...
In this best practice the router/firewall is configured with the following rules:
| Caption |
|---|
| 0 | Table |
|---|
| 1 | Internal Firewall Rules for CCE |
|---|
|
Source IP | Destination IP | Source Port | Destination Port |
|---|
Cloud Connector Mediation component – 192.168.210.123 & 192.168.210.117 | Internal clients | TCP 49 152 – 57 500* | TCP 50,000-50,019 (Optional) | Cloud Connector Mediation component – 192.168.210.123 & 192.168.210.117 | Internal clients | UDP 49 152 – 57 500* | UDP 50,000-50,019 | Internal clients | Cloud Connector Mediation component – 192.168.210.123 & 192.168.210.117 | TCP 50,000-50,019 | TCP 49 152 – 57 500* | Internal clients | Cloud Connector Mediation component – 192.168.210.123 & 192.168.210.117 | UDP 50,000-50,019 | UDP 49 152 -57 500* |
|
| Caption |
|---|
| 0 | Table |
|---|
| 1 | External Firewall Rules for CCE |
|---|
|
Source IP | Destination IP | Source Port | Destination Port |
|---|
Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | Any | TCP 5061 | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | Any | TCP 80 | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | Any | UDP 53 | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | Any | TCP 53 | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | TCP 50,000-59,999 | Any | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | UDP 3478 | Any | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | UDP 50,000-59,999 | Any | Any | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | TCP 5061 | Any | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | TCP 443 | Any | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | TCP 50,000-59,999 | Any | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | UDP 3478 | Any | Cloud Connector Edge External Interface – 192.168.211.81 & 192.168.211.86 | Any | UDP 50,000 - 59,999 |
|
| Caption |
|---|
| 0 | Table |
|---|
| 1 | Host Firewall Rules - Internal or External Access |
|---|
|
| Source IP | Destination IP | Source Port | Destination Port |
|---|
| ASM | Any | Any | TCP 53 | | ASM | Any | Any | TCP 80 | | ASM | Any | Any | TCP 443 |
|
| Multiexcerpt include |
|---|
| MultiExcerptName | DNSSettings |
|---|
| PageWithExcerpt | Configuring the SBC Edge for a Single CCE |
|---|
|
...
| Anchor |
|---|
| Manually Configuring the CCE on the ASM |
|---|
| Manually Configuring the CCE on the ASM |
|---|
|
Installing the CCE Appliance using Sonus Cloud Link Deployer
...
| Note |
|---|
| title | CCE Deployment - Using a Proxy on the ASM Host |
|---|
|
If you plan to use a proxy on the ASM Host to reach Office 365, you must add the Management network (192.168.213.0) into the exclusion list and specify proxy settings per machine rather than per user. |
| Note |
|---|
| title | CCE Deployment - What to Expect |
|---|
|
- The CCE deployment may exceed two hours.
- The CCE deployment status is visible only on the Remote Desktop to the ASM. The WebUI indicates that the CCE is running while the deployment process is in progress.
- While the CCE deployment is running, you should not perform any actions on the ASM via the WebUI (i.e., Shut Down/Reset/Reboot/Reinitialize/Install etc.).
- If your Office 365 PSTN Site already exists in your tenant, ensure the other Appliance is removed, and the CCE Auto-Update time window is properly configured. You should be outside of a maintenance time window for the installation.
|
Using Sonus Cloud Link Deployer via Remote Desktop on the ASM Module:
...