Interface gateway ports, Firewall configuration, Enabling client login from outside your firewall – Clear-Com Concert for Newsroom User Manual
Page 33: 2 firewall configuration, 3 interface gateway ports, 1 enabling client login from outside your firewall
33
Server Installation Guide
5.1.3 Interface Gateway ports
The Interface Gateway application listens to the following ports by default:
Port
Description
TCP port 8009 and
8010
Ports used by the EMS to manage the Interface Gateway. If the
Interface Gateway has not been installed locally to EMS, the ports
must be accessible to the network between EMS and the
Interface Gateway application (see below).
Table 8: Interface Gateway default ports
Modifying the base management port TCP 8009
To modify TCP port 8009:
1. On the server running the EMS, go to /usr/local/clearcom/concert/bin/ems.conf and update the
value associated with the icapi_port attribute.
2. On the server running the Interface Gateway, go to /usr/local/clearcom/concert/bin/ifgateway.conf.
In the ifgateway.conf file, update the value associated with the icapiListenPort attribute.
3. On the same server, go to /usr/local/clearcom/concert/ifgateway/1/ifgateway.conf and update the
value associated with the icapiListenPort attribute.
Note:
The value should equate to the base management port + 1 (that is, if the base management port is
8009, this attribute should equal 8010).
4. Restart the EMS and Interface Gateway applications:
# sudo service ems restart
# sudo service ifgateway restart
5.2 Firewall Configuration
During an install of CentOS using the Concert DVD, the built-in Linux firewall is configured specifically for
Concert. It is activated upon completion of the installation.
Special circumstances may dictate a modification of this configuration (e.g. modifying TCP/UDP ports utilized
by Concert). If modifications to the local CentOS firewall are necessary, please refer to the CentOS
documentation for more information regarding the firewall configuration tool (system-config-firewall).
5.2.1 Enabling Client login from outside your firewall
To enable Client login from outside your firewall, you must configure your firewall to redirect the TCP and UDP
public address port 6001 to the EMS internal address TCP and UDP port 6001.