IP Security
- Kelli Higdon
To protect against denial of service attacks, the IMG 2020 Control Interface IP address can be placed behind a firewall for security. If remote access to the server is needed, a NAT (Network Address Translation), VPN (Virtual Private Network), or other secure solution can be used to access the server from the public internet. Below is a list of ports and protocols used by the IMG 2020.
The Ports in red would need to be opened in the fire-wall based on the recommendation above for remote access.Connections between the IMG 2020 and Services
Connections between the IMG 2020 and Services
Port # | Description | Purpose |
TCP: 20 & 21 | FTP | Download the system software binary from BDN EMS server to IMG 2020. |
Upload of software faults from IMG 2020 to BDN EMS server. | ||
TCP: 22 | SSH/sFTP | Remote access to IMG 2020 server. |
TCP: 161 | SNMP Network | Receives SNMP request messages |
TCP: 162 | SNMP Network | Receives SNMP Traps |
UDP: 111 | PortMap | Portmap is used to request a mount port. Usually for NFS or NIS. The port request is sent from the IMG 2020 to the NFS server. Refer to the PortMap request section below. |
UDP: 123 | NTP Network | Time Protocol |
UDP: 1812 | Radius Authentication | Call authentication |
UDP: 1813 | Radius Accounting | Record Call Detail Records |
UDP: 2049 | NFS | Call Tracing |
Download Call Treatments | ||
Download routing and translation tables |
Connections to the BDN EMS server
Port # | Description | Purpose | Connection From |
TCP: 22 | SSH/sFTP | Remote access to IMG 2020 server. | Local support personnel Sangoma technical support |
TCP: 5901 | VNC | Remote access to BDN EMS server | Local support personnel |
TCP: 80 | HTTP | CACTI monitoring | Local support personnel |
TCP: 1312 | BDN EMS | BDN EMS application port | GateManager on Active & Standby BDN EMS server CommManager on Standby BDN EMS server |
TCP: 2623 | ClientView | Data Transfer Port between ClientView and DataManager | ClientView |
TCP: 2428 - 2433 | ClientView | FTP Transfer to DataManager | ClientView |
TCP: 2624 | ClientView | Signaling Port between ClientView and DataManager | ClientView |
TCP: 1098/1099 | ClientView | ClientView Authentication (Only required when ClientView is running on a different machine from BDN EMS) | PC running ClientView to BDN EMS server |
Connection between IMG 2020's if running SS7 or SS7 with remote IMG 2020's
Port # | Description | Purpose | Connection from |
UDP: 34867 | SS7 Management | Internal SS7 communication between IMG 2020's | IMG 2020 |
Portmap Request
 |
Portmap uses Port 111 and is used to request a mount port. The request is sent from IMG 2020. |
Mount uses the port returned in the Portmap response. |
NFS uses port 2049 |
Â