Die zentralen Dienste einer SwyxWare im Netzwerk sind der SwyxServer und der ConfigDataStore. Der SwyxServer übernimmt in erster Linie Vermittlungsfunktion zum Gesprächsaufbau, aber auch viele Aufgaben darüber hinaus (Statussignalisierung, Scripting etc.).
Der ConfigDataStore stellt hauptsächlich die Konfiguration für alle SwyxWare-Komponenten zur Verfügung, aber auch Telefonbücher, Ruflisten etc..
Damit kann die Netzwerkkommunikation der SwyxWare in 3 Teile gegliedert werden:
- Laden/Speichern der Konfiguration
- Auf- und Abbau von Rufen per CallControl
- Übertragung von Sprach-/Faxdaten einer Verbindung
Der ConfigDataStore ist als WebService realisiert und damit greifen die Clients und Serverkomponenten immer per TCP auf einen vom CDS-Service zur Verfügung gestellten TCP Port (9094) auf ihn zu. Für die SwyxWare SDC Variante wird zusätzlich der Port 9095 genutzt. Der ConfigDataStore initiiert selber keine Netzwerkverbindungen.
Ab SwyxWare 2011 wird nur noch SIP als CallControl Protokoll verwendet. Die einzige Ausnahme hiervon bilden die SwyxPhones Lxxx, die mit proprietären Protokollen angesteuert werden.
Sowohl die Sprachdaten, als auch die Faxdaten selbst werden immer per UDP verschickt. Die einzelnen Audioframes werden in RTP (Real Time Protocol) verpackt und die Faxdaten werden mit T.38 versendet – beide Protokolle nutzen UDP für den Transport.
Eine Besonderheit ist, dass obwohl sämtliche Verbindungsaufbauten per CallControl immer über den zentralen SwyxServer abgewickelt werden, fließen die Sprach- und Faxdaten dennoch direkt zwischen den beteiligten Clients.
In der angehängten Datei folgen Tabellen, die für alle SwyxWare Komponenten die verwendeten Konfigurations-, CallControl- und Audio-/Faxdaten-Protokolle, deren Typ und Ports aufführen und falls vorhanden Registrykeys mit denen diese umkonfiguriert werden können.
Dieser Artikel wird mit jedem Release einer Swyx 14 Version aktualisiert und ist für diese gültig.
Outbound
Der Dienst ist die Quelle einer Aktion.
TCP: Der Dienst agiert als TCP-Client und stellt eine Verbindung zu einem entfernten TCP-Server her.
UDP: Pakete werden von diesem Dienst an ein entferntes Ziel gesendet.
Inbound
Der Dienst ist das Ziel einer Aktion.
TCP: Der Dienst fungiert als TCP-Server und nimmt Verbindungen von entfernten TCP-Clients entgegen.
UDP: Pakete, die von einem entfernten Teilnehmer an diesen Dienst gesendet werden.
SwyxWare Server
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Configuration | CDS | TCP | Any | 9094 / for SDC 9095 | ||
| Client REST API | HTTPS | TCP | Any | 9100 | ||
| IMAP | TCP | Any | Any IP:Any Port | WAN access | ||
| SMTP | TCP | Any | Any IP:Any Port | WAN access | ||
| CallControl | SIP | TCP | Any | Any IP:Any Port | ||
| CallControl | SIP | UDP | 5060 | Any IP:Any Port | ||
| Audio | RTP | UDP | 51000 - 51499 | Any IP:Any Port | Registry: RTPFirstPort, RTPLastPort | |
| PhoneWhitelist | HTTPS | TCP | Any | https://cpe.swyx.com/whitelist/PhoneWhitelist.dat | WAN access | |
| IntersitePresence | WCF | TCP | Any | Any IP:9093 | WAN access |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| CallControl | SIP | TCP | Any IP:Any Port | 5060 | ||
| CallControl | SIP | UDP | Any IP:Any Port | 5060 | ||
| Audio | RTP | UDP | Any IP:Any Port | 51000 - 51499 | Registry: RTPFirstPort, RTPLastPort | |
| IntersitePresence | WCF | TCP | Any IP:Any Port | 9093 | WAN access |
CDS
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Licensing | HTTPS | TCP | Any | https://license.swyx.com:443 | SwyxFlex, SwyxPerpetual, Instant Messaging, SwyxMeeting | WAN access |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| CDS API (configuration) | WCF | TCP | Any IP:Any Port |
9094 / for SDC 9095 |
||
| Client REST API (full) | HTTPS | TCP | Any IP:Any Port | 9100 | ||
| Client REST API (authentication service only) | HTTPS | TCP | Any IP:Any Port | 9101 | WAN access | |
| Provisioning | HTTP | TCP | Any IP:Any Port | 9200 |
SwyxGate
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| Audio/Fax | RTP/T.38 | UDP | 52000 - 52499 | Any IP:Any Port | Registry: RtpPortRangeStart, RtpPortRangeEnd |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5064 | Registry: LowerBoundSipPort, UpperBoundSipPort |
| Audio/Fax | RTP/T.38 | UDP | Any IP:Any Port | 52000 - 52499 | Registry: RtpPortRangeStart, RtpPortRangeEnd |
LinkManager
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | ||
| CallControl (local EP) | SIP | TCP | Any | IpPbxSrv IP:5060 | ||
| CallControl (local EP) | SIP | UDP | 65001 | IpPbxSrv IP:5060 | Registry: TcpPortOfLocalSipEndpoint | |
| CallControl (remote EP) | SIP | TCP/TLS | Any | Any IP:Any Port | WAN access | |
| CallControl (remote EP) | SIP | UDP | 65002 | Any IP:Any Port | Registry: TcpPortOfRemoteSipEndpoint | WAN access |
| CallControl (remote EP) | STUN Message | UDP | 65002 | Any IP:3478 | Registry: TcpPortOfRemoteSipEndpoint | WAN access |
| Audio/Fax | RTP/T.38 | UDP | 55000 – 56000 | Any IP:Any Port | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp | WAN access |
| Audio/Fax | STUN Message | UDP | 55000 – 56000 | Any IP:3478 | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp | WAN access |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| CallControl (local EP) | SIP | TCP | IpPbxSrv IP:Any Port | 65001 | Registry: TcpPortOfLocalSipEndpoint | |
| CallControl (local EP) | SIP | UDP | IpPbxSrv IP:5060 | 65001 | Registry: TcpPortOfLocalSipEndpoint | |
| CallControl (remote EP) | SIP | TCP | Any IP:Any Port | 65002 | Registry: TcpPortOfRemoteSipEndpoint | WAN access |
| CallControl (remote EP) | SIP | UDP | Any IP:Any Port | 65002 | Registry: TcpPortOfRemoteSipEndpoint | WAN access |
| CallControl (remote EP) | STUN Message | UDP | Any IP:Any Port | 65002 | Registry: TcpPortOfRemoteSipEndpoint | WAN access |
| Audio/Fax | RTP/T.38 | UDP | Any IP:Any Port | 55000 – 56000 | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp | WAN access |
| Audio/Fax | STUN Message | UDP | Any IP:Any Port | 55000 – 56000 | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp | WAN access |
Conference Manager
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| Audio | RTP | UDP | 56000 - 57000 | Any IP:Any Port | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5062 | Registry: LowerBoundSipPort, UpperBoundSipPort |
| Audio | RTP | UDP | Any IP:Any Port | 56000 - 57000 | Registry: LowerBoundMediaPortUdp, UpperBoundMediaPortUdp |
Phone Manager
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| Configuration | DLS/HTTP | TCP |
Any |
Any IP:8085 |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | used in Version |
| CallControl | CorNet TC | TCP, TLS | Any IP:Any Port | 4060, 4061 | ||
| CallControl | H.323 | TCP, TLS | Any IP:Any Port | 1300, 1720, 1721 | < 12.0 | |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 65007 | Registry: SipCallSignalingPort | |
| Configuration | DLS | TCP | Any IP:Any Port | 18443 |
FaxServer
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | ||
| Client REST API | HTTPS | TCP | Any | IpPbxSrv IP:9100 | ||
| SMTP | TCP | Any | Any IP:Any Port | WAN access | ||
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | ||
| Fax | RTP/T.38 | UDP | 2000 - 8000 | Any IP:Any Port | Registry: T38PortRangeStart, T38PortRangeEnd |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 61000 | Registry: LowerBoundSipPort, UpperBoundSipPort |
| Fax | RTP/T.38 | UDP | Any IP:Any Port | 2000 - 8000 | Registry: T38PortRangeStart, T38PortRangeEnd |
FaxServer Printer Gateway
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 |
PushNotificationService
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | used with Version | Comment |
| Push Notification Gateway Apple | HTTPS | TCP | Any | api.push.apple.com:443 | WAN access | ||
| Push Notification Gateway Google | HTTPS | TCP | Any | fcm.googleapis.com:443 | WAN access | ||
| Authentication Gateway Google | HTTPS | TCP | Any | oauth2.googleapis.com:443 | >= PNS 2.1.0.0 | WAN access | |
| CallControl | SIP | TCP | Any | Any IP:Any Port (IpPbxSrv, RemoteConnector, Clients) | |||
| CallControl | SIP | UDP | 5096 | Any IP:Any Port (IpPbxSrv, RemoteConnector, Clients) | Registry: BindPort |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | Any IP:Any Port (IpPbxSrv, RemoteConnector, Clients) | 5096 | Registry: BindPort |
| CallControl | SIP | UDP | Any IP:Any Port (IpPbxSrv, RemoteConnector, Clients) | 5096 | Registry: BindPort |
Remote Connector
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 / IpPbxSrv IP:5096 | |
| CallControl | SIP | UDP | 10000 - 15000 | IpPbxSrv IP:5060 / IpPbxSrv IP:5096 | |
| Audio | RTP | UDP | 15000 - max (Typical number of connections * 2) | Any IP:Any Port | |
| "TCP Forwarding" | TCP |
Until 12.20: 712,9100 Since 12.20: 712,9100,9980|80 |
|
Until 12.20: Registry: TcpForwardingPorts Since 12.20: Registry: TcpForwarding |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Tunnel (WAN EP) | TLS | TCP | Any IP:Any Port | 16203, 57203 | Registry: TunnelListeningPorts | WAN access |
| CallControl | SIP | TCP | IpPbxSrv IP:Any | 10000 - 15000 | ||
| CallControl | SIP | UDP | IpPbxSrv IP:5060 / IpPbxSrv IP:5096 | 10000 - 15000 | ||
| Audio | RTP | UDP | Any IP:Any Port | 15000 - max (Typical number of connections * 2) |
SwyxCTI+
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 65009 | IpPbxSrv IP:5060 | Registry: SipCallSignalingPort |
| Audio | RTP | UDP | 60000 – 60100 | Registry: PortrangeBegin, PortrangeEnd |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 65009 | Registry: SipCallSignalingPort |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 65009 | Registry: SipCallSignalingPort |
| Audio | RTP | UDP | 60000 – 60100 | Registry: PortrangeBegin, PortrangeEnd |
Swyx uaCSTA
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | |
| CallControl | SIP | TCP | Any | Any IP:Any Port | |
| CallControl | SIP | UDP | 65012 | Any IP:Any Port | Registry: Port |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | Any IP:Any Port | 65012 | Registry: Port |
| CallControl | SIP | UDP | Any IP:Any Port | 65012 | Registry: Port |
SwyxIt! / FaxClient
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| REST API (Authentication) | HTTPS | TCP | Any | Any IP:9101 | Swyx Configuration URL | WAN access |
| REST API | HTTPS | TCP | Any | IpPbxSrv IP:9100 | ||
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | ||
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | ||
| CallControl | SIP | UDP | 5070 - 5170 | IpPbxSrv IP:5060 | Registry: SIPListenerPort | |
| Audio/Video | RTP | UDP | 50000 - 50999 | Any IP:Any Port | Registry: PortrangeBegin, PortrangeEnd | |
| VisualContacts | LDAP | TCP + UDP | Any | Any IP:712 | ||
| Tunnel | TLS | TCP | Any | Any IP:16203,57203 | WAN access | |
| SwyxIt! Web Extension | HTTP/HTTPS | TCP | Any | Any IP:Any Port | Skin | WAN access |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5070 - 5170 | Registry: SIPListenerPort |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5070 - 5170 | Registry: SIPListenerPort |
| Audio/Video | RTP | UDP | Any IP:Any Port | 50000 - 50999 | Registry: PortrangeBegin, PortrangeEnd |
| VisualContacts | LDAP | UDP | Any IP:Any Port | Any |
Swyx Messenger (part of SwyxIt!)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| REST API to SwyxWare | HTTPS | TCP | Any | 9100 | ||
| REST API to Coligo Stepping Stone Service (acquiring Coligo token) | HTTPS | TCP | Any | https://swyx-im-security.k8s.ispworks.nl:443 | WAN access | |
| Communication with Coligo Backend - Chat | WSS | TCP | Any | wss://iam.voipoperator.eu/socket:443 | WAN access | |
| Communication with Coligo Backend - File Upload and Download | HTTPS | TCP | Any | https://iamfile.voipoperator.eu:4006 | WAN access | |
| Communication with SwyxIt! (localhost - 127.0.0.1) | SignalR | TCP | Any | 12042 (default) Alternative ports if default is blocked: 17042, 22042, 27042, 32042, 37042, 42042 |
||
| Communication with SwyxIt! (localhost - 127.0.0.1) in Microsoft Remote Desktop Services environment | SignalR | TCP | Any | random port |
Swyx Connector for MS Teams (needs SwyxIt!)
Outbound
| Classification | Protocol | Type | Port (source) | Target Host | Port (target) | Comment |
| Download of the Swyx MS Teams Web App | HTTPS | TCP | Any | https://msteams-app.swyx.com | 443 | WAN access |
| Communication with SwyxIt! (localhost - 127.0.0.1) | SignalR | TCP | Any | Localhost | 12042 (default) Alternative ports if default is blocked: 17042, 22042, 27042, 32042, 37042, 42042 |
|
| Communication with SwyxIt! (localhost - 127.0.0.1) in Microsoft Remote Desktop Services environment | SignalR | TCP | Any | Localhost | random port - redirected via SwyxIt! Discovery Service (see below) |
SwyxIt! Discovery Service
Inbound
| Classification | Protocol | Type | Port (source) | Target Host | Port (target) |
| Redirection of Swyx Connector for MS Teams requests in Microsoft Remote Desktop Services environment | SignalR | TCP | Any | Localhost | 12042 (default) Alternative ports if default is blocked: 17042, 22042, 27042, 32042, 37042, 42042 |
SwyxWare Administration
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 / for SDC 9095 | ||
| Firmware | FTP | TCP | Any | ftp.swyx.com:23 | Administration | WAN access |
Swyx Connectivity Setup Tool (SCST)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Configuration | CDS | TCP | Any | IpPbxSrv IP:9094 | ||
| Certificate request and download | HTTPS | TCP | Any | https://acme-v02.api.letsencrypt.org:443 | WAN access |
Swyx Trace Tool
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| Trace Upload | HTTPS | TCP | Any | https://bits.swyx.com:443 | WAN access |
SwyxPhone L4xx; L5xx; L6xx; L6x
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | used in Version | Comment |
| CallControl | CorNet | TCP, TLS | Any | 4060, 4061 | ||
|
CallControl |
H.323/H.225 | TCP, TLS | Any | 1300, 1720, 1721 |
L6x: not L6xx,L5xx,L4xx: <=V2 R1.5.0 |
|
| Audio | RTP | UDP | 5000 - 5020 (mostly 5012, 5013) | Any | ||
| FW-Update | FTP | TCP | Any | Any to 21 | WAN access | |
| Network Time | NTP | UDP | Any | unspecified to 123 |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) |
| Configuration/PhoneSearch | HTTP | TCP | Any | 8085 |
| local web interface | HTTPS | TLS | Any | 443 |
| Audio | RTP | UDP | Any | 5000 - 5020 (mostly 5012, 5013) |
DCF phone Yealink T4xS, T5x
Outbound
| Classification | Protocol | Type | Port(source) | Port (target) | used with Version | Comment |
| Audio | RTP | UDP | 11780 - 12780 | Any IP:Any Port | configurable via WebInterface | |
| PhoneBook | LDAP | TCP | Any | 389 | < SwyxWare v12.30 | |
| PhoneBook | LDAPS | TLS | Any | 636 | >= SwyxWare v12.30 | |
| Provisioning | HTTP | TCP | Any | 9200 | ||
| VoIP | SIP | UDP/TCP | 5060/Any | 5060 | ||
| uaCSTA | SIP | UDP/TCP | 5060/Any | 65012 | ||
| RPS, Firmware download | HTTP | TCP | Any | any to 80 | WAN access | |
| RPS, Firmware download | HTTPS | TLS | Any | any to 443 | WAN access |
Inbound
| Classification | Protocol | Type | Port(source) | Port (target) | Comment |
| local SIP stack | SIP | UDP/TCP | 5060/Any | 5060 | |
| local web interface | HTTPS | TLS | Any | 443 | |
| Audio | RTP | UDP | Any IP:Any Port | 11780 - 12780 | configurable via WebInterface |
Swyx RemoteConnector for Yealink for SwyxON
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | used with Version | Comment |
| Yealink RPS | HTTPS | TCP | Any |
https://rps.yealink.com:443 Controlled by Yealink Firmware |
WAN access | |
| Yealink Firmware download | HTTPS | TCP | Any |
Any IP : 443 Controlled by Yealink RPS |
WAN access | |
| Swyx RPS | HTTPS | TCP | Any | https://phone.swyx.com:443 | >= SwyxWare v13.30 SwyxON | WAN access |
| Remote Endpoint | OpenVPN | UDP | Any |
Address is shown in the SCC: remote01.swyxon.com : Any Port |
>= SwyxWare v13.30 SwyxON | WAN access |
SwyxMobile (Android)
Internal mode (without RemoteConnector)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| REST API (Authentication) | HTTPS | TCP | Any | IpPbxSrv IP:9101 | ||
| REST API | HTTPS | TCP | Any | IpPbxSrv IP:9100 | ||
| IM | Websocket | TCP | Any | Any IP:443 | WAN access | |
|
CallControl |
SIP | TCP | Any | IpPbxSrv IP:5060 | ||
| CallControl | SIP | UDP | 5070 | IpPbxSrv IP:5060 | ||
|
Audio |
RTP | UDP | 50000- 50999 | Any IP:Any Port |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5070 | |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5070 | |
| Audio | RTP | UDP | Any IP:Any Port | 50000- 50999 |
External mode (with RemoteConnector)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| REST API (Authentication) | HTTPS | TCP | Any | Any IP:9101 | WAN access | |
| RemoteConnector | TLS | TCP | Any | Any IP:16203, 57203 or 443 | all three ports are tried at the same time and the first successful connect wins. | WAN access |
| IM | Websocket | TCP | Any | Any IP:443 | WAN access |
SwyxMobile iOS/Swyx Desktop macOS
Internal mode (without RemoteConnector)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| REST API (Authentication) | HTTPS | TCP | Any | IpPbxSrv IP:9101 | ||
| REST API | HTTPS | TCP | Any | IpPbxSrv IP:9100 | ||
| IM | Websocket | TCP | Any | Any IP:443 | WAN access | |
| CallControl | SIP | UDP + TCP | Any | IpPbxSrv IP:5060 | ||
| Audio | RTP | UDP | 50000- 50999 | Any IP:Any Port |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | Any | |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | Any | |
| Audio | RTP | UDP | Any IP:Any Port | 50000- 50999 |
External mode (with RemoteConnector)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| REST API (Authentication) | HTTPS | TCP | Any | Any IP:9101 | WAN access | |
| RemoteConnector | TLS | TCP | Any | Any IP:16203, 57203 or 443 | all three ports are tried at the same time and the first successful connect wins. | WAN access |
| IM | Websocket | TCP | Any | Any IP:443 | WAN access |
Swyx DECT 500
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 5060 | IpPbxSrv IP:5060 | WebInterface |
| Audio | RTP | UDP | 50004 - 50258 | Any IP:Any Port | WebInterface |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5060 | WebInterface |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5060 | WebInterface |
| Audio | RTP | UDP | Any IP:Any Port | 50004 - 50258 | WebInterface |
Swyx DECT 800 (DCF)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | |
| Audio | RTP | UDP | 16384 - 32767 | Any IP:Any Port | WebInterface | |
| PhoneBook | LDAP | TCP | Any | 389 | < SwyxWare v12.30 | |
| PhoneBook | LDAPS | TLS | Any | 636 | >= SwyxWare v12.30 | |
| Provisioning | HTTP | TCP | Any | 9200 | ||
| CallControl | SIP | UDP/TCP | 5060/Any | 5060 | ||
| Firmware download | HTTP | TCP | any to 80 | WAN access | ||
| Firmware download | HTTPS | TLS | any to 443 | WAN access |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 2048 - 65535 | WebInterface |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 2048 - 65535 | WebInterface |
| Audio | RTP | UDP | Any IP:Any Port | 16384 - 32767 | WebInterface |
| local web interface | HTTPS | TLS | Any | 443 |
Mutual (between base stations)
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | H323 | TCP | Any Port | 726-1727 | WebInterface |
| CallControl | H225 | UDP | Any Port | 1718-1719 | WebInterface |
| Audio | RTP | UDP | Any IP:Any Port | 16384 - 65535 | WebInterface |
| Unite | HTTP | TCP | Any | 8080 |
Swyx DECT 800 (traditional deployement)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | Any | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | Any | IpPbxSrv IP:5060 | WebInterface |
| Audio | RTP | UDP | 16384 - 32767 | Any IP:Any Port | WebInterface |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 2048 - 65535 | WebInterface |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 2048 - 65535 | WebInterface |
| Audio | RTP | UDP | Any IP:Any Port | 16384 - 32767 | WebInterface |
| local web interface | HTTPS | TLS | Any | 443 |
Swyx Connect (172x)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | 5060 ? | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 5060 | IpPbxSrv IP:5060 | |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | 32768 - 49151 | Any IP:Any Port | |
| Allgemein | TCP | 3072 - 19455 ? | ? | ||
| Maskierung | UDP + TCP | 53248 - 57343 ? | ? |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5060 | |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5060 | |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | Any IP:Any Port | 32768 - 49151 | |
| Allgemein | TCP | ? | 3072 - 19455 ? | ||
| Maskierung | UDP + TCP | ? | 53248 - 57343 ? |
Swyx Connect (6xxx/8xxx)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | 5061, 5081 ? | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 5060, 5080 | IpPbxSrv IP:5060 | |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | 6000 – (6000+(channels*10)) | Any IP:Any Port |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5061, 5081 ? | |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5060, 5080 | |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | Any IP:Any Port | 6000 – (6000+(channels*10)) |
MediaPack (MP-1xy)
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | 5061 ? | IpPbxSrv IP:5060 | |
| CallControl | SIP | UDP | 5060 | IpPbxSrv IP:5060 | LocalSIPPort |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | 6000 - (6000+10*(device channels)) | Any IP:Any Port | BaseUDPPort |
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| CallControl | SIP | TCP | IpPbxSrv IP:Any Port | 5061 ? | LocalSIPPort |
| CallControl | SIP | UDP | IpPbxSrv IP:5060 | 5060 | LocalSIPPort |
| Audio/Fax/Allgemein | RTP/T.38 | UDP | Any IP:Any Port | 6000 - (6000+10*(device channels)) | BaseUDPPort |
SwyxPlus VisualGroups
Inbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via |
| Information | HTTP | TCP | Any IP:Any Port | 80 |
Swyx Control Center
Inbound
| Classification | Protocol | Type | Port | Configurable via |
| Administration Web-Portal | HTTPS | TCP | 9443 | SCC Installer / IIS |
Outbound
| Classification | Protocol | Type | Port | Configurable via |
| Swyx Management Service | HTTPS | TCP | 9201 | config-file |
Swyx Management Service
Inbound
| Classification | Protocol | Type | Port | Configurable via |
| Swyx Management Service (REST Api Interface) | HTTPS | TCP | 9201 | config-file |
Outbound
| Classification | Protocol | Type | Port | Configurable via |
| CDS Client REST API (full) | HTTPS | TCP | 9100 | |
| CDS Client REST API (authentication service only) | HTTPS | TCP | 9101 |
SwyxWare HealthMonitor
Outbound
Die Ports, mit denen sich Health Monitor verbindet, werden in der appSettings.json von Health Monitor konfiguriert. Die folgende Liste gibt nur die Standardwerte wieder. Die tatsächlichen Ports hängen von der Konfiguration ab, die der Kunde einrichtet.
| Classification | Protocol | Type | Port (Source) | Port (Target) | Configurable via |
| Health Probing of SwyxWare Services | HTTP | TCP | Any | 9100 | appSettings.json |
| Health Probing of SwyxWare Services | SIP | TCP or UDP | Any | (see SwyxWare services above) | appSettings.json |
Inbound
| Classification | Protocol | Type | Port (Target) | Configurable via |
| Prometheus Metrics Exporter to provide health probing results | HTTP | TCP | 5000 | Während der Installation über den Skriptparameter install-service.ps1. Beachten Sie, dass die IP, die der Dienst überwacht, von der Konfiguration abhängt, z. B. vom Parameter des Skripts install-service.ps1. Wenn das Abhören mit einer URL wie http://*:5000 konfiguriert wird, lauscht der Dienst auf jeder IP. Wird in der URL eine bestimmte IP angegeben, überwacht der Dienst nur diese. |
Wenn der Kunde zusätzlich Prometheus oder Grafana installiert, lauschen diese Komponenten ebenfalls auf TCP-Ports. Einzelheiten finden Sie in der Dokumentation (https://grafana.com und https://prometheus.io).
MS Teams PresenceSync
Outbound
| Classification | Protocol | Type | Port (source) | Port (target) | Configurable via | Comment |
| HTTPS | TCP | Any | graph.microsoft.com:443 | WAN access | ||
| HTTPS | TCP | Any | login.microsoftonline.com:443 | WAN access | ||
| Client REST API | HTTPS | TCP | Any | IpPbxSrv IP:9100 |
Kommentare
5 Kommentare
Guten Tag,
in der unter dem Beitrag angefügten PDF Liste fehlen die Einträge für die CDS Ports.
Mit Freundlichen Grüßen
Hallo,
vielen Dank für die Anmerkung, wir werden umgehend die PDF Liste aktualisieren.
Hallo,
wir haben das PDF File aktualisiert.
Gruß
Dein Enreach Team
Hallo,
hab beim Upgrade von 13 auf 14 mit der neuen Mobile-App gesehen, dass der Port 5096 TCP auch in Richtung Server vom internen WLAN geöffnet werden muss. Der alte Client braucht den Port nicht.
Gruß Wilfried
Hallo Wilfried Baerens,
in dem Verhalten zur Anbindung von Mobile-Apps hat sich nichts geändert. Die Anbindung über Port 5096 an den Pusch Notification Service war schon immer notwendig.
Gruß
Dein Enreach Team
Bitte melden Sie sich an, um einen Kommentar zu hinterlassen.