CDE 1922 – Network Ports and Protocols Overview
Overview
This article provides an overview of the network ports and protocols used by the CDE 1922 device. It is intended to support proper network security configuration.
Important:
Most of the ports listed below are listening ports (i.e., the device is waiting for incoming connections). Ensure firewall rules are configured accordingly.
TCP/IPv4 Ports
| Port | Protocol | Description | Recommendation |
|---|---|---|---|
| 22 | SSH | Secure Shell access | Can be blocked in both development and production if not required |
| 80 | HTTP | Read-only web interface | Can be blocked if not needed |
| 443 | HTTPS | Secure web interface | Should remain open for management access |
| 8001 | NMOS | NMOS control interface (on selected interfaces) | Required when using NMOS |
UDP/IPv4 Ports
| Port | Protocol | Description | Notes |
|---|---|---|---|
| 53 | DNS | NMOS RDS discovery | Used for service discovery |
| 68 | DHCP | Dynamic IP address assignment | Required for DHCP environments |
| 319 / 320 | PTP | SMPTE ST 2059 time synchronization | Critical for timing |
| 2308 | LynxRackBus | Communication with Lynx Central | Required for management system integration |
| 5353 | DNS-SD | NMOS RDS discovery | Multicast-based discovery |
IGMP (IPv4)
- Used for multicast group management
- Required for:
- Setting up multicast subscriptions
- Efficient delivery of media streams
Multicast Traffic (UDP/IPv4)
- Used on media interfaces for SMPTE ST 2110 (S2110) data
- Key characteristics:
- IP and multicast addresses are dynamically configured via NMOS
- Requires proper multicast routing and IGMP configuration on the network
Security Considerations
- Block unused ports (e.g., TCP 22, 80) where possible
- Restrict access to management interfaces (HTTPS, NMOS)
- Ensure multicast traffic is limited to required network segments
- Verify PTP traffic (UDP 319/320) is prioritized and not filtered
- Enable monitoring for unexpected inbound connections
Support
If additional clarification or validation is needed, further review of the device configuration and network environment is recommended.