Basic Network Security; Disable Ethernet Ports; Http/Https - Lightware MMX2 Series User Manual

   
4. Device Concept
4.6. Basic Network Security
These basic network security improvements help to prevent unauthorized access to the MMX2 series
switchers:
▪

Disable Ethernet Ports

▪ Disable Network Services
Basic Authentication
▪
▪ Encryption (HTTPS, WSS)
The following table summarizes the ports, protocols, features and the security options.
Purpose/ Affected
Protocol Port number
function software
HTTP port
(LW3 over LDC,
TCP
WS, REST LDU2
API)
HTTPS port
(LW3 over LDC,
TCP
WSS, REST LDU2
API)
LW3
LDC TCP
protocol
Serial over
IP - TCP 8001, 8002
(RS-232)
mDNS /
Bonjour LDC, 224.0.0.251:
UDP
(Device LDU2 5353
Discovery)
LDC, 230.76.87.82:
Remote IP UDP
LDU2 37421

INFO: The ports are necessary to be passed via a network switch/firewall for proper operation between
the device and the softwares.

ATTENTION! Be careful when combining the security functions; improper settings may cause malfunction.
4.6.1. Disable Ethernet Ports
Internal Ethernet connections can be limited by enabling/disabling the Ethernet ports depending on the
actual system configuration.
Port
disable Encryption Authentication
option
80 -
 
443
  
6107 - -

- -

- - -
- - -
Applied firmware package: v1.3.3b3 | LDC software: v2.5.14b5
MMX2 series – User's Manual
4.6.2. HTTP/HTTPS
MMX2 series switcher provides HTTP/HTTPS server services on its 80 (for HTTP) and 443 (for HTTPS)
ports. The following services can be used via HTTP/HTTPS:
▪ LW3 over WebSocket (WS, WSS) for LW3 protocol or using LDC for device control
▪ REST API for device control
▪ Serial message sending with REST API
▪ Firmware update
▪ WelcomeScreen image upload
▪ UserScripts upload
Logfiles download from the device
▪
Other
features
Basic Authentication
To limit user access for HTTP/HTTPS server services, basic authentication can be turned on for 80 and 443
FW update,
ports separately.
Welcome
Screen image
ATTENTION!

upload,
Advanced Control Pack v3 of the TPS family extenders.
Log files,
The picture below illustrates the successful authentication process:
User Scripts
Serial
messaging
Authentication feature in MMX2 series is not equal to the Cleartext login feature in the
22