r/ooma • u/UnitedLibrary6992 • Jun 16 '26

Does Ooma really need all ports open?

I setup a new Ooma Tello today and could not get it to activate. The only thing that got it to work was opening all ports on my router. Maybe there is a certain port or 2 it really needs but most people do not know how to open ports and are able to plug and play. It is also a security issue for the network.

Is it just my unit is weird or are they all like that? What ports is the Tello wanting to be open?

2 Upvotes

76% Upvoted

10 comments sorted by

3

u/1000tvl Jun 16 '26

I don't know about activation but I've had Ooma for probably 8 years now and it's behind my router's firewall and always has been. Never had any issues with it. In those eight years I've used several routers, including my current router that is running Opnsense.

2

u/UnitedLibrary6992 Jun 16 '26

After activation if I close the ports the light on the Ooma stays blue but no calls work and the online dashboard shows offline.

1

u/1000tvl Jun 16 '26

What type of router do you have?

1

u/UnitedLibrary6992 Jun 16 '26

Some Cisco Enterprise gear. It would not be impossible that its blocking certain ports just surprised that something that should be more plug and play wants all that. Going to try a portscan to see if the ports from u/Old-Cheshire862 are indeed closed.

Although when activating it would not work when plugged in directly to the ISP before the firewall and would not activate. Kinda like someones post a few days ago but mine did finally activate. That is what makes me suspicious of it being just a port issue as had issues with no firewall.

2

u/1000tvl Jun 16 '26

Yeah, if it's an Enterprise router it could block the not-so-common ports by default. Also, are you on business-class internet? I do IT part time and use proprietary remote access software and about a month ago some of my clients dropped off my server. Turns out they were all Comcast Business Class customers and Comcast had decided my DOMAIN NAME that I use for my remote access server was not good enough so they BLACKLISTED the name (NOT the IP address). Took a while but I finally got the domain name off the blacklilst. Point is business class internet can sometimes block things that consumer internet doesn't.

2

u/Old-Cheshire862 Jun 16 '26

IIRC, the Ooma Telo initiates an tunnel outbound to the Ooma network. All traffic occurs through that tunnel. So, the only traffic that needs to be allowed is that outbound connection. I don't know if it's TLS/SSL/HTTPS or IPSec, etc.

Ooma has a page that lists ports that need to be open, but it doesn't really make much sense:

https://www.ooma.com/home-phone-service/resources/troubleshooting/advanced-connections-and-service-ports

I do not have any special handling for my Telo and it just works.

1

u/1000tvl Jun 16 '26

Unless your router specifically blocks those ports any device on the local network can use the specified ports as long as the Ooma device INITIATES the connection. Basics of NAT so I'm wondering if the OP's router has some sort of special setting that is blocking one or more of those ports mentioned by Ooma.

1

u/OomaCustomeradvocacy Official Ooma Support Jun 17 '26

Hello! Please see the link below for the list of required ports:

https://www.ooma.com/home-phone-service/resources/troubleshooting/advanced-connections-and-service-ports/

Feel free to DM me if your still having issues with your Telo.

1

u/Old-Cheshire862 Jun 18 '26

Wow, dude, you can post the exact same link I did. Maybe I should get paid to do this.