Protocols and ports tables - Metasys - LIT-12011279 - General System Information - Metasys System - 10.1

Used to remotely access a network engine from a laptop. This function is only available for use by authorized personnel on Johnson Controls laptops.

Telnet is no longer available for network engines at Release 10.0 or later.

Provides remote access to device using the internet or local area network.

Used for alarms and events.

Translates domain names into numerical IP addresses. This port allows the server to receive responses to DNS queries.

Assigns and keeps track of dynamic IP addresses and other network configuration parameters.

Alternate Method: Use static IP addresses.

Downloads new images to NAEs.

Network Engine

Provides communication between peer controllers, computers, and other Internet systems using SOAP over HTTP. The ADS/ADX/ODS requires that only Port 80 be open to receive communication from client devices. Port 80 is the primary port used by the World Wide Web.

Computer (Web Browser)

Network Engine

SCT

Used for file transfers between the client computer and the network engine.

Used by the Metasys system for Active Directory service authentication at the Metasys system login screen, and Service Account authentication prior to LDAP queries.

Kerberos is a standard network authentication protocol designed to provide strong authentication for client/server applications by using secret-key cryptography. Kerberos is the primary security protocol for authentication within an Active Directory service Domain. Kerberos authentication relies on client functionality built into the Windows operating systems supported by Metasys software.

ADX Split Web/Application Server (Member of Domain X)

Metasys System Client (Member of any Domain)

Receives and holds email for downloading from your Internet server. POP3 is allowed in the Metasys system only for authentication from a SMTP server.

ADX Split Web/Application Server (Member of Domain X)

Metasys System Client (Member of any Domain)

Network Engine

ADX Split Web/Application Server (Member of Domain X)

Metasys System Client (Member of any Domain)

Provides network monitoring and maintenance.

Typically notifies IT department personnel of alarms that are of interest to them, such as data center environmental conditions. The site must use a network management system capable of receiving SNMP Traps.

Alternate Method: If the system allows, use email destinations for remote alarm notification instead of SNMP.

Metasys UI

Network Engine

SCT

Used by the Metasys system to access user objects and attributes within Active Directory service.

LDAP is a standard communication protocol for directories located on TCP/IP networks. LDAP defines how a directory client can access a directory server and how the client can perform directory operations and share directory data.

ADX Split Web/Application Server (Member of Domain X)

Metasys System Client (Member of any Domain)

SCT (Member of Domain X)

Metasys Advanced Reporting ADX

Required if you use TLS with the Metasys UI and the Metasys UI Offline for site security.

Port 443 is used for secure web browser communication. Data transferred across such connections is highly resistant to eavesdropping and interception. Moreover, the identity of the remotely connected server can be verified with significant confidence. Web servers offering to accept and establish secure connections listen on this port for connections from web browsers desiring strong communication security.

SCT (Member of Domain X)

Metasys UI

and

Metasys UI Offline

Used during Metasys system SSO authentication.

NTLMv2 is a network authentication protocol developed by Microsoft and the secondary security protocol for authentication within an Active Directory service domain. If a domain client or domain server cannot use Kerberos authentication, then NTLM authentication is used.

ADX Split Web/Application Server (Member of Domain X)

Metasys System Client (Member of any Domain)

Network Engine

SCT

Receives and holds email for downloading from your Internet server. POP3 is allowed in the Metasys system only for authentication from a SMTP server. The mail server uses port 995 for SSL connections for POP3 access.

ADX Split Web/Application Server (Member of Domain X)

Metasys System Client (Member of any Domain)

Used between the web/application server and database server computers when the ADX is split across two devices.

Metasys ADX Split Database Server (Member of Domain X)

Provides a secured server and network engines to authenticate non-local user access through a Remote Authentication Dial-In User Service (RADIUS) server. RADIUS is used by the server and network engines to authenticate the identity of authorized non-local users of the system.

ADS/ADX/OAS/ODS

SCT

Used to log in to the operating system of a device from a remote computer.

The Remote Desktop Protocol (RDP) Service is usually disabled unless enabled by the NxE Information and Configuration Tool (NCT) operation.

Used for N2 tunneling over Ethernet on trunk 1. The N2 technology option provides a serial data port, allowing variable speed drives (VSDs) to link and form a network.

Used for N2 tunneling over Ethernet on trunk 2. The N2 technology option provides a serial data port, allowing variable speed drives (VSDs) to link and form a network on the SA Bus.

Used by NCT to get diagnostic information from devices on the same network.

SCT

NCT and NAE Update Tool

Used by SCT to broadcast a message to the local network segment when a user selects the device discovery menu item. Any Metasys node that receives this broadcast message will respond on UDP port 9911 with device configuration information to be displayed in the device discovery window.

Used during NAE Update Tool operations such as updating an image to a network engine. Not used with SNC and SNE engines.

NIE5x

Used by Metasys software for debugging and logging.