Overview of ports used by Peplink SD-WAN routers and other Peplink services

Knowledgebase FAQs
,
1

This article lists the default port numbers and usage for Peplink SD-WAN routers and services, InControl, and the InControl appliance.
The Fusionhub virtual appliance uses the same ports as other Peplink routers.

Default Port number Direction Used for Service
. . . .
UDP 5246 Outbound Data flow InControl
TCP 443 Outbound HTTPS service InControl
TCP 5246 Outbound Optional, used when TCP 443 is not responding InControl
. . . .
TCP 5246 Outbound Remote Web Admin InControl Virtual Appliance
. . . .
TCP 32015 Inbound/Outbound PepVPN /SpeedFusion handshake SpeedFusion
UDP 32015 Inbound/Outbound VPN Data (alternative) SpeedFusion
UDP 4500 Inbound/Outbound VPN Data SpeedFusion
. . . .
UDP 4500 Inbound/Outbound VPN Data IPsec
UDP 500 Inbound/Outbound VPN initiation IPsec
. . . .
UDP 500 Inbound L2TP Remote user Access
UDP 1701 Inbound L2TP Remote User Access
UDP 4500 Inbound L2TP Remote User Access
UDP 1194 Inbound OpenVPN Remote User Access
IP 47 Inbound PPTP (GRE) Remote User Access
. . . .
TCP 2222 Inbound Remote Assistance Direct connection Peplink Troubleshooting Assistance
. . . .
TCP 80 Inbound HTTP traffic Web Admin Interface access
TCP 443 Inbound HTTPS traffic Web Admin Interface access (secure)
. . . .
TCP 8822 Inbound SSH SSH
. . . .
UDP 161 Inbound SNMP Get SNMP monitoring
UDP 162 Outbound SNMP Trap SNMP monitoring
. . . .
TCP, UDP 1812 Outbound Radius Authentication Radius
TCP, UDP 1813 Outbound Radius Accounting Radius
. . . .
UDP 123 Inbound/Outbound Network TIme Protocol NTP
. . . .
ICMP Outbound Ping to health check target WAN health check
UDP 53 Outbound DNS query to health check target WAN health check
TCP 80 Outbound HTTP access to health check target WAN health check
. . . .
TCP 443 Outbound WAN Quality Monitoring WAN Quality Report
17 Likes
2

Thanks Erik,
please add NTP UDP 123.

Theo

1 Like
3

Hi,

Great post.

For Incontrol Virtual Appliance inbound TCP 4443 is also needed for Web Access to Control Panel by default.

I should also Add UDP 53 for the Dyndns “Find My Peplink” Service (Outbound for Fusionhub/Devices, Inbound for Incontrol Virtual Appliance).

For Incontrol Hardware Appliance TCP 8000 is used for Non-Secure web accesses to control panel (inbound).

I also noticed TCP 1443 in the past for Fusionhub but not sure about that ?

Thank you
Sven

4

This is the Remote Web Admin port for ICVA.

1 Like
5

TCP 60660 Listener on MAX; Realtime GPS information

Please add

1 Like
6

Hi ue-it,

MAX routers export real-time location data in NMEA format through its LAN IP address at TCP port 60660. It is accessible from LAN or over a SpeedFusion connection.
See: https://forum.peplink.com/t/accessing-gps-info-from-pepwave-max-routers/

1 Like
7

So, no one thought to add whether each port is inbound or outbound. Really?

2 Likes
8

Hi Michael,
you’re right. Inbound and outbound should be much better for everyone.
The table above shows the device and the service but you need to know the direction.
You find all these informations in 1001 of topics, datasheets and manuals. This table is helpfull because it is a quick overview. A small note, pinned on the refridgerator.
Regards
Theo

1 Like