Appendix B: Port Forwarding - Crestron 3 Series Reference Manual

Appendix B: Port Forwarding

Port forwarding can be used to provide connections from outside the local
network for mobile and browser applications.
Observe the following points about port forwarding:
•
•
Home Router Setup Page Example
Use external port numbers that are not commonly used. The actual number is not
•
important; it simply must match the entry in the mobile app configuration.
Note the exception on the policy file support. If the XPanel web browser is used,
•
open port 843 under External Port.
Open ports that are required only. For example, if mobile applications or XPanel
•
applications are used, open only the secure CIP port (default is 41796) and HTTPS
port (default is 443). Ensure that SSL settings are used in the mobile application.
If XPanel browser support is required, the unsecured CIP port (default is 41794)
•
must be used. The system is still secured because the user is prompted to enter
his or her credentials prior to running the project. The XPanel browser required
port 843 to be routed to the system.
If ports 41794 or 41797 were opened for external use, reroute the external ports to
•
port 22 and use the SSH console.
Reference Guide – DOC. 7150B
Remap the external ports from the initial defaults. Remapping the
external ports minimizes the number attempts that are allowed to access
the system. A hacker will be unable to scan well-known ports for entry,
and must instead scan all ports and then determine what protocols are
supported before attempting to log in to the system.
Most home routers allow different external and internal ports to be set.
An example of a home router setup page is provided below.
3-Series Control Systems • 63