
WAN access |
| Yealink Firmware download | HTTPS | TCP | Any |
Any IP : 443 Controlled by Yealink RPS |
WAN access |
| Swyx RPS | HTTPS | TCP | Any | https://phone.swyx.com:443 | WAN access |
| Remote Endpoint | OpenVPN | UDP | Any |
Address is shown in the SCC: remote01.swyxon.com : Any Port |
WAN access |
SwyxMobile (Android)
Internal mode (without RemoteConnector)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| REST API (Authentication) | HTTPS | TCP | Any | IpPbxSrv IP:9101 | ||
| REST API | HTTPS | TCP | Any | IpPbxSrv IP:9100 | ||
| IM | Websocket | TCP | Any | Any IP:443 | WAN access | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | ||
| CallControl | SIP | UDP | 5070 | IpPbxSrv IP:5060 | ||
| Audio | RTP | UDP | 50000- 50999 | Any IP:Any Port |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5070 | |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5070 | |
| Audio | RTP | UDP | Any IP:Any Port | 50000- 50999 |
External mode (with RemoteConnector)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| REST API (Authentication) | HTTPS | TCP | Any | Any IP:9101 | WAN access | |
| RemoteConnector | TLS | TCP | Any | Any IP:16203, 57203 or 443 | all three ports are tried at the same time and the first successful connect wins. | WAN access |
| IM | Websocket | TCP | Any | Any IP:443 | WAN access |
SwyxMobile iOS/Swyx Desktop macOS
Internal mode (without RemoteConnector)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| REST API (Authentication) | HTTPS | TCP | Any | IpPbxSrv IP:9101 | ||
| REST API | HTTPS | TCP | Any | IpPbxSrv IP:9100 | ||
| IM | Websocket | TCP | Any | Any IP:443 | WAN access | |
| CallControl | SIP | UDP + TCP | Any | IpPbxSrv IP:5060 | ||
| Audio | RTP | UDP | 50000- 50999 | Any IP:Any Port |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | Any | |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | Any | |
| Audio | RTP | UDP | Any IP:Any Port | 50000- 50999 |
External mode (with RemoteConnector)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
|---|---|---|---|---|---|---|
| REST API (Authentication) | HTTPS | TCP | Any | Any IP:9101 | WAN access | |
| RemoteConnector | TLS | TCP | Any | Any IP:16203, 57203 or 443 | all three ports are tried at the same time and the first successful connect wins. | WAN access |
| IM | Websocket | TCP | Any | Any IP:443 | WAN access |
Swyx DECT 500
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 5060 | IpPbxSrv IP:5060 | WebInterface |
| Audio | RTP | UDP | 50004 - 50258 | Any IP:Any Port | WebInterface |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5060 | WebInterface |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5060 | WebInterface |
| Audio | RTP | UDP | Any IP:Any Port | 50004 - 50258 | WebInterface |
Swyx DECT 800 (enhanced deployment)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | |
| Audio | RTP | UDP | 16384 - 32767 | Any IP:Any Port | WebInterface | |
| PhoneBook | LDAP | TCP | Any | 389 | < SwyxWare v12.30 | |
| PhoneBook | LDAPS | TLS | Any | 636 | >= SwyxWare v12.30 | |
| Provisioning | HTTP | TCP | Any | 9200 | ||
| CallControl | SIP | UDP/TCP | 5060/Any | 5060 | ||
| Firmware download | HTTP | TCP | any to 80 | WAN access | ||
| Firmware download | HTTPS | TLS | any to 443 | WAN access |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 2048 - 65535 | WebInterface |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 2048 - 65535 | WebInterface |
| Audio | RTP | UDP | Any IP:Any Port | 16384 - 32767 | WebInterface |
| local web interface | HTTPS | TLS | Any | 443 |
Mutual (between base stations)
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | H323 | TCP | Any Port | 726-1727 | WebInterface |
| CallControl | H225 | UDP | Any Port | 1718-1719 | WebInterface |
| Audio | RTP | UDP | Any IP:Any Port | 16384 - 65535 | WebInterface |
| Unite | HTTP | TCP | Any | 8080 |
Swyx DECT 800 (legacy deployment )
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | Any | IpPbxSrv IP:5060 | WebInterface |
| Audio | RTP | UDP | 16384 - 32767 | Any IP:Any Port | WebInterface |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 2048 - 65535 | WebInterface |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 2048 - 65535 | WebInterface |
| Audio | RTP | UDP | Any IP:Any Port | 16384 - 32767 | WebInterface |
| Local Web Interface | HTTPS | TLS | Any | 443 |
Swyx Connect (172x)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | 5060 | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 5060 | IpPbxSrv IP:5060 | |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | 32768 - 49151 | Any IP:Any Port | |
| Allgemein | TCP | 3072 - 19455 | |||
| Maskierung | UDP + TCP | 53248 - 57343 |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5060 | |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5060 | |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | Any IP:Any Port | 32768 - 49151 | |
| Allgemein | TCP | 3072 - 19455 | |||
| Maskierung | UDP + TCP | 53248 - 57343 |
Swyx Connect (6xxx/8xxx)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | 5061, 5081 ? | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 5060, 5080 | IpPbxSrv IP:5060 | |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | 6000 – (6000+(channels*10)) | Any IP:Any Port |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5061, 5081 | |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5060, 5080 | |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | Any IP:Any Port | 6000 – (6000+(channels*10)) |
MediaPack (MP-1xy)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | 5061 | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 5060 | IpPbxSrv IP:5060 | LocalSIPPort |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | 6000 - (6000+10*(device channels)) | Any IP:Any Port | BaseUDPPort |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5061 | LocalSIPPort |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5060 | LocalSIPPort |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | Any IP:Any Port | 6000 - (6000+10*(device channels)) | BaseUDPPort |
SwyxPlus VisualGroups
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
|---|---|---|---|---|---|
| Information | HTTP | TCP | Any IP:Any Port | 80 |
Swyx Control Center
Inbound
| Classification | Protocol | Type | Port | Configurable via |
|---|---|---|---|---|
| Administration Web-Portal | HTTPS | TCP | 9443 | SCC Installer / IIS |
Outbound
| Classification | Protocol | Type | Port | Configurable via |
|---|---|---|---|---|
| Swyx Management Service | HTTPS | TCP | 9201 | config-file |
Swyx Management Service
Inbound
| Classification | Protocol | Type | Port | Configurable via |
|---|---|---|---|---|
| Swyx Management Service (REST Api Interface) | HTTPS | TCP | 9201 | config-file |
Outbound
| Classification | Protocol | Type | Port | Configurable via |
|---|---|---|---|---|
| CDS Client REST API (full) | HTTPS | TCP | 9100 | |
| CDS Client REST API (authentication service only) | HTTPS | TCP | 9101 |
SwyxWare HealthMonitor
Outbound
The ports of health monitor are configured in Health Monitor's appSettings.json. The following list reflects the defaults only. Actual ports depend on the configuration the customer sets up.
| Classification | Protocol | Type | Port (Source) | Port (Target) | Configurable via |
|---|---|---|---|---|---|
| Health Probing of SwyxWare Services | HTTP | TCP | Any | 9100 | appSettings.json |
| Health Probing of SwyxWare Services | SIP | TCP or UDP | Any | (see SwyxWare services above) | appSettings.json |
Inbound
| Classification | Protocol | Type | Port (Target) | Configurable via |
|---|---|---|---|---|
| Prometheus Metrics Exporter to provide health probing results | HTTP | TCP | 5000 |
Während der Installation über den Skriptparameter install-service.ps1. Beachten Sie, dass die IP, auf der der Dienst lauscht, von der Konfiguration abhängt, z. B. vom Parameter des Skripts install-service.ps1. Wenn das Abhören mit einer URL wie http://*:5000 konfiguriert wird, lauscht der Dienst auf einer beliebigen IP. Wenn eine bestimmte IP in der URL angegeben ist, lauscht der Dienst nur auf dieser. |
Wenn der Kunde zusätzlich Prometheus oder Grafana installiert, lauschen diese Komponenten ebenfalls auf TCP-Ports. Einzelheiten finden Sie in der Dokumentation (https://grafana.com und https://prometheus.io).
Für Yealink T4xs - Telefone sind die Ports der offiziellen Kommunikation von Yealink zu entnehmen:
Kommentare
0 Kommentare
Zu diesem Beitrag können keine Kommentare hinterlassen werden.