Tunneling and Routing
Tunneling connects an ETS computer via UDP to a KNX IP interface or IP router. The device translates KNXnet/IP packets to TP telegrams and vice versa. A maximum of 4 simultaneous tunnel connections per device are supported.
Routing connects two lines via IP as a backbone. The IP router forwards telegrams via IP multicast (standard address 224.0.23.12, UDP port 3671). This allows the physical TP backbone coupler to be replaced by a LAN connection.
Security Note
KNXnet/IP without Secure transmits telegrams in plain text on the LAN. Port 3671 should never be opened directly to the internet, without KNX IP Secure, the entire bus can be controlled from outside. For remote access: use VPN or KNX IP Secure.
Key Facts
- Protocol: UDP, port 3671
- Multicast address for routing: 224.0.23.12
- Max. 4 tunnel connections per device
- IP router = line coupler over IP
- IP interface = tunneling only, no routing
- Never open port 3671 to the internet without VPN or KNX Secure