Please insure that your Vocera role has the enclosed basic ports and the standard “control” ACL group.
udp 5002 Control traffic
udp 5100-5199 Audio ports
udp 5200 Badge recieve Audio
udp 5300-5399 Telephony Server PSTN Calls
udp 5400 Updator Port
udp 5555 VConfig Singling
udp 5556 VConfig Signling
Sample Vocera ACL:
**********************
ip access-list session voceral-acl
any any udp 5002 permit queue high tos 46
any any udp 5100 5199 permit queue high tos 46
any any udp 5200 permit queue high tos 46
any any udp 5300 5399 permit queue high tos 46
any any udp 5400 permit queue high tos 46
any any udp 5555 permit queue high tos 46
any any udp 5556 permit queue high tos 46
Troubleshooting Vocera ACL session:
“show datapath session table [IP address of the endpoints] will help you isolate half-duplex conversation and or audio issues. Enclosed is a sample conference call between three Vocera badges with an ACL issue.
**********************************
show datapath session table 10.39.19.235
Datapath Session Table Entries
------------------------------
Flags: F - fast age, S - src NAT, N - dest NAT
D - deny, R - redirect, Y - no syn
H - high prio, P - set prio, T - set ToS
C - client, M - mirror, V - VOIP
Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Flags
-------------- -------------- ---- ----- ----- ---- ---- --- --- ----------- ---- -----
10.39.19.235 10.39.23.212 17 5200 5200 0 6 0 0 tunnel 1740 1 FHV
0 6 0 1 tunnel 1740 FYHV
10.39.17.250 10.39.19.235 17 5200 5200 0 0 0 0 tunnel 1740 0 FDC
0 0 0 0 tunnel 1740 FDYC
10.39.23.212 10.39.19.235 17 5200 5200 0 6 0 0 tunnel 1740 1 FHCV
0 6 0 1 tunnel 1740 FYHCV
10.39.19.235 10.39.17.250 17 5200 5200 0 0 0 0 tunnel 1740 0 FDC
0 0 0 0 tunnel 1740 FDYC
10.37.251.201 10.39.19.235 17 5106 5200 0 6 0 1 tunnel 1740 2 FHV
0 6 0 1 tunnel 1740 FYHV
10.37.251.201 10.39.19.235 17 5002 5002 0 6 0 1 tunnel 1740 2 FH
0 6 0 1 tunnel 1740 FH
10.39.19.235 10.37.251.201 17 5200 5106 0 6 0 1 tunnel 1740 1 FHCV
0 6 0 1 tunnel 1740 FYHCV
10.39.19.235 10.37.251.201 17 5002 5002 0 6 0 0 tunnel 1740 2 FHC
0 6 0 1 tunnel 1740 FHC
show datapath session table 10.39.23.212
Datapath Session Table Entries
------------------------------
Flags: F - fast age, S - src NAT, N - dest NAT
D - deny, R - redirect, Y - no syn
H - high prio, P - set prio, T - set ToS
C - client, M - mirror, V - VOIP
Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Flags
-------------- -------------- ---- ----- ----- ---- ---- --- --- ----------- ---- -----
10.39.17.250 10.39.23.212 17 5200 5200 0 6 0 0 tunnel 1740 1 FHCV
0 6 0 2 tunnel 1740 FYHCV
10.39.19.235 10.39.23.212 17 5200 5200 0 6 0 0 tunnel 1740 1 FHV
0 6 0 2 tunnel 1740 FYHV
10.39.23.212 10.39.17.250 17 5200 5200 0 6 0 0 tunnel 1740 1 FHV
0 6 0 2 tunnel 1740 FYHV
10.39.23.212 10.39.19.235 17 5200 5200 0 6 0 0 tunnel 1740 1 FHCV
0 6 0 2 tunnel 1740 FYHCV
10.37.251.201 10.39.23.212 17 5002 5002 0 6 0 0 tunnel 1740 2 FH
0 6 0 2 tunnel 1740 FH
10.39.23.212 10.37.251.201 17 5002 5002 0 6 0 1 tunnel 1740 3 FHC
0 6 0 2 tunnel 1740 FHC
show datapath session table 10.39.17.250
Datapath Session Table Entries
------------------------------
Flags: F - fast age, S - src NAT, N - dest NAT
D - deny, R - redirect, Y - no syn
H - high prio, P - set prio, T - set ToS
C - client, M - mirror, V - VOIP
Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Flags
-------------- -------------- ---- ----- ----- ---- ---- --- --- ----------- ---- -----
10.39.17.250 10.39.23.212 17 5200 5200 0 6 0 0 tunnel 1740 2 FHCV
0 6 0 2 tunnel 1740 FYHCV
10.39.17.250 10.39.19.235 17 5200 5200 0 0 0 0 tunnel 1740 0 FDC
0 0 0 0 tunnel 1740 FDYC
10.39.23.212 10.39.17.250 17 5200 5200 0 6 0 0 tunnel 1740 2 FHV
0 6 0 2 tunnel 1740 FYHV
10.39.19.235 10.39.17.250 17 5200 5200 0 0 0 0 tunnel 1740 0 FDC
0 0 0 0 tunnel 1740 FDYC
10.37.251.201 10.39.17.250 17 5002 5002 0 6 0 1 tunnel 1740 2 FH
0 6 0 2 tunnel 1740 FH
10.39.17.250 10.37.251.201 17 5002 5002 0 6 0 1 tunnel 1740 3 FHC
0 6 0 2 tunnel 1740 FHC
The entire screen capture is related. Please note the sessions that are marked with “D”.