Keyboard Shortcuts
Likes
Search
DIN-AP3 Default Login?
|
Local onsite I connect to client's DIN-AP3 via CTP ("out of the box").? All is/was good.
Now I am connected via VPN, and am now getting a username/password prompt in Toolbox to connect to DIN-AP3 on its LAN address.. I've tried "crestron" and no password, plus all the usual suspects. I never enabled SSH or anything, the DIN-AP3 was right out of the box. Am I looking at a 4 hour round trip tomorrow? Thanks. |
|
The most common cause for not being able to access via a VPN or on another subnet is the default router is not set or is set incorrectly on the DIN-AP3. Also check your subnet mask and DNS servers in the DIN-AP3. Without a default router assigned in the DIN-AP3, the DIN-AP3 has no way to respond to a request on a different subnet.? Try pinging the DIN-AP3 instead from your VPN.? If it doesn't respond to pings, well then the traffic is not getting routed correctly,?
Of course? also try access other stuff on the network to ensure your VPN is working. |
|
Ping works fine.
Other CP3 and touch panels access fine via Toolbox. I can't access DIN-AP3 to check its default router, DNS, SubMask, settings, etc. Appreciate the replies. So far, still looking like travel tomorrow. Pinging 192.168.17.202 with 32 bytes of data:
Reply from 192.168.17.202: bytes=32 time=723ms TTL=127
Reply from 192.168.17.202: bytes=32 time=305ms TTL=127
Reply from 192.168.17.202: bytes=32 time=25ms TTL=127
Reply from 192.168.17.202: bytes=32 time=26ms TTL=127
?
Ping statistics for 192.168.17.202:
? ? Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
? ? Minimum = 25ms, Maximum = 723ms, Average = 269ms |
|
You should be aware that the latest firmware releases will require authentication upon a restore.? Basically, it looks like Crestron is forcing everyone to use authentication.? Possible there is a bug in the latest firmware were something happened and it got enabled.
You could do a port scan on your DIN-AP3 via the VPN and see if the CTP port is even open.? I personally use either nmap or zenmap to do this.? But I do this from a Linux environment.? But I believe those tools have been ported to Windows too if you are using Windows. For example to scan common Crestron ports, you would execute this: nmap -p 41790-41799 192.168.17.202 Here is the response from my processor that does not have authentication enabled Starting Nmap 7.01 ( https://nmap.org ) at 2020-11-17 21:54 CST Nmap scan report for MP2E (xx.xx.xx.xx) Host is up (0.010s latency). PORT????? STATE? SERVICE 41790/tcp open?? unknown 41791/tcp closed unknown 41792/tcp closed unknown 41793/tcp closed unknown 41794/tcp open?? crestron-cip 41795/tcp open?? crestron-ctp 41796/tcp closed unknown 41797/tcp closed unknown 41798/tcp closed unknown 41799/tcp closed unknown And here is a port scan on a CP4R via a OpenVPN tunnel that has authentication enabled; Starting Nmap 7.01 ( https://nmap.org ) at 2020-11-17 22:09 CST Nmap scan report for 192.168.17.202 Host is up (0.038s latency). PORT????? STATE? SERVICE 41790/tcp closed unknown 41791/tcp closed unknown 41792/tcp closed unknown 41793/tcp closed unknown 41794/tcp open?? crestron-cip 41795/tcp closed crestron-ctp 41796/tcp open?? unknown 41797/tcp closed unknown 41798/tcp closed unknown 41799/tcp closed unknown |
开云体育If there is a cp3 on the project on the same vlan, you could load up a program with the ssh module in slot 2 and have it connect to the ap3 on port 22 and see if the default gateway is jacked. Just use debugger on the tx line
to send data to the ap3.?
I did this a while ago on an amp that had the wrong gateway, except instead of ssh I just used a TCP/IP client on 41795. This is slightly different but should work.?
Doesn't help if you have the wrong credentials though...
Caleb
Radecky |?Manager,
Online Products & Services
Crestron Silver Certified Programmer | DMC-D-4K | DMC-E-4K ControlWorks Consulting, LLC |?Crestron Services Provider?| 8228 Mayfield Rd. Suite 6B Rear, Cleveland OH 44026 D.?440.771.4809 |?O.440.449.1100?X1109 | F.440.449.1106 | From: Steve Kuehn <steve@...>
Sent: Tuesday, November 17, 2020 22:59 To: [email protected] Subject: Re: [crestron] DIN-AP3 Default Login? You should be aware that the latest firmware releases will require authentication upon a restore.? Basically, it looks like Crestron is forcing everyone to use authentication.? Possible there is a bug in the latest firmware were something happened and
it got enabled.
You could do a port scan on your DIN-AP3 via the VPN and see if the CTP port is even open.? I personally use either nmap or zenmap to do this.? But I do this from a Linux environment.? But I believe those tools have been ported to Windows too if you are using Windows. For example to scan common Crestron ports, you would execute this: nmap -p 41790-41799 192.168.17.202 Here is the response from my processor that does not have ssh enabled Starting Nmap 7.01 ( https://nmap.org ) at 2020-11-17 21:54 CST Nmap scan report for MP2E (xx.xx.xx.xx) Host is up (0.010s latency). PORT????? STATE? SERVICE 41790/tcp open?? unknown 41791/tcp closed unknown 41792/tcp closed unknown 41793/tcp closed unknown 41794/tcp open?? crestron-cip 41795/tcp open?? crestron-ctp 41796/tcp closed unknown 41797/tcp closed unknown 41798/tcp closed unknown 41799/tcp closed unknown |
开云体育Have you tried both userid/password empty? ? Van: [email protected] <[email protected]> Namens markcrestrongroup
Verzonden: woensdag 18 november 2020 02:52 Aan: [email protected] Onderwerp: [crestron] DIN-AP3 Default Login? ? Local onsite I connect to client's DIN-AP3 via CTP ("out of the box").? All is/was good. |
开云体育Hi, i had this happening in the past when there was another device on the LAN with the same IP address as the Crestron controller. (customer said IP is free but it wasn?t…). Actually, this happens always if you try to connect to a non Crestron-device. So it?s probably worth switching off the controller and see if there?s still a device with the controllers IP address responding. Cheers, Thorsten ? ? Von: [email protected] <[email protected]> Im Auftrag von markcrestrongroup ? Local onsite I connect to client's DIN-AP3 via CTP ("out of the box").? All is/was good. |
|
A lot of Crestron units are now using admin as the username and crestron as the default password, all lower case. I have also heard that some products are using admin as the username and the serial number as the password (Old Polycom trick), good luck. Steve Adams
On Wednesday, November 18, 2020, 01:44:52 AM CST, Math Leenen | Emenem Building Automation <m.leenen@...> wrote:
Have you tried both userid/password empty? ? Van: [email protected] <[email protected]> Namens markcrestrongroup
Verzonden: woensdag 18 november 2020 02:52 Aan: [email protected] Onderwerp: [crestron] DIN-AP3 Default Login? ? Local onsite I connect to client's DIN-AP3 via CTP ("out of the box").? All is/was good. |
开云体育Unfortunately the “serial number as password” (I know Extron is don’t that, haven’t seen it from Crestron and hope that they find a different bandwagon to jump on) is an effect of a California law that prohibits shipping devices with standard credentials…. Well meaning (e.g. make it harder for ignorant home users from letting their IoT devices be compromised) but incredibly annoying for devices that aren’t connected to a network that even has Internet/outside world access let alone exposed directly to the Internet. ? What is troubling is that processors and touchpanels seem to enforce different password complexity requirements. I was at a site a couple weeks ago and the processor happily accepted “admin” “clientname” but the touchpanel wouldn’t take “clientname” or “Clientname”, I wound up having to use “C1ientname” for the panels ? -- Lincoln King-Cliby, CTS, DMC-E-4K/T/D ? From: [email protected] <[email protected]> On Behalf Of
Steve Adams
Sent: Wednesday, November 18, 2020 8:08 AM To: [email protected] Subject: Re: [crestron] DIN-AP3 Default Login? ? A lot of Crestron units are now using admin as the username and crestron as the default password, all lower case. I have also heard that some products are using admin as the username and the serial number as the password (Old Polycom trick), good luck. ? Steve Adams ? ? ? ? On Wednesday, November 18, 2020, 01:44:52 AM CST, Math Leenen | Emenem Building Automation <m.leenen@...> wrote: ? ? Have you tried both userid/password empty? ? Van:
[email protected] <[email protected]>
Namens markcrestrongroup ? Local onsite I connect to client's DIN-AP3 via CTP ("out of the box").? All is/was good. |
|
Just tried the 1 HW 5 SW method, reload FW.? No dice.
SSHPort shows "SSH Disabled, Port 22". Seems like I need to enable SSH, but don't see a way to. Sys Info shows SSH Enabled, but text console says Not Enabled. I have tried Auth also, and set user/password successfully via USB, but still no IP access.? Pop up says "This device not accepting SSH requests.? Please make sure SSH is enabled...", etc. |
Steve Adams