Keyboard, video and mouse traffic for Avocent (now Vertiv) KVM-over-IP appliances.
IANA registers 2068 as the Avocent AuthSrv Protocol, and Vertiv's own DSView port documentation lists 2068/tcp as the KVM session channel ("dsr-kbd+mouse") used by DSR switches, MergePoint and Universal Management Gateway appliances and their UMIQ modules. Nmap labels it avocentkvm for the same reason. Finding it open means a KVM appliance is present, usually next to 22, 443, 3211 and 8192 on the same box. That appliance drives the console of the attached servers — BIOS, boot loader, everything — so the port fronts an out-of-band control plane, not an application.
Do not expose
KVM-over-IP is full pre-boot console access to whatever is plugged in. Keep management appliances on an isolated management network reached over a VPN.
$ nc -vz TARGET 2068Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.