Device TCP/IP Ports and Network Security (Omega, Ultra, and MaxColor Series)
Overview
Use this reference to identify the TCP/IP service ports and network security characteristics of Omega Series, Ultra Series, and MaxColor Series devices. It covers network isolation, AV encryption, management access, and features that are not supported by standard firmware.
The shared service list applies to all three Series. MaxColor Series devices also provide a preview video service on port 8080. Available services depend on the device model and supported features.
Applies to: Omega Series and Ultra Series devices running B3.0.0 or later, and MaxColor Series devices running MAX v4.5.0 or later. This article does not cover 2G Series devices or devices running L Series firmware in 2G Legacy Mode.
MaxColor Series Preview Video
MaxColor Series Encoders and Decoders provide an MJPEG preview video service on port 8080. The stream does not include audio.
| Service | Destination Port | Purpose / Notes |
|---|---|---|
| MJPEG preview video | 8080 | Video stream and snapshot access on MaxColor Series Encoders and Decoders. No audio. |
For stream and snapshot addresses, settings, and troubleshooting, see Use Image Pull via MJPEG Network Video Stream.
Network Isolation and Internet Access
Just Add Power devices do not require Internet access. Keep AV devices on dedicated VLANs and control network access to those VLANs.
Standardized Configuration
AMP configures supported switches and Just Add Power devices. Connect Encoders and Decoders to the switch ports assigned for Just Add Power. Keep control processors and interfaces on a separate Control VLAN.
For the source-isolation and switching design, see How VLAN Switching Works in AMP Standardized Systems.
Alternate Configuration
Use a segregated AV VLAN with no Internet access. In Alternate Configuration, AMP configures the Just Add Power devices; the network administrator must configure the switch and network isolation.
For configuration responsibilities and network-design differences, see Choosing Between Standardized and Alternate Configurations.
Plan Access to the AV Network
- Keep non-AV equipment off ports assigned to the Just Add Power VLAN or VLANs.
- Identify the control processors, administrator PCs, and other systems that need access to devices.
- Account for routing and access-control rules between the Control VLAN and AV VLANs.
- Allow for the device features used by the installation. USB, IR, RS232, and AES67 availability depends on the model.
- Protect physical access to switches, devices, and their management connections.
VLAN separation alone does not establish which routed connections are permitted. Review the actual switch, router, and firewall configuration with the network administrator.
For access between the Data Network and Device Network, see Static Route Options for Accessing the Just Add Power Device Network.
Audio and Video Encryption
- Omega Series and Ultra Series: AES-128 hardware-based encryption for the AV signal.
- MaxColor Series: AES-256 hardware-based encryption for the AV signal.
These encryption specifications apply to the AV signal. They do not establish encryption or authentication for device management connections.
Device Management Access
Network management requires the device IP address and a network path to that address. For connection requirements and established-system access, see Access a Device.
webUI
The webUI uses HTTP on port 80 for browser-based device management. The HTTP API also uses port 80 for supported control and integration requests.
For browser access instructions, see Open the webUI of a Device.
Command Line Interface Through Telnet
Telnet provides command-line access on TCP port 23. For connection instructions, see Telnet to a Device.
Telnet access can be disabled for an individual device. Review Disable Telnet before changing this setting.
Control-system compatibility: Disabling Telnet prevents control connections that use TCP port 23, including direct JPSW commands through that port. Confirm the control method first. Disabling Telnet does not disable the webUI, webUI CLI, or HTTP API.
Command Line Interface Through RS232
The local RS232 debug connection provides command-line access using a Just Add Power Debug cable at 115200-8n1. It does not use a TCP/IP port and is separate from Serial over IP endpoint control on port 6752.
For the connector location and cable wiring, see Just Add Power RS232 Debug Cable Pinout.
IP Address and Service Settings
Devices use AutoIP addresses in 169.254.x.x/16 by default. AMP assigns static IP addresses as part of system configuration.
Existing systems: Verify the device's assigned address, subnet mask, and gateway before changing them. Incorrect settings can interrupt control and device communication. Record the current settings and coordinate changes with the system administrator.
Static IP Addressing
Use the IP address, subnet mask, and gateway assigned for the system. For the Standardized Configuration address scheme, see IPv4 Address Table for AMP Standardized Systems. For manual network parameters and commands, see Startup Settings and check the applicable Series.
DNS and Time Server
DNS and Time Server are disabled by default. Keep both disabled for the isolated network configuration described in this article. A DNS port entry in the service table does not mean that DNS is enabled or required.
Features Not Available
The following features and protocols are not supported by standard firmware on Omega Series, Ultra Series, and MaxColor Series devices:
- 802.1X authentication.
- User accounts, groups, or username/password login.
- Active Directory integration.
- Online Certificate Status Protocol (OCSP).
- Secure Shell (SSH).
- HTTPS.
- SSH File Transfer Protocol (SFTP).
- Simple Network Management Protocol (SNMP).
- Transport Layer Security (TLS).
- Secure Sockets Layer (SSL).
- Precision Time Protocol (PTP).
- PHP.
Control access through the surrounding network and physical installation. AV signal encryption does not replace those access controls.
View UDP Sockets on Omega Series and Ultra Series Devices
To inspect UDP sockets on an Omega Series or Ultra Series device, connect through Telnet and execute:
netstat -aun
The output displays UDP sockets with numeric addresses and port numbers. The number after the colon in an address is the port. Depending on the socket, a relevant port may appear in the Local Address or Foreign Address column. This command does not display TCP sockets.
The following examples show Decoder and Encoder output. Actual output varies with the device and active services.
Decoder Example
Encoder Example
