Communication To & From My Building....What ports must be open?

dbuerer

Administrator
Staff member
My Building communicates between software modules, the network, and other Leviton equipment on the IP network. Most of this communication is TCP/IP communication, however, some of it is UDP/IP. This article document what type of communication is required between various parts of the system, it's orgin, and it's destination. This will help you to create the appropriate firewall and routing rules to have a successful network deployment.

The Ports List​


My Building uses the following ports for communication between various devices in the system. Device layout is documented in My Building System Architecture, only summary information is proivded herein:
Protocol Common NameSource->DestinationProtocol/Port #Purpose/Notes
MQTTSRoom Controller->MQTT BrokerTCP 8883TLS with AES Encryption
MQTTSMQTT Broker (Building) -> MQTT Broker CentralTCP 8883Only in multi-building system architectures
DHCPRoom Controller->DHCP Server
DHCP Server->Room Controller
UDP 67
UDP 68
Static addressing is possible but not recommended
DNSRoom Controller->DNS ServerUDP 53Required when DHCP is used
NTPRoom Controller -> NTP Server
My Building -> NTP Server
UDP 123for time synchronization, can be turned off
APIMy Building Phone App -> My BuildingTCP 443Access to API calls. Secured with TLS with AES encryption as well as user tokens drive by a user permissions model. Certificate is a private certificate unique per project.
HTTP/HTTPSClient Computer -> My Building
Phone App -> My Buildilng
TCP 80,443Secured with TLS with AES encryption as well as user tokens drive by a user permissions model. Certificates used for web browser access can be automatically generated by Lets Encrypt, provided by user, or used insecure.
SMTPMy Building -> SMTP Server25Outbound email, alarms/alerts, account validation. Port number, username, password is configurable.
BACnetBAS/BMS Controller -> My BuildingUDP 45808*BACnet is a protocol defined by ASHRAE for communication between Building Management Systems (BMS) and/or Building Automation Systems (BAS) to other devices.
TCP/ASCIIMy Building Phone App -> Room ControllerTCP 57786Only needed when direct access to room controller is needed and when phone is on lighting control network.


BACNet​

If your project requires BACnet communication, which is often used to exchange sensor data with the BAS/BMS system and or allow the BAS/BMS system to control the lighting system, it will use either the BACnet/IP or BACnet/SC protocol. Which one is required is Lev determined by your BAS/BMS system provider as that is the system to which we are interfacing. BACnet/IP is a UDP protocol that operates on Port 45808 and as such requires local access to the BAS/BMS. If local access is not possible, the BACnet/BBMD protocol can be implemented which in effect creates a UDP<->TCP/IP gateway for only Bacnet data. This will need to be coordinated with the Leviton Field Tech and the BAS/BMS provider.

More Questions?​

Please leave reply below or email LCTechSupport@Leviton.com
 
Last edited:
Back
Top