Comrex ACCESS MultiRack Product Manual page 115

AppendIX d - InFormAtIon For It mAnAgers
The purpose of this appendix is to describe all open ports and services available on the Comrex MultiRack.
The Comrex MultiRack is a device designed to move real-time, wideband audio over IP networks. The main network
interface is 1000BaseT-Ethernet. The device contains an optimized version of Linux kernel. The IP parameters are
set by a computer on the local LAN using a proprietary broadcast UDP protocol.
Comrex provides Device Manager, a Windows- or MAC-compatible application, on the included CD or available on
our website at www.comrex.com, to perform this function on the local computer. Once the unit is powered on your
MultiRack, you have five minutes before this function is disabled.
IP parameters can also be changed online using the Network Manager in the Web GUI Main Menu. Updates to the
system are provided by a custom online updater utility. This update process is password-protected and requires
access to TCP 80 and TCP 8081. In addition to the password protection, the update data itself must have a valid
cryptographic signature from Comrex, or else it is rejected.
IncomIng serVIces
Port
TCP 22
TCP 80-85
TCP 443
TCP 8081
UDP 9000, 9002-9005
UDP 9001
UDP 5060, 5062-5065
UDP 5004-5005, 5024-
5025, 5034-5035,
5044-5045, 5054-5055
UDP 6014-6015, 6024-
6025, 6034-6035,
6044-6045, 6054-6055
TCP 9000, 9002-9005
TCP 8000, 8002-8005
*Only SSH clients with an authorized DSA key can access SSH services on the device. Other forms of authentication
are disabled. This key is kept confidentially by Comrex for factory diagnostics only. SSH services may be disabled
completely via the user interface.
Service
SSH*
HTTP control
TLS protected HTTP control
Firmware upload
BRIC Normal Media
CrossLock Media
SIP
Standard RTP
SIP RTP
BRIC Normal/TCP
HTTP Media
Default
Off (On for products shipped before 1 July 2017)
On
On
Open only during upgrade process
On
On
Off
Off (On for products shipped before 1 July 2017)
Off
Off
Off
115