Crestron DM NAX
DM NAX is Crestron's DigitalMedia Networked Audio Matrix platform: a Crestron-governed AoIP ecosystem built on AES67 media transport. For IT/firewall purposes, do not create one universal "DM NAX port" rule. Schedule the media plane, clocking, multicast management, discovery/session workflow, Crestron control, web/admin, console, identity services, cloud/media-player paths, firmware/update, and any third-party AES67/Dante workflow separately by endpoint role.
Scope: DM NAX models listed in Crestron 8560H
platform · Catalog reviewed 2026-09-27
Related requirements
Review these entries for the services used in your design.
By Crestron · Crestron DM NAX; AES67
Infrastructure Requirements
- Gigabit switch access, sufficient uplink capacity, multicast forwarding/IGMP and a compatible PTP domain. Configure traffic isolation where supported. Match stream groups, ports and media formats
- select only the enabled management, control, directory and cloud features.
Network & Physical Requirements
| Port / allocation | Transport | Connection / signal flow | Feature and requirement | Evidence |
|---|---|---|---|---|
| 5004 (default) | UDP Multicast: Configured multicast stream group DSCP: EF (46) | NAX transmitter → AES67/NAX receiver | Profile requirement · Core AES67 media DM-NAX-4ZSP AES67 streams Use the commissioned stream address. Starting-address limits vary by model and do not describe the full destination range; see the commissioning requirement. | Source checked 2026-09-27 DM NAX AES67: configure transmitters and receivers |
| 319 | UDP Multicast: 224.0.1.129–224.0.1.132 DSCP: CS7 (56) | Clock participant → NAX clock participant | Profile requirement · Core PTP event timing DM NAX documented local-subnet PTP Documented DM NAX PTP TTL is 1; keep clock participants within the supported local subnet. | Source checked 2026-09-27 Precision Time Protocol; Quality of Service Configuration |
| 320 | UDP Multicast: 224.0.1.129–224.0.1.132 DSCP: CS6 (48) | Clock participant → NAX clock participant | Profile requirement · Core PTP general timing DM NAX documented local-subnet PTP Documented DM NAX PTP TTL is 1; keep clock participants within the supported local subnet. | Source checked 2026-09-27 Precision Time Protocol; Quality of Service Configuration |
| 80 (default) | TCP | Browser → NAX device | Optional · HTTP redirect Redirect to secure web configuration DM NAX models listed in Crestron 8560H Optional convenience redirect from port 80 to HTTPS 443. | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| 443 (default) | TCP | Browser → NAX device | Optional · HTTPS management Secure web configuration DM NAX models listed in Crestron 8560H | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| 22 (default) | TCP | Admin workstation → NAX device | Optional · SSH administration Console and SFTP DM NAX models listed in Crestron 8560H | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| 41794 (default) | TCP | NAX device → Control processor | Optional · CIP control Crestron control connection DM NAX models listed in Crestron 8560H | Source checked 2026-09-27 Crestron Control Devices, printed page 4Crestron 8560H, 2025-03-28 |
| 41796 (default) | TCP | NAX device → Control processor | Optional · Secure CIP control Secure Crestron control connection DM NAX models listed in Crestron 8560H Select the configured secure or unencrypted control mode. | Source checked 2026-09-27 Crestron Control Devices, printed page 4Crestron 8560H, 2025-03-28 |
| 123 (default) | UDP | NAX device → NTP server | Optional · NTP client Time-of-day synchronization DM NAX models listed in Crestron 8560H Separate from media PTP timing. | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| 443 (default) | TCP | NAX device → XiO Cloud service | Optional · XiO Cloud XiO Cloud connection DM NAX models listed in Crestron 8560H Required only for the cloud feature; verify current service destinations. | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| Configured | TCP | NAX device → Certificate OCSP responder | Optional · OCSP Certificate status checks DM NAX models listed in Crestron 8560H Use the responder URL and port in the certificate; commonly HTTP 80. | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| Configured | TCP | NAX device → Syslog TLS collector | Optional · Remote audit logs Remote syslog over TLS DM NAX models listed in Crestron 8560H Use the configured collector port. | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| 161 (default) | UDP | SNMP manager → NAX device | Optional · SNMP monitoring SNMP queries DM NAX models listed in Crestron 8560H | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| 162 (default) | UDP | NAX device → SNMP manager | Optional · SNMP traps SNMP notifications DM NAX models listed in Crestron 8560H | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| 3268 (default) | TCP | NAX device → LDAP global catalog | Optional · Directory integration Directory global-catalog queries DM NAX models listed in Crestron 8560H Additional domain-join services depend on the chosen authentication mode; use the directory profile. | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| 1812 (default) | UDP | NAX device → RADIUS server | Optional · RADIUS integration Authentication service DM NAX models listed in Crestron 8560H Select only when this endpoint authentication feature is configured. | Source checked 2026-09-27 Common Ports, printed page 4Crestron 8560H, 2025-03-28 |
| 9875 | UDP Multicast: 239.255.255.255 | NAX transmitter → SAP listeners | Optional · AES67 discovery AES67 session announcements NVX/NAX AES67 | Source checked 2026-09-27 Port Table, printed p. 3: SAP/SDP |
| 5355 | TCP | Name-resolution client → NAX device | Optional · LLMNR Link-local name resolution NVX/NAX implementation 8560H explicitly lists TCP; do not substitute generic UDP LLMNR. | Source checked 2026-09-27 Port Table, printed p. 3: LLMNR |
Physical, link and configuration requirements
configuration · Profile requirement · Multicast address assignment
Commission DM NAX stream multicast addresses
DM-NAX-4ZSP and DM-NAX-16AIN commissioning
This is the valid starting-address range, not a universal media ACL range. The device assigns a block of stream addresses; read Last Used Multicast Address and export the actual destinations. 16AIN has the same starting bounds; other models differ.
Source checked 2026-09-27
Settings > Commissioning
Gotchas & IT Notes
- ⚠The network-design guide specifies local-subnet PTP with TTL 1. QoS: event timing CS7, general timing CS6, audio EF.
- ⚠CIP and secure CIP are alternatives. HTTP 80 redirects to secure configuration; it is not the main management session.
- ⚠Internet media-player services and directory integration need the selected provider’s current destination/service schedule.