Tesira network ports and protocols
Biamp's Tesira products use a variety of network protocols to carry out their functions, and those protocols operate on a wide range of network port numbers. Network administrators often need to know the list of ports that a device might use to communicate over the network.
This article details all of the ports and protocols used by Tesira devices, as well as the ports and protocols used by PC's running Tesira software or Biamp Canvas software.
Tesira devices are not meant to be connected directly to the internet. The expectation is that enterprise network security best-practices are followed to provide upstream firewalls and routers between Tesira network ports and external public-facing networks.
See Tesira security best practices for a guide on securely deploying a Tesira system. For an overview of security terminology and practices, see Network Security.
System architecture
Definition of "system"
Biamp defines a Tesira “system” as one or more Tesira devices running a single configuration file. It is this concept of a system that allows the devices to share DSP resources and control data. Devices that are in the same system communicate with one another using various proprietary and non-proprietary protocols. A distributed system can be considered analogous to a single DSP hardware device, it is the sum of all of the connected components and will not function properly if components are missing.
IP addressing
Each device in a Tesira system must have an IP address.
Protocol
Tesira support Internet Protocol version 4 (IPv4). Internet Protocol version 6 (IPv6) is not supported.
Classes
Tesira supports all IPv4 address classes, including variable-length subnet masks.
Types
Tesira devices can be configured to use a static or DHCP IP address. The default setting is DHCP.
If DHCP is selected but no DHCP server is present on the network, a Tesira device will ‘autoconfigure’ with a Link-local IP address (169.254.xxx.xxx) to facilitate Zero-configuration networking.
Tesira Device Discovery
Tesira devices use a multicast protocol similar to mDNS-SD for device discovery and host resolution. The multicast IP range in use is (224.0.0.251-254). If Tesira devices on the same subnet report they cannot discover each other, the IGMP Snooping and/or IGMP Querier configuration of the control network may need to be investigated. A simple test may be disabling IGMP Snooping temporarily to see if Tesira device discovery resolves.
Some switches may require the registration of these multicast group addresses before they permit the traffic across the VLAN/network:
| Multicast Address | Usage |
|---|---|
| 224.0.0.251 | mDNS hostname resolution |
| 224.0.0.252 | Server-Class peer discovery |
| 224.0.0.253 | Sever-to-Remote device discovery |
| 224.0.0.254 | Remote-to-Server device discovery |
Multicast DNS
Tesira devices are configured by default to use Multicast DNS (mDNS) to resolve host names on the control network. Multicast DNS may be disabled via the Device Maintenance and Network Settings in Tesira Software.
802.1X
All Tesira Server-class devices support 802.1X on their control, AVB, and VoIP ports.
Tesira Forte X and Devio SCX support 802.1X
Full TCP/UDP port list
The table below lists all ports and protocols that might be used by a Tesira system.
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 22 | TCP | SSH | 3rd party secure control of Tesira server-class devices (SSH is disabled via Network Settings.) |
| 23 | TCP | Telnet | 3rd party control of Tesira server-class devices (Telnet is disabled via Network Settings.) |
| 443 | TCP | HTTPS | Activation of Tesira & Biamp Canvas software |
| 5060, 5062 | UDP or TCP | SIP | VoIP signaling (default value - user configurable) |
| 5061, 5063 | TCP | TLS | Secure SIP (default value - user configurable) |
| 5353 | UDP | mDNS | Device discovery (mDNS is enabled by default and is configured via Network Settings.) |
| 4000-65535 | UDP | RTP / SRTP | VoIP call data / secure call data (user configurable) |
| 12003 | UDP | Proprietary | Device discovery |
| 61451 | TCP / UDP | Proprietary | Device discovery & communication |
| 61452-61453 | TCP | Proprietary | Optional for control communication tunneling. |
| 1-65535 | TCP / UDP | Proprietary | Optional: user-defined ports for Network Command String communications. |
| N/A | N/A | MRP-MVRP | AVB Multiple VLAN reservation protocol |
| N/A | N/A | IEEE1722 | AVB Transportation Protocol |
| N/A | N/A | IEEE1722-1 | AVB AVDECC Discovery Protocol / Enumeration and Control Protocol |
| N/A | N/A | MAAP | AVB Sub-protocol |
PC software port list
The table below lists the ports and protocols used by Biamp software applications that communicate with Tesira devices.
There are multiple software applications in the Tesira product range:
- Tesira - configuration and control of a Tesira system
- Biamp Canvas - customized, end-user control interfaces for a Tesira system
- Biamp SageVue - configuration and monitoring of Tesira systems
These applications use the same ports:
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 443 | TCP | HTTPS | Activation of Tesira & Biamp Canvas software |
| 5353 | UDP | mDNS | Device discovery |
| 61451 | TCP / UDP | Proprietary | Device discovery & communication |
SERVER-IO and SERVER
The tables below list the ports and protocols used by the configurable Tesira SERVER-IO and SERVER devices.
The Tesira SERVER-IO will always have at least one NIC: the standard control interface card, SNC-1. In addition, it may contain one or more option cards with NICs.
The Tesira SERVER will always have at least two NICs: the standard control interface card, SNC-2, and an AVB audio card, AVB-1. In addition, it may contain one option card with a NIC.
Control NIC
Card name: SNC-1 (SERVER-IO) / SNC-2 (SERVER)
Gigabit Ethernet (1000Mbps)
Number of ports per card: 2, Control Primary and Control Secondary
Number of cards per SERVER/SERVER-IO: 1 (non-optional)
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 22 | TCP | SSH | 3rd party secure control of Tesira server-class devices (SSH is disabled via Network Settings.) |
| 23 | TCP | Telnet | 3rd party control of Tesira server-class devices (Telnet is disabled via Network Settings.) |
| 5353 | UDP | mDNS | Device discovery (mDNS is enabled by default and is configured via Network Settings.) |
| 12003 | TCP / UDP | Proprietary | Device discovery |
| 61451 | TCP / UDP | Proprietary | Device discovery & communication |
| 61452-61453 | TCP | Proprietary | Optional for control communication tunneling. |
| 1-65535 | TCP / UDP | Proprietary | Optional: user-defined ports for Network Command String communications. |
AVB NIC
Card name: AVB-1
Gigabit Ethernet (1000Mbps)
Number of ports per card: 2, AVB Primary and AVB Secondary
Number of cards per SERVER: 1-2
Number of cards per SERVER-IO: 0-1
Depending on network configurations in Tesira setup, the AVB ports may also utilize the Control NIC protocols as detailed elsewhere.
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| N/A | N/A | AVB | Ethernet (link layer) media transport |
| N/A | N/A | MRP-MVRP | AVB Multiple VLAN reservation protocol |
| N/A | N/A | IEEE1722 | AVB Transportation Protocol |
| N/A | N/A | IEEE1722-1 | AVDECC Discovery Protocol / Enumeration and Control Protocol |
| N/A | N/A | MAAP | AVB Sub-protocol |
CobraNet NIC
Card name: SCM-1
Fast Ethernet (100Mbps)
Number of ports per card: 2, CobraNet Primary and CobraNet Secondary
Number of cards per SERVER: 0-1
Number of cards per SERVER-IO: 0-2
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| N/A | N/A | CobraNet | Proprietary Ethernet (link layer) audio transport |
VoIP NIC
Card name: SVC-2
Fast Ethernet (100Mbps)
Number of ports per card: 1
Number of cards per SERVER: 0-1
Number or cards per SERVER-IO: 0-6
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 5060, 5062 | UDP or TCP | SIP | VoIP signaling (default value - user configurable), Line 1, Line 2 |
| 5061, 5063 | TCP | TLS | Secure SIP (default value - user configurable), Line 1, Line 2 |
| 4000-65535 | UDP | RTP / SRTP |
VoIP call data / secure call data (Default Settings) |
| 23 | TCP | TELNET | Telnet access is used for debugging by Biamp personnel only. No access to user is granted. Port 23 is disabled by default. Telnet port must be enabled in Tesira software. |
| 80 | TCP | HTTP | Web management interface. Port 80 is disabled by default. HTTP service must be enabled in Tesira software. |
| 443 | TCP | HTTPS | Web management interface. Port 443 is disabled by default. HTTPS service must be enabled in Tesira software. |
Dante NIC
Card name: DAN-1
Gigabit Ethernet (1000Mbps)
Number of ports per card: 2, Dante Primary and Dante Secondary
Number of cards per SERVER: 0-2
Number of cards per SERVER-IO: 0-2
Audinate Dante port allocation can be found here https://www.audinate.com/faq/which-network-ports-does-dante-use
Additional Audinate Dante network data can be found at https://www.audinate.com/sites/default/files/PDF/adding-dante-to-your-network-audinate.pdf
TesiraFORTÉ
The tables below list the ports and protocols used by TesiraFORTÉ, the non-configurable Tesira Server-class devices.
- Every TesiraFORTÉ device has at least one NIC: Control.
- The AVB-capable models also have an AVB NIC.
- The Dante-capable models also have a Dante NIC.
- The VoIP-capable TesiraFORTÉ VI and VT models have an additional NIC for VoIP connections.
Control NIC
All TesiraFORTÉ models
Gigabit Ethernet (1000Mbps)
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 22 | TCP | SSH | 3rd party secure control of Tesira server-class devices (SSH is disabled via Network Settings.) |
| 23 | TCP | Telnet | 3rd party control of Tesira server-class devices (Telnet is disabled via Network Settings.) |
| 5353 | UDP | mDNS | Device discovery (mDNS is enabled by default and is configured via Network Settings.) |
| 12003 | TCP / UDP | Proprietary | Device discovery |
| 61451 | TCP / UDP | Proprietary | Device discovery & communication |
| 61452-61453 | TCP | Proprietary | Optional for control communication tunneling. |
| 1-65535 | TCP / UDP | Proprietary | Optional: user-defined ports for Network Command String communications. |
AVB NIC
AVB-capable TesiraFORTÉ models only
Gigabit Ethernet (1000Mbps), AVB Primary only
Depending on network configurations in Tesira setup, the TesiraFORTÉ AVB ports may also utilize the Control NIC protocols as detailed elsewhere.
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| N/A | N/A | AVB | Ethernet (link layer) media transport |
| N/A | N/A | MRP-MVRP | AVB VLAN reservation |
| N/A | N/A | IEEE1722 | AVB Transportation Protocol |
| N/A | N/A | IEEE1722-1 | AVDECC Discovery Protocol / Enumeration and Control Protocol |
| N/A | N/A | MAAP | AVB Sub-protocol |
Dante NIC
Dante-capable TesiraFORTÉ models only
Gigabit Ethernet (1000Mbps), Dante Primary only
Audinate Dante port allocation can be found here https://www.audinate.com/faq/which-network-ports-does-dante-use
Additional Audinate Dante network data can be found at https://www.audinate.com/sites/default/files/PDF/adding-dante-to-your-network-audinate.pdf
VoIP NIC
All TesiraFORTÉ VI and TesiraFORTÉ VT models.
Fast Ethernet (100Mbps only)
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 5060, 5062 | UDP or TCP | SIP | VoIP signaling (default value - user configurable) |
| 5061, 5063 | TCP | TLS | Secure SIP (default value - user configurable) |
| 4000-65535 | UDP | RTP / SRTP |
VoIP call data / secure call data (Default Values) |
| 23 | TCP | TELNET | Telnet access is used for debugging by Biamp personnel only. No access to user is granted. Port 23 is disabled by default. Telnet port must be enabled in Tesira software. |
| 80 | TCP | HTTP | Web management interface. Port 80 is disabled by default. HTTP port must be enabled in Tesira software. |
| 443 | TCP | HTTPS | Web management interface. Port 443 is disabled by default. HTTPS port must be enabled in Tesira software. |
TesiraLUX
Device names: IDH-1 and OH-1
Number of ports per device: 3, Control, AVB 1G, AVB 10G
Control: Gigabit Ethernet (1000Mbps)
AVB 1G: Gigabit Ethernet (1000Mbps)
AVB 10G: SFP+ for GBIC (10Gbps)
TesiraLUX utilizes the same control and AVB protocols noted for the Server and TesiraFORTÉ products. Please reference the tables above for details.
Tesira Amplifiers
Device names: TesiraAMP 4175R, 4350R, 4300R CV, 8175R, and Lab.Gruppen D-Series Tesira amplifiers
Number of ports per device: 3, Control, AVB Primary, AVB Secondary
Control: Gigabit Ethernet (1000Mbps)
AVB Primary: Gigabit Ethernet (1000Mbps)
AVB Secondary: Gigabit Ethernet (1000Mbps)
Tesira Amplifiers utilize the same control and AVB protocols noted for the Server and TesiraFORTÉ products. Please reference the tables above for details.
The Lab.Gruppen amplifiers also require Lab.Gruppen CAFE software, further product details are available on their website at https://www.labgruppen.com/Categories/Labgruppen/D-SERIES/D-Series-Tesira
Remote Devices
Tesira remote devices come in three types: audio expanders, logic expanders, and control devices.
Audio Expanders
Tesira audio expanders employ a single NIC for AVB audio and all configuration/control functions.
Device names: EX-MOD, EX-IN, EX-OUT, EX-IO, EX-AEC
Gigabit Ethernet (1000Mbps)
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 12003 | UDP | Proprietary | Device discovery |
| 61451 | TCP / UDP | Proprietary | Device discovery & communication |
| N/A | N/A | AVB | Ethernet (link layer) media transport |
Device names: EX-UBT, TCM-1, TCM-1A, AMP-450P
Gigabit Ethernet (1000Mbps)
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 12003 | UDP | Proprietary | Device discovery |
| 61451 | TCP / UDP | Proprietary | Device discovery & communication |
| N/A | N/A | AVB | Ethernet (link layer) media transport |
Device Names: NPX H1040, G1040, H1100, G1100
Gigabit Ethernet (1000Mbps)
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 67, 68 | UDP | DHCP | Dynamic Host Configuration Protocol |
| 443 | TCP | HTTPS | Device Configuration, Audia FIle Management |
| 5353 | UDP | mDNS | Device discovery (mDSN is enabled by default and is configured via Network Settings) |
| N/A | N/A | AVB | Ethernet (link layer) media transport |
| N/A | N/A | MRP-MVRP | AVB Multiple VLAN reservation protocol |
| N/A | N/A | IEEE1722 | AVB Transportation Protocol |
| N/A | N/A | IEEE1722-1 | AVB AVDECC Discovery Protocol/Enumeration and Control Protocol |
| N/A | N/A | MAAP | AVB Sub-protocol |
All NPX devices support AVB and Dante. Audinate Dante port allocation can be found here https://www.audinate.com/faq/which-network-ports-does-dante-use
Logic Expanders
Tesira logic expanders employ a single NIC for all configuration/control functions.
Device names: EX-LOGIC
Fast Ethernet (100Mbps)
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 12003 | UDP | Proprietary | Device discovery |
| 61451 | TCP / UDP | Proprietary | Device discovery & communication |
Control devices
Tesira control devices employ a single NIC for all configuration/control functions.
Device names: TEC-1, HD-1, TEC-X
Fast Ethernet (100 or 1000Mbps)
| Port | TCP / UDP | Protocol | Notes |
|---|---|---|---|
| 12003 | UDP | Proprietary | Device discovery |
| 61451 | TCP / UDP | Proprietary | Device discovery & communication |
Infrastructure Devices
Device Name; TesiraCONNECT TC-5
Network appliance with 5 1G ports, with 4 of them PoE+ enabled.
All ports support AVB + Control
Network Protocols: IGMP, RSTP
TC-5 utilizes the same control and AVB protocols noted for the Server and TesiraFORTÉ products. Please reference the tables above for details.
Device Name; TesiraCONNECT TC-5D
Network appliance with 5 1G ports, with 4 of them PoE+ enabled.
All ports support AVB, Dante and Control. For details on port roles, please refer to TC-5D article.
Network Procols: IGMP, RSTP
TC-5 utilizes the same control and AVB protocols noted for the Server and TesiraFORTÉ products. Please reference the tables above for details.
Audinate Dante port allocation can be found here https://www.audinate.com/faq/which-network-ports-does-dante-use
Additional Audinate Dante network data can be found at https://www.audinate.com/sites/default/files/PDF/adding-dante-to-your-network-audinate.pdf