...
For this best practice, the Router/Firewall is configured using the following rules:
| Caption |
|---|
| 0 | Table |
|---|
| 1 | Internal Firewall Rules |
|---|
|
| Source IP | Destination IP | Source Port | Destination Port |
|---|
Cloud Connector Mediation component | Internal clients | TCP 49 152 – 57 500* | TCP 50,000-50,019 (Optional) | Cloud Connector Mediation component | Internal clients | UDP 49 152 – 57 500* | UDP 50,000-50,019 | Internal clients | Cloud Connector Mediation component | TCP 50,000-50,019 | TCP 49 152 – 57 500* | Internal clients | Cloud Connector Mediation component | UDP 50,000-50,019 | UDP 49 152 -57 500* |
|
| Caption |
|---|
| 0 | Table |
|---|
| 1 | External Firewall Rules |
|---|
|
Source IP | Destination IP | Source Port | Destination Port |
|---|
Any | Cloud Connector Edge External Interface | Any | TCP 5061 | Cloud Connector Edge External Interface | Any | Any | TCP 5061 | Cloud Connector Edge External Interface | Any | Any | TCP 80 | Cloud Connector Edge External Interface | Any | Any | UDP 53 | Cloud Connector Edge External Interface | Any | Any | TCP 53 | Cloud Connector Edge External Interface | Any | TCP 50,000-59,999 | Any | Cloud Connector Edge External Interface | Any | UDP 3478 | Any | Cloud Connector Edge External Interface | Any | UDP 50,000-59,999 | Any | Any | Cloud Connector Edge External Interface | Any | TCP 443 | Any | Cloud Connector Edge External Interface | Any | TCP 50,000-59,999 | Any | Cloud Connector Edge External Interface | Any | UDP 3478 | Any | Cloud Connector Edge External Interface | Any | UDP 50,000 - 59,999 |
|
| Caption |
|---|
| 0 | Table |
|---|
| 1 | Host Firewall Rules - Internal or External Access |
|---|
|
| Source IP | Destination IP | Source Port | Destination Port |
|---|
| ASM | Any | Any | TCP 53 | | ASM | Any | Any | TCP 80 | | ASM | Any | Any | TCP 443 |
|
| Multiexcerpt |
|---|
| MultiExcerptName | DNSSettings |
|---|
|
DNS SettingsMake sure that CCE FQDN is resolving to the Public IP address. To do so, login to your DNS server and create the relevant entries. |
...
| Note |
|---|
| title | CCE Deployment - What to Expect |
|---|
|
- The CCE deployment may exceed two hours.
- The CCE deployment status is visible only on the Remote Desktop to the ASM. The WebUI indicates that the CCE is running while the deployment process is in progress.
- While the CCE deployment is running, you should not perform any actions on the ASM via the WebUI (i.e., Shut Down/Reset/Reboot/Reinitialize/Install etc.).
- If your Office 365 PSTN Site already exists in your tenant, ensure the other Appliance is removed, and the CCE Auto-Update time window is properly configured. You should be outside of a maintenance time window for the installation.
|
| Step | Action |
|---|
| 1 | Remote desktop to the ASM system. |
| 2 | Launch the Sonus Cloud Link Deployer from icon on the desktop.
|
| 3 | Check the first three actions:
- Transfer Password from SBC: This step imports the password that has been set during the Preparing the CCE.
- Register Appliance: This step registers this new appliance on your Office365 tenant.
- Install Appliance: This step deploys the CCE.
Select Apply. |
...