Service records and ports, VCS Express

Here are the service records needed to use the Tandberg VCS:

_h323ls._udp.company.com      srv     1 0 1719 vcs-e.company.com.
_h323cs._tcp.company.com      srv     1 0 1720 vcs-e.company.com.
_sip._udp.company.com              srv     0 0 5060 vcs-e.company.com.
_sip._tcp.company.com               srv     0 0 5060 vcs-e.company.com.
_sip._tls.company.com                 srv     0 0 5061 vcs-e.company.com.
_sips._tls.company.com               srv     0 0 5061 vcs-e.company.com.
_sips._tcp.company.com             srv     0 0 5061 vcs-e.company.com.

There should also be an a-record pointing to the vcs express. (in this example, vcs-e.company.com)

Also, should anyone ever need it, here are the ports that an endpoint needs opened outbound if it is registering directly to a VCS express:

TCP/2776 (Q931/H245 for external traversal endpoints)
UDP/2776 (RTP Media from external traversal endpoints)
UDP/2777 (RTCP Media control traffic from external traversal endpoints)
UDP/1719 (H323 RAS signaling from gatekeepers/VCSes and traversal endpoints)
TCP/1720 (Q931/H.225 call connect signaling)

UDP/5060 (SIP signaling)
TCP/5060 (SIP signaling)
TLS/5061 (Encrypted SIP signaling)

8 thoughts on “Service records and ports, VCS Express

  1. Can SRV Records be used for subdomains?

    i.e.,

    _sip._tcp.subdomain.company.com srv 0 0 5060 vcs-e.subdomain.company.com.

    TIA!

    1. Hi!

      Yes they can.

      The domain in the SRV record needs to correspond to the domain used in the SIP/H323 URI though, so if your endpoint has address something@subdomain.company.com your example can be used.

      I use this a lot when integrating with other systems, eg. MS Lync. The Lync SIP domain is normally company.com, while the Cisco/Tandberg domain would be video.company.com to ease the routing between the to systems.

  2. Is it best practise to use different SIP domains when integrating Tandberg VCS with Lync?

    We have a small installation with a VCS Control and a VCS Expressway and the VCS Control is also acting as Lync Gateway.

    Can you recommend any good resources about Tandberg and Lync integration – apart from the official deployment guide?

    Thanks!

  3. It’s not only best practice, it’s more or less required. There are always problems in the installations i’ve seen when the same sipdomain is used.

    I’ve never used anything other guides than the official ones, so unfortunately I can’t recommend anything else other than the internet :/

  4. Hei Tom,

    to put it in different words, the single domain setup requires an additional (internal) domain
    for internal devices and mapping via findme/ocs relay. But it works fine 🙂

    What is the reason that you list:
    _sip._tls.company.com srv 0 0 5061 vcs-e.company.com.
    _sips._tls.company.com srv 0 0 5061 vcs-e.company.com.

    Also
    _h323cs._tcp.company.com srv 1 0 1720 vcs-e.company.com.
    _sip._udp.company.com srv 0 0 5060 vcs-e.company.com.
    are not really “needed” and can be seen as optional.

    If you have a vcs-e its even worth thinking about disabling 5060udp completly
    as this is way fewer used for video conferening then for voip scans 🙂

    In addition I would recomed a weight and priority of 10, the A/AAAA record
    “should” not only be there it MUST (not even CNAME), as it is required for SRV (see RFC2782)

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s