best practices: ip guidelines for the it professional

24
IP Guidelines for the IT Professional Best Practices Crestron Electronics, Inc.

Upload: others

Post on 04-Oct-2021

2 views

Category:

Documents


0 download

TRANSCRIPT

I P G uide lin e s f o r th e I T Pro f e s s io n al

Be s t Practice sCre s tro n Ele ctro n ics , I n c.

O rig in al I n s tructio n sTh e U . S. En g lis h ve rs io n o f th is do cume n t is th e o rig in al in s tructio n s .A ll o th e r lan g uag e s are a tran s latio n o f th e o rig in al in s tructio n s .

Cre s tro n pro duct de ve lo pme n t s o f tware is lice n s e d to Cre s tro n de ale rs an d Cre s tro n Se rvice Pro vide rs ( CSPs ) un de r alimite d n o n e x clus ive , n o n tran s f e rable So f tware De ve lo pme n t To o ls L ice n s e A g re e me n t. Cre s tro n pro duct o pe ratin gs ys te m s o f tware is lice n s e d to Cre s tro n de ale rs , CSPs , an d e n d-us e rs un de r a s e parate En d-U s e r L ice n s e A g re e me n t.Bo th o f th e s e A g re e me n ts can be f o un d o n th e Cre s tro n we bs ite at www. cre s tro n . co m/le g al/s o f tware _lice n s e _ag re e me n t.

Th e pro duct warran ty can be f o un d at www. cre s tro n . co m/warran ty.

Th e s pe cif ic pate n ts th at co ve r Cre s tro n pro ducts are lis te d at www. cre s tro n . co m/le g al/pate n ts.

Ce rtain Cre s tro n pro ducts co n tain o pe n s o urce s o f tware . Fo r s pe cif ic in f o rmatio n , vis it www. cre s tro n . co m/o pe n s o urce.

Cre s tro n , th e Cre s tro n lo g o , 3 -Se rie s , 4-Se rie s , Capture L ive H D, Cre s tro n Co n n e cte d, Cre s tro n Mo bile Pro , Cre s tro nTo o lbo x , Dig italMe dia, DM, Fus io n R V, an d Smart G raph ics are e ith e r trade marks o r re g is te re d trade marks o f Cre s tro nEle ctro n ics , I n c. in th e U n ite d State s an d/o r o th e r co un trie s . Flas h is e ith e r a trade mark o r re g is te re d trade mark o fA do be Sys te ms I n co rpo rate d in th e U n ite d State s an d/o r o th e r co un trie s . iPad is e ith e r a trade mark o r re g is te re dtrade mark o f A pple , I n c. in th e U n ite d State s an d/o r o th e r co un trie s . Blu-ray is e ith e r a trade mark o r re g is te re dtrade mark o f th e Blu-ray Dis c A s s o ciatio n ( BDA ) in th e U n ite d State s an d/o r o th e r co un trie s . H DMI is e ith e r a trade marko r re g is te re d trade mark o f H DMI L ice n s in g L L C in th e U n ite d State s an d/o r o th e r co un trie s . A ctive X is e ith e r atrade mark o r re g is te re d trade mark o f Micro s o f t Co rpo ratio n in th e U n ite d State s an d/o r o th e r co un trie s . Java is e ith e r atrade mark o r re g is te re d trade mark o f O racle Co rpo ratio n . in th e U n ite d State s an d/o r o th e r co un trie s . O th e rtrade marks , re g is te re d trade marks , an d trade n ame s may be us e d in th is do cume n t to re f e r to e ith e r th e e n titie sclaimin g th e marks an d n ame s o r th e ir pro ducts . Cre s tro n dis claims an y pro prie tary in te re s t in th e marks an d n ame s o fo th e rs . Cre s tro n is n o t re s po n s ible f o r e rro rs in typo g raph y o r ph o to g raph y.

© 2 0 2 1 Cre s tro n Ele ctro n ics , I n c.

Co nt ent s

I n tro ductio n 1W h at I s a Co n tro l Sys te m? 1W h y I s a Co n tro l Sys te m o n My N e two rk? 1

Plan a N e two rk 2I s o late th e N e two rk 2VL A N Co n f ig uratio n 2L is te n Po rts 3Co n n e ct Po rts 4I P A ddre s s in g 4I Pv6 4H o s tn ame s 4

Cre s tro n Co n tro l Subn e t 5Co n f ig uratio n 5L is te n Po rts 6I P A ddre s s in g 7

A uto matic Mo de ( De f ault) 7Man ual Mo de 7

H o s tn ame s 8

Se curity 9Se curity Se tup 9Fire wall Se tup an d Co mmun icatio n A cro s s Multiple VL A N s 9

Dig italMe dia N e two rk Co n s ide ratio n s 10

Dig italMe dia I P Co n f ig uratio n 12Private N e two rk Mo de 12

Private N e two rk Mo de Co n f ig uratio n O ptio n s 13Multiple Dig italMe dia Switch e rs U s in g Private N e two rk Mo de 15

R apid Span n in g Tre e Pro to co l 16

Po we r o ve r Eth e rn e t Budg e tin g 18Po we r Budg e tin g o n Po E Switch e s 18I EEE Stan dards 19

Be s t Practice s — Do c. 457 9 M Co n te n ts • i

ii • Co n te n ts Be s t Practice s — Do c. 457 9 M

Be s t Practice s — Do c. 457 9 M I P G uide lin e s f o r th e I T Pro f e s s io n al • 1

I nt ro du c t i o nTh is do cume n t o utlin e s th e re quire me n ts , be s t practice s , an d pre f e rre d me th o ds o fimple me n tin g Cre s tro n ® de vice s o n e n te rpris e - le ve l n e two rks . I t f o cus e s o n th e co n ce rn s o f th e I Tpro f e s s io n al.

N O TE: Co n tact Cre s tro n True Blue s uppo rt via ph o n e , e mail, o r ch at as de s cribe d atwww. cre s tro n . co m/Suppo rt f o r an y co n ce rn s abo ut de plo yin g Cre s tro n de vice s o n a n e two rk.

What I s a Co nt ro l S yst em?A co n tro l s ys te m is an applian ce -g rade , n e two rk-bas e d co mpo n e n t de s ig n e d to co n tro l dif f e re n tde vice s an d lin k th e m to g e th e r o ve r an I P n e two rk. A co n tro l s ys te m is s ue s co mman ds an dg ath e rs data f ro m o th e r de vice s bas e d o n us e r-drive n an d auto mate d e ve n ts . Typically drivin gA V s ys te ms , a co n tro l s ys te m turn s o n th e dis play an d s e ts th e co rre ct in put via a to uch s cre e n ,re mo te co n tro l, o r ke ypad. Co n tro l s ys te ms can als o in te rf ace with lig h tin g an d H VA C s ys te mss o th at, f o r e x ample , wh e n a PC is s e le cte d f ro m a butto n pan e l o r to uch s cre e n , th e lig h ts dim toan appro priate le ve l f o r vie win g co mpute r imag e s . Cre s tro n co n tro l s ys te ms can be cus to mpro g ramme d o r co n f ig ure d. A s in g le butto n pre s s o r co lle ctio n o f data can trig g e r a n umbe r o fe ve n ts .

Why I s a Co nt ro l S yst em o n M yNet wo rk ?Traditio n ally, co n tro l s ys te ms in te rf ace d with de vice s via I R , R S-2 3 2 , clo s e d co n tacts , an dvariable vo ltag e . Th e pro g re s s io n in re ce n t ye ars h as mo ve d to I P-bas e d co mmun icatio n . Man yde vice s h ave imple me n te d I P pro to co ls f o r co n tro l, mo n ito rin g , an d man ag e me n t be caus e I P ismo re co mmo n an d co s t e f f e ctive to in te g rate .

Cre s tro n o f f e rs advan ce d I P de vice s th at can be co n tro lle d, main tain e d, an d mo n ito re d f ro man ywh e re with an I n te rn e t co n n e ctio n . Th is g re atly e n h an ce s th e ability to update an dtro uble s h o o t s ys te ms with o ut th e n e e d to be ph ys ically o n s ite .

2 • I P G uide lin e s f o r th e I T Pro f e s s io n al Be s t Practice s — Do c. 457 9 M

P l an a Net wo rkBe f o re de plo yin g a Cre s tro n s ys te m o n a n e two rk, it is impo rtan t to co n s ide r th e g uide lin e spre s e n te d in th is s e ctio n . W h ile th e re are man y ways to co n f ig ure an e n te rpris e n e two rk, th e s epractice s h ave be e n f o un d to be th e mo s t e f f icie n t an d s ucce s s f ul f o r Cre s tro n de vice s .

I so l at e t he Net wo rkCre s tro n de vice s s h o uld e x is t o n a n e two rk s e parate f ro m o th e r de vice traf f ic. O th e r n e two rkactivity can impact th e re s po n s e time o f Cre s tro n de vice s an d dis rupt th e us e r e x pe rie n ce .

Cre s tro n us e rs e x pe ct in s tan t co n tro l an d f e e dback. To e n s ure co n s tan t co n n e ctio n an d accuratef e e dback, pro prie tary Cre s tro n co n tro l co mmun icatio n us e s a h e artbe at packe t. L o s s o f ro un d-trip h e artbe at packe ts in dicate s un re liable co n n e ctio n s . Cre s tro n co n tro l s ys te ms h ave s trictre s po n s e time an d co n n e ctivity re quire me n ts to e n s ure us e r co n f ide n ce an d, as s uch , are ve rylate n cy s e n s itive . Th e re f o re , Cre s tro n re co mme n ds s e ttin g up all Cre s tro n de vice s o n a de dicate d( Cre s tro n - o n ly) VL A N s o th at un n e ce s s ary traf f ic do e s n o t in te rf e re with th e time -s e n s itivepacke ts be twe e n Cre s tro n de vice s .

De plo yin g Cre s tro n de vice s o n a de dicate d VL A N pro vide s n e two rk acce s s co n tro l in additio n toth e us e rn ame an d pas s wo rd auth e n ticatio n th at is available o n Cre s tro n co n tro l s ys te ms .

V LAN Co nf i gu rat i o nW h e n e ve r po s s ible , all Cre s tro n de vice s s h o uld be s e parate o n th e ir o wn VL A N . Th is allo ws f o rs mo o th e r o pe ratio n o f th e co n tro l n e two rk an d h e lps man ag e in f ras tructure , re s ultin g in abe tte r us e r e x pe rie n ce .

Th e f o llo win g s te ps s h o uld be take n to e n s ure th at Cre s tro n de vice s can be man ag e d e f f e ctive ly:

l I f Cre s tro n de vice s re s ide o n multiple VL A N s , s tatic ro ute s s h o uld be s e t up be twe e nVL A N s o n a ro ute r.

l Dyn amic H o s t Co n f ig uratio n Pro to co l ( DH CP) re que s ts s h o uld be f o rwarde d to th eappro priate VL A N with a DH CP s e rve r.

l Fo r pro pe r o pe ratio n , Cre s tro n po rts s h o uld n o t be blo cke d. Fo r de taile d in f o rmatio nre g ardin g th e re quire d po rt n umbe rs f o r a 4- Se rie s co n tro l s ys te m, re f e r to th e 4- Se rie sCo n tro l Sys te ms R e f e re n ce  G uide .

l So me de vice s allo w s tre amin g me dia co n te n t f ro m th e I n te rn e t. Th e s e de vice s s h o uld beallo we d to co n n e ct to th e I n te rn e t if s tre amin g is de s ire d.

l A 16 -po rt s witch s uch as th e CEN -SW PO E-16 s uppo rts VL A N s , wh ich is us e f ul wh e nde s ig n in g a Cre s tro n n e two rk.

Be s t Practice s — Do c. 457 9 M I P G uide lin e s f o r th e I T Pro f e s s io n al • 3

Li st en P o rt sA Cre s tro n co n tro l s ys te m lis te n s to th e f o llo win g s e t o f po rts . N o t all po rts are turn e d o n byde f ault. Fo r de taile d in f o rmatio n re g ardin g th e re quire d po rt n umbe rs f o r a 4- Se rie s co n tro ls ys te m, re f e r to th e 4- Se rie s Co n tro l Sys te ms R e f e re n ce  G uide .

Po rt Pro to co l Se rvice N o te s

2 2 TCP SSH /SFTP

8 0 TCP W e b acce s s Fo r us e r pro g ram in te rf ace an d s e tup pag e sR e quire d f o r X Pan e l with Smart G raph ics ® us in g awe b in te rf ace

16 1 U DP SN MP

443 TCP W e b acce s s A ctive with SSL e n able d

417 9 4 TCP/U DP Cre s tro n o ve r I P Pro prie tary Cre s tro n co n tro l co mmun icatio n s

417 9 6 TCP Cre s tro n o ve r I P A ctive with SSL e n able d

49 2 0 0 TCP Se cureW e bSo cke t s e rve r

Fo r Cre s tro n H TML 5 U s e r I n te rf ace

Cre s tro n o ve r I P Co mmun icatio n s

Multiple lis te n e rs can be adde d to th e Cre s tro n co n tro l s ys te m via th e us e r pro g ram. Cre s tro nre co mme n ds pe rf o rmin g a s e curity s can o n th e co n tro l s ys te m with o ut a pro g ram an d th e npe rf o rmin g th e s can ag ain with a pro g ram. Th is will h e lp ide n tif y wh e th e r an y s e curity bre ach e sare cre ate d by lo adin g th e pro g ram.

4 • I P G uide lin e s f o r th e I T Pro f e s s io n al Be s t Practice s — Do c. 457 9 M

Co nnec t P o rt sU s in g e x te rn al de vice s an d s e rvice s , a Cre s tro n co n tro l s ys te m can co n n e ct to th e f o llo win g s e tso f po rts . N o t all po rts are turn e d o n by de f ault. Fo r de taile d in f o rmatio n re g ardin g th e re quire dpo rt n umbe rs f o r a 4- Se rie s co n tro l s ys te m, re f e r to th e 4- Se rie s Co n tro l Sys te msR e f e re n ce  G uide .

Po rt Pro to co l Se rvice N o te s

42 TCP/U DP W I N S acce s s

53 U DP DN S acce s s

6 7 /6 8 U DP DH CP co n f ig uratio n

8 0 TCP H TTP

16 1/16 2 U DP SN MP

443 TCP H TTPS

417 9 4 TCP/U DP Cre s tro n o ve r I P Pro prie tary Cre s tro n co n tro l co mmun icatio n s

417 9 6 TCP Cre s tro n o ve r I P A ctive with SSL e n able d

I P Addressi ngI n mo s t in s tallatio n s , Cre s tro n re co mme n ds co n f ig urin g de vice s with s tatic I P addre s s e s .Es pe cially in larg e co rpo rate o r un ive rs ity e n viro n me n ts , us in g s tatic o r re s e rve d DH CP aids inman ag in g de vice s an d avo ids po te n tial DN S is s ue s . H o we ve r, DH CP s h o uld be us e d wh e n de vice sare co n n e cte d to a Cre s tro n co n tro l s ubn e t. Se e Cre s tro n Co n tro l Subn e t ( o n pag e  5) f o r mo rein f o rmatio n .

I P v 6A ll Cre s tro n Eth e rn e t de vice s can e x is t o n an I Pv6 n e two rk.

Ho st namesCre s tro n re co mme n ds co n f ig urin g DN S an d DH CP s e rve rs to allo w h o s tn ame s to re s o lve viao ptio n 8 1 o r o ptio n 12 .

Be s t Practice s — Do c. 457 9 M I P G uide lin e s f o r th e I T Pro f e s s io n al • 5

Crest ro n Co nt ro l S u b netTh e Cre s tro n Co n tro l Subn e t is a G ig abit Eth e rn e t n e two rk de dicate d to Cre s tro n de vice s f o rf as t s ys te m updatin g an d tro uble s h o o tin g . Th is f e ature is available o n s e le ct 4-Se rie s co n tro ls ys te ms ( A V4, CP4N , an d PR O 4) . Th e Co n tro l Subn e t po rts pro vide s e amle s s co n n e ctivity to th en e two rk, re quirin g jus t o n e I P addre s s f o r th e e n tire Cre s tro n s ys te m. Th is e n able s be tte rpe rf o rman ce wh ile main tain in g th e in te g rity o f th e I T n e two rk.

Cre s tro n in s talle rs can acce s s de vice s with in th e Co n tro l Subn e t via th e h o s tn ame us in gCre s tro n To o lbo x ™ s o f tware . Th is make s it e as ie r to uplo ad to uch s cre e n pro je cts , to uplo adf irmware , an d to acce s s o th e r f un ctio n s .

Co nf i gu rat i o nA ll Cre s tro n Eth e rn e t de vice s s h o uld be co n n e cte d to th e Co n tro l Subn e t e x ce pt f o r th e de vice sth at pro vide s tre ams to th e L A N , s uch as s e curity came ras , Capture L ive H D® s ys te m de vice s , an dn e two rk vide o s tre ame rs . Th e s e de vice s s h o uld be co n n e cte d to th e L A N an d n o t to th e Co n tro lSubn e t.

Th e re is n o e n f o rce d limit to th e n umbe r o f de vice s th at are s uppo rte d o n th e Co n tro l Subn e t.W h ile th e s ubn e t mas k pro vide s an uppe r limit, Eth e rn e t be s t practice s s h o uld be f o llo we d tode te rmin e th e appro priate n umbe r o f de vice s f o r th e n e two rk.

Cre s tro n de vice s s h o uld be s e t to DH CP mo de , wh ich allo ws th e Co n tro l Subn e t DH CP s e rve r toas s ig n addre s s e s . U n like o n a public n e two rk, Cre s tro n re quire s all de vice s o n th e Co n tro l Subn e tto be in DH CP mo de . R e s e rve d DH CP le as e s can be s e t up o n th e co n tro l s ubn e t. Th e co n tro ls ubn e t can n o t run in s tatic mo de . W h e n o n th e co n tro l s ubn e t, a Dig italMe dia™ s ys te m s h o uld bein Private n e two rk Mo de ( PN M) .

N O TES:

l So me DM® s tre amin g cards s uppo rt two n e two rk co n n e ctio n s . Th e s e s tre amin g cardscan re s ide in a DM ch as s is o n th e Co n tro l Subn e t, but th e ir e x te rn al n e two rk co n n e ctio n ss h o uld be to th e co rpo rate L A N .

l W h e n an o th e r DH CP s e rve r is de te cte d, th e co n tro l s ubn e t po rt is s h ut do wn . Th e re f o re ,do n o t co n n e ct th e Co n tro l Subn e t po rt to th e co rpo rate L A N .

l Cre s tro n do e s n o t re co mme n d co n n e ctin g th ird- party de vice s to th e Co n tro l Subn e t.O n ly Cre s tro n an d Cre s tro n Co n n e cte d® de vice s s h o uld be co n n e cte d to th e Co n tro lSubn e t.

l Two Co n tro l Subn e t po rts may n o t be co n n e cte d to g e th e r o n th e s ame n e two rk.

6 • I P G uide lin e s f o r th e I T Pro f e s s io n al Be s t Practice s — Do c. 457 9 M

Co n tro l Subn e t Ex ample

Li st en P o rt sL is te n po rts are us e d f o r co n f ig uratio n ch an g e s f o r Cre s tro n de vice s o n th e Co n tro l Subn e t.L is te n po rts o pe n an d clo s e dyn amically. O n th e Co n tro l Subn e t, th e n umbe r o f lis te n po s ts o nth e L A N  ch an g e s . Th e re are 40 0 o pe n lis te n po rts . Cre s tro n utiliz e s lis te n po rts ran g in g f ro m6 40 0 0 to 6 43 9 9 .

Be s t Practice s — Do c. 457 9 M I P G uide lin e s f o r th e I T Pro f e s s io n al • 7

I P Addressi ngTh e f o llo win g I P addre s s in g g uide lin e s s h o uld be f o llo we d f o r Cre s tro n de vice s .

Auto matic Mo de (D efault)I n o rde r to e limin ate ro utin g co n f licts be twe e n th e Co n tro l Subn e t an d th e L A N , th e Co n tro lSubn e t I P addre s s is auto matically s e t bas e d o n th e L A N -s ide Eth e rn e t co n f ig uratio n . Se e th etable be lo w f o r in f o rmatio n o n Co n tro l Subn e t I P addre s s in g in auto matic mo de .

L A N Co n tro l Subn e t

Clas s A Clas s B ( 17 2 . 2 2 . 0 . 0 /16 )

Clas s B Clas s A ( 10 . 0 . 0 . 0 /8 )

Clas s C Clas s B ( 17 2 . 2 2 . 0 . 0 /16 )

Man ual Mo deTh e re is us ually n o n e e d to ch an g e th e auto matic s e ttin g s . I f n e ce s s ary, th e us e r can s e t th ero utin g pre f ix f o r th e Co n tro l Subn e t man ually. Th is s h o uld o n ly be do n e if th e L A N co n tain s an e two rk th at co n f licts with th e Co n tro l Subn e t.

N O TE: I f th e ro utin g pre f ix is s e t o n th e Co n tro l Subn e t, an y re s e rve d le as e s are e ras e d an d th eco n tro l s ys te m n o lo n g e r ch e cks f o r ro utin g co n f licts be twe e n th e L A N an d th e Co n tro l Subn e t.I t is impo rtan t th at th e us e r is f amiliar with h o w man ual mo de o pe rate s be f o re pro ce e din g .

8 • I P G uide lin e s f o r th e I T Pro f e s s io n al Be s t Practice s — Do c. 457 9 M

To s e t th e ro utin g pre f ix f o r th e Co n tro l Subn e t man ually:

1. Fro m th e Eas yCo n f ig to o l with in Cre s tro n To o lbo x , s e le ct Eth e rn e t A ddre s s in g . Th eEth e rn e t A ddre s s in g win do w o pe n s .

2 . Click th e Co n tro l Subn e t tab.

3 . Click Man ual f o r th e Co n tro l Subn e t .

4. En te r th e pre f ix f o r R o utin g in Clas s le s s I n te r- Do main R o utin g ( CI DR ) n o tatio n , an d s e le ctth e bit le n g th o f th e pre f ix af te r th e / .

N O TE: O n ly bit le n g th s f ro m /8 to /2 4 are acce pte d. A n e x ample o f a valid ro utin g pre f ixis 17 2 . 2 2 . 0 . 0 /16 .

Ho st namesCre s tro n re co mme n ds ch an g in g h o s tn ame s to me an in g f ul n ame s . Th e Co n tro l Subn e t allo wspo rt f o rwardin g bas e d o n th e h o s tn ame o f th e de vice .

Be s t Practice s — Do c. 457 9 M I P G uide lin e s f o r th e I T Pro f e s s io n al • 9

S ec u ri t yTh e f o llo win g s e curity in f o rmatio n is ce n te re d aro un d 4- Se rie s ™ co n tro l s ys te ms . Fo r mo rein f o rmatio n , re f e r to th e 4-Se rie s ™ Co n tro l Sys te ms Se curity R e f e re n ce G uide .

Fo r mo re in f o rmatio n o n h o w to de plo y a Cre s tro n s ys te m in a s e cure e n viro n me n t, re f e r toh ttps : //s e curity. cre s tro n . co m .

S ec u ri t y S et u pW h e n s e ttin g up s e curity o n a 4- Se rie s co n tro l s ys te m:

l A n admin is trato r acco un t mus t be cre ate d upo n in itial co n n e ctio n to th e co n tro l s ys te m tog uaran te e th at o n ly auth o riz e d pe rs o n n e l can make ch an g e s to th e co n f ig uratio n o fCre s tro n e quipme n t. A uth e n ticatio n can n o t be turn e d o f f o n 4-Se rie s co n tro l s ys te ms .

l En able SSL /TL S to e n s ure th at pas s wo rds are n o t s e n t as cle arte x t o ve r th e n e two rk.

l H ave a Cre s tro n pro g ramme r add pas s wo rds an d pas s co de s to th e s e ctio n s o f th e us e rpro g ram th at are re late d to th e co n f ig uratio n o f th ird-party de vice s .

Fi rewal l S et u p and Co mmu ni c at i o nAc ro ss M u l t i p l e V LANsCre s tro n s ys te ms can be co n tro lle d re mo te ly. Fo r e x ample , an iPad® de vice run n in g th e Cre s tro nG o A pp o n a ce llular n e two rk can s e n d co mman ds to th e co n tro l s ys te m to adjus t lig h ts . Th ise x ample wo uld re quire th e f o llo win g po rts in o rde r to h ave acce s s to th e o uts ide n e two rk:

Po rt Pro to co l Se rvice N o te s

8 0 TCP W e b s e rve r W e b pag e s can als o be h o s te d via I I S o r o th e rco rpo rate we b s e rve r

443 TCP Se cure we b s e rve r U s e f o r s e cure SSL acce s s

417 9 4 TCP Cre s tro n o ve r I P Pro prie tary Cre s tro n co n tro l co mmun icatio n s

417 9 6 TCP Se cure Cre s tro no ve r I P

Pro prie tary Cre s tro n co n tro l co mmun icatio n s wh e nSSL  is e n able d

49 2 0 0 TCP Se cure Cre s tro no ve r I P ( f o rCre s tro n H TML 5U s e r I n te rf ace )

Pro prie tary Cre s tro n co n tro l co mmun icatio n s o ve rW e bSo cke t wh e n SSL is e n able d

10 • I P G uide lin e s f o r th e I T Pro f e s s io n al Be s t Practice s — Do c. 457 9 M

D i gi t al M edi a Net wo rkCo nsi derat i o nsMo s t Cre s tro n Dig italMe dia™ de vice s are Eth e rn e t de vice s . Eth e rn e t traf f ic due to Dig italMe diade vice s is re lative ly lo w. Th e cus to m co n tro l s ys te m pro g ram th at tie s th e DM s ys te m to g e th e rdictate s h o w much ban dwidth is n e e de d.

Dig italMe dia Ce rtif ie d De s ig n e rs an d En g in e e rs

Eve ry Cre s tro n DM® s ys te m s h o uld be de s ig n e d by a Dig italMe dia Ce rtif ie d De s ig n e r - 4K( DMC-D-4K) an d co mmis s io n e d by a Dig italMe dia Ce rtif ie d En g in e e r - 4K ( DMC-E-4K) .

O n ly Cre s tro n ce rtif ie d e n g in e e rs e n s ure th at a s ys te m is pro pe rly in s talle d an d co n f ig ure d toCre s tro n s tan dards . Th e in f o rmatio n in th is g uide is in te n de d to e x plain bas ic DM I P addre s s in gg uide lin e s . Se e th e Cre s tro n we bs ite f o r mo re in f o rmatio n o n DMC Train in g f o r 4K.

Each DM lin k ( co n n e ctio n be twe e n two DM de vice s ) carrie s Eth e rn e t e mbe dde d in s ide .Th e re f o re , n o additio n al wirin g is n e e de d to pro vide n e two rk co n n e ctivity f o r th ird-partyEth e rn e t pro ducts in s talle d at th e e n dpo in ts . I n te rco n n e cte d DM de vice s n e e d o n ly a s in g le po in t( typically th e main s witch e r) to be co n n e cte d to th e L A N in o rde r to pro vide Eth e rn e t to allde vice s in th e s ys te m. To f acilitate th is , Cre s tro n DM de vice s h ave in te g rate d, man ag e d Eth e rn e ts witch e s an d an e x po s e d Eth e rn e t po rt.

N O TE: A DM e n dpo in t is an y DM tran s mitte r o r re ce ive r.

I n th e s ce n ario be lo w, Eth e rn e t co n n e ctivity is pro vide d to all DM de vice s an d th ird-party de vice sf ro m th e s in g le L A N  co n n e ctio n at th e DM-MD8 X 8 ( -CPU 3 ) . Th is e limin ate s th e n e e d to run e x trawirin g to e ach lo catio n to pro vide Eth e rn e t co n n e ctivity.

Be s t Practice s — Do c. 457 9 M I P G uide lin e s f o r th e I T Pro f e s s io n al • 11

Dig italMe dia Eth e rn e t Co n n e ctivity

Th e main Eth e rn e t uplin k to a DM s ys te m o ccurs at th e Dig italMe dia s witch e r.

Th e f o llo win g s witch e rs h ave 10 0 BA SE- TX /10 0 0 BA SE- T auto - n e g o tiatin g uplin k po rts :DM-MD6 X 4, DM-MD6 X 6 , DM-MD8 X 8 ( -CPU 3 ) , DM-MD16 X 16 ( -CPU 3 ) , DM-MD3 2 X 3 2 ( -CPU 3 ) ,an d all DMPS3 mo de ls .

Th e DM-MD6 X 1 s witch e r h as 10 BA SE- T/10 0 BA SE- TX auto - n e g o tiatin g uplin k po rts .

12 • I P G uide lin e s f o r th e I T Pro f e s s io n al Be s t Practice s — Do c. 457 9 M

D i gi t al M edi a I P Co nf i gu rat i o nTh e f o llo win g co n s ide ratio n s s h o uld be f o llo we d wh e n co n f ig urin g Dig italMe dia de vice s o ve r I P.

P ri v at e Net wo rk M o dePN M ( Private N e two rk Mo de )  g re atly re duce s th e n umbe r o f I P addre s s e s re quire d f o rDig italMe dia in s tallatio n s . Cre s tro n re co mme n ds us in g PN M to man ag e Eth e rn e t s e ttin g s f o rDM cards an d e n dpo in ts co n n e cte d to a DM s witch e r. O th e r me th o ds are n o t re co mme n de d. Fo rde tails o n le g acy mo de s o f o pe ratio n , re f e r to Cre s tro n True Blue O n lin e H e lp .

N O TE: PN M is n o t applicable to s tan dalo n e in s tallatio n s in vo lvin g dire ctly co n n e cte d DMe n dpo in ts with n o as s o ciate d DM s witch e rs . I n th e s e in s tallatio n s , e ach e n dpo in t de vice n e e dsits o wn I P addre s s , e ith e r co n f ig ure d man ually o r via DH CP.

PN M cre ate s a co mple te ly private I P n e two rk f o r all DM cards an d e n dpo in ts th at are co n n e cte dto th e DM s witch e r, e f f e ctive ly is o latin g th e m f ro m th e buildin g n e two rk. PN M s ig n if ican tlys tre amlin e s h o me an d o rg an iz atio n al in f ras tructure s , co n s e rve s I P addre s s e s , re duce s co s ts , an ds implif ie s s ys te m man ag e me n t an d tro uble s h o o tin g .

Th e o n ly de vice th at appe ars o n th e buildin g n e two rk is th e DM s witch e r. Th e s witch e r n e e ds jus to n e I P addre s s , wh ich can e ith e r be s e t s tatically o r as s ig n e d via th e buildin g ' s DH CP s e rve r. I nPN M mo de , n o n e o f th e cards o r e n dpo in ts are dire ctly re ach able via th e n e two rk o f th e buildin g .I n s te ad, co mmun icatio n with th e s e de vice s is man ag e d th ro ug h th e main DM s witch e r. Th ede vice s co n n e cte d to th e L A N po rts f o un d o n man y DM e n dpo in ts re main vis ible to th e n e two rk.R e f e r to Private N e two rk Mo de with A ux iliary De vice s ( o n pag e  14) f o r an illus tratio n .

Th e main DM s witch e r CPU is th e o n ly de vice co n n e cte d to bo th n e two rks . Th e CPU may re ce ivean in s tructio n o n th e public n e two rk ( s uch as f ro m a Cre s tro n co n tro l s ys te m) an d cre ate a n e win s tructio n f o r a de vice o n th e private n e two rk ( DM card, blade , o r e n dpo in t) . A t n o time do e s anEth e rn e t packe t f ro m th e public n e two rk trave rs e to th e private n e two rk, an d n o privateEth e rn e t packe ts trave rs e to th e public n e two rk.

Fo r mo s t in s tallatio n s , s uch as in co rpo rate o r un ive rs ity s e ttin g s , us in g PN M is th e be s t practicebe caus e it do e s n o t h e avily impact th e n e two rk. PN M als o is o late s DM-re late d traf f ic.

Be s t Practice s — Do c. 457 9 M I P G uide lin e s f o r th e I T Pro f e s s io n al • 13

N O TES:

l PN M is e n able d by de f ault o n all n e w un its an d is e n able d upo n s ys te m re s to re . PN M iso n ly available in PU F ( f irmware packag e update f ile ) 2 . 40 o r late r.

l PN M is n o t co n f ig urable o n s witch e rs e quippe d with th e DMC-CPU 3 , wh e re it is alwayse n able d.

l DMPS un its re quire two I P addre s s e s . Bo th th e in te g rate d co n tro l pro ce s s o r an d th ein te g rate d DM e quipme n t ( s witch e r an d all e n dpo in ts ) re quire th e ir o wn I P addre s s .

l I f an e n dpo in t is co n n e cte d to a DM s witch e r, its L A N  co n n e cto r mus t n o t be co n n e cte dto th e co rpo rate n e two rk. I n th is co n f ig uratio n L A N  po rts are o n ly f o r co n n e ctio n tode vice s s uch as lapto ps , Blu-ray Dis c™ playe rs , o r pro je cto rs .

Pr ivate Netwo r k Mo de Co n figur atio n Op tio n sPN MO N /O FF

Mo de Co mme n ts

PN M O N Static A s s ig n s o n e I P addre s s to th e main DM s witch e r

PN M O N DH CP Take s o n e I P addre s s f ro m th e DH CP s e rve r

PN M O FF* Static an d DH CP Can be in Static o r DH CP mo deR e quire s man y I P addre s s e sN o t re co mme n de d f o r mo s t in s tallatio n s

* A pplie s to DM-MD8 X 8 , DM-MD16 X 16 , an d DM-MD3 2 X 3 2 with DMC-CPU o n ly. PN M is n o t co n f ig urable o n s witch e rse quippe d with th e DMC-CPU 3 , wh e re it is always e n able d.

14 • I P G uide lin e s f o r th e I T Pro f e s s io n al Be s t Practice s — Do c. 457 9 M

Private N e two rk Mo de with A ux iliary De vice s

Be s t Practice s — Do c. 457 9 M I P G uide lin e s f o r th e I T Pro f e s s io n al • 15

N O TES:

l DH CP-dis tribute d I P addre s s e s h ave be e n ch o s e n at ran do m to s h o w th at de vice sattach e d to DM e n dpo in ts are co n n e cte d to th e buildin g L A N .

l Th e lapto p in th e e x ample re ce ive s an I P addre s s f ro m th e DH CP s e rve r.

l Th e de vice s e n clo s e d in th e g ray bo x are is o late d f ro m th e cus to me r n e two rk but areacce s s ible th ro ug h th e I P addre s s as s ig n e d to th e DM-MD8 X 8 ( -CPU 3 ) .

Multip le D igitalMedia Switc h er s Us in g Pr ivateNetwo r k Mo deW h e n two o r mo re s witch e rs are co n n e cte d via DM lin ks , th e y are co n s ide re d cas cade d. Each DMs witch e r in a cas cade d s ys te m mus t be co n f ig ure d with a un ique Sys te mI D. Th is pre ve n tsI P co n f licts amo n g DM de vice s o n th e private n e two rk. I n th e illus tratio n be lo w, o n ly o n e I Paddre s s pe r s witch e r is re quire d f ro m th e buildin g n e two rk.

Multiple DM Switch e rs U s in g PN M Ex ample

N O TE: Th e Sys te mI D can ran g e f ro m 0 1 to 6 4 an d mus t be un ique f o r e ach DM s witch e r. Byde f ault, th e Sys te mI D is s e t to 0 1. Th e I D can be s e t via th e f ro n t pan e l, th e SI MPL pro g ram, o rth e Sys te m I n f o to o l in Cre s tro n To o lbo x . Each DM s witch e r mus t be dire ctly co n n e cte d to th eco rpo rate L A N . O n e DM s witch e r can n o t re ce ive Eth e rn e t via an o th e r DM s witch e r, an d e achDM s witch e r mus t re ce ive an I P addre s s f ro m th e co n tro l s ubn e t.

16 • I P G uide lin e s f o r th e I T Pro f e s s io n al Be s t Practice s — Do c. 457 9 M

Rap i d S p anni ng T ree P ro t o c o lSin ce DM de vice s e mbe d Eth e rn e t in e ve ry lin k, a valid A V co n f ig uratio n can cre ate n e two rklo o ps , s uch as ro utin g two A V s ig n als f ro m o n e s witch e r to an o th e r s witch e r. To e limin ate an yn e two rk lo o pin g pro ble ms , DM pro ducts imple me n t I EEE 8 0 2 . 1w R STP ( R apid Span n in g Tre ePro to co l) . W ith PN M e n able d, th e DM s witch e r man ag e s th e DM Eth e rn e t lin ks to pre ve n tn e two rk lo o ps .

DM pro ducts tran s mit Bridg e Pro to co l Data U n its ( BPDU ) pe r th e R STP s pe cif icatio n . W ith PN Me n able d, BPDU s are is o late d to th e private n e two rk an d are n o t vis ible to th e co rpo rate n e two rk.R STP is n o t e n able d o n us e r-acce s s ible L A N co n n e cto rs . To pre ve n t n e two rk lo o ps , e n dpo in tss h o uld n o t be co n n e cte d to th e co rpo rate L A N in th is co n f ig uratio n .

By de f ault, e ve ry DM s witch e r s h ips with PN M an d R STP e n able d. I f PN M is dis able d, R STPre main s e n able d. I f re quire d, dis able R STP an d man ag e Eth e rn e t po rts man ually.

N O TE: PN M is n o t co n f ig urable o n s witch e rs e quippe d with th e DMC-CPU 3 , wh e re it is alwayse n able d.

Multiple Span n in g Tre e Pro to co l ( MSTP) , wh ich is an advan ce d ve rs io n o f R STP, s uppo rtsmultiple s pan n in g tre e s o n multiple VL A N s . DM imple me n ts R STP but n o t MSTP. I f run n in g MSTPo n th e n e two rk, e n s ure th at th e n e two rk po rt to wh ich DM is co n n e cte d o n ly be lo n g s to o n eVL A N . Th is is o n ly a pro ble m if PN M is dis able d.

Man ag e d Eth e rn e t s witch e s can be co n f ig ure d to h ave e dg e po rts . Eth e rn e t s witch e s can n o t beplug g e d in to e dg e po rts . I f PN M is e n able d, a DM s witch e r is co mpatible with e dg e po rts . I fPN M is dis able d, th e man ag e d Eth e rn e t s witch e s may co n s ide r th e DM s ys te m to be an Eth e rn e ts witch an d s h ut do wn th e e dg e po rt.

DM Eth e rn e t W irin g Ex ample

Be s t Practice s — Do c. 457 9 M I P G uide lin e s f o r th e I T Pro f e s s io n al • 17

N O TES:

l DM s witch e rs s h o uld be th e o n ly de vice s in th e DM s ys te m co n n e cte d to th e L A N .

l En s ure th at th e Sys te mI D o f e ach DM s witch e r in th e s ys te m is un ique .

l Do n o t co n n e ct ro o m co n tro lle rs o r tran s mitte rs to th e L A N .

18 • I P G uide lin e s f o r th e I T Pro f e s s io n al Be s t Practice s — Do c. 457 9 M

P o wer o v er Et hernetBu dget i ngPo we r o ve r Eth e rn e t ( Po E) pro vide s a o n e -wire s o lutio n f o r co n n e ctin g Cre s tro n to uch s cre e n s ,g ate ways , an d o th e r de vice s . Po E de live rs po we r an d data o ve r a s in g le CA T5 ( o r g re ate r)n e two rk cable . A ll f ive po rts are G ig abit capable to e n s ure max imum ban dwidth f o r multime diaan d critical co n tro l data.

Th e Po E s tan dard s pe cif ie s po we r by clas s . W h e n co n n e cte d to Po we r So urcin g Equipme n t( PSE) , e ach Po we re d De vice ( PD) de clare s its clas s to th e PSE. Th e PSE in turn re s e rve s a s e tamo un t o f po we r f o r e ach de vice bas e d o n its clas s , as s h o wn in th e table be lo w.

Clas s Po we r R an g e

Clas s 0 ( U n clas s if ie d) U p to 15. 4 watts at Po E po rt, 12 . 9 5 watts at de vice

Clas s 1 4. 0 watts at Po E po rt, 3 . 8 4 watts at de vice

Clas s 2 7 . 0 watts at Po E po rt, 6 49 watts at de vice

Clas s 3 15. 4 watts at Po E po rt, 12 . 9 5 watts at de vice

Clas s 4 ( Po E+) 3 0 . 0 watts at Po E po rt, 2 5. 50 watts at de vice

P o wer Bu dget i ng o n P o E S wi t c hesTh e calculatio n f o r po we r budg e tin g o n Po E s witch e s is :

Po E s witch e s re s e rve th e max imum o f e ach clas s if icatio n re g ardle s s o f h o w much po we r th ede vice is actually us in g . Clas s 4 ( Po E+) is f o r de vice s th at ran g e f ro m 13 to 2 5. 5 watts .

Po E+ po we re d de vice s are re quire d to s uppo rt L in k L aye r Dis co ve ry Pro to co l ( L L DP) po we rn e g o tiatio n . I f th e Po E+ s witch s uppo rts th is , th e amo un t o f po we r re s e rve d is n e g o tiate dbe twe e n th e s witch an d th e de vice . Co n s ult th e data s h e e t f o r th e de vice to de te rmin e th e Po E+po we r re quire d. Th e CEN -SW PO E-16 imple me n ts L L DP po we r n e g o tiatio n . L L DP n e g o tiatio n iso ptio n al pe r th e 8 0 2 . 3 at s tan dard f o r po we r s o urce e quipme n t. Th e re f o re , if th e PSE do e s n o ts uppo rt L L DP n e g o tiatio n , th e f ull 3 0 watts is re s e rve d f o r all Clas s 4 de vice s .

Be s t Practice s — Do c. 457 9 M I P G uide lin e s f o r th e I T Pro f e s s io n al • 19

I EEE S t andardsTh e I EEE 8 0 2 . 3 at s tan dard h as re place d 8 0 2 . 3 af . Th e 8 0 2 . 3 af s tan dard pre ce de d Po E+ an d o n lyco ve rs Clas s e s 0 th ro ug h 3 . Th e 8 0 2 . 3 at s tan dard co ve rs Clas s e s 0 th o ug h 4.

Cre s tro n Ele ctro n ics , I n c.15 Vo lvo Drive , R o ckle ig h , N J 0 7 6 47Te l: 8 8 8 . CR ESTR O NFax : 2 0 1. 7 6 7 . 7 6 56www. cre s tro n . co m

Be s t Practice s — Do c. 457 9 M( 2 0 3 6 0 16 )

0 7 /2 9 /2 1Spe cif icatio n s s ubje ct to

ch an g e with o ut n o tice .