MDT KNX IP Interface - address is not a tunneling address

Hi Board,

I’m new to the OpenHAB world and struggeling with my very basic setup. It looks as follows:

  • Platform information:
    • Hardware: x64 VM on Virtualbox (for the time being)
    • OS: Ubuntu 24.04
    • Java Runtime Environment: openjdk 17.0.13
    • openHAB version: 4.3.1

I have a working KNX installation with a MDT KNX IP Interface (SCN-IP000.03). It’s a secure setup, which I would like to keep. I can securely connect with ETS. My target is to set (and later read) KNX group addresses from OpenHAB.

I followed the general KNX guides for the setup of the chain Thing (Interface) → Thing (Switch Actuator) → Channel → Switch → Point, for configuration see below.
For configuration of the interface, I followed this thread KNX secure - initial implementation - #4 by nilres

As soon as I enable the interface I can observe the following in the log:

2025-01-06 18:26:40.880 [DEBUG] [nternal.handler.IPBridgeThingHandler] - KNX secure: router backboneGroupKey is not set
2025-01-06 18:26:40.881 [DEBUG] [nternal.handler.IPBridgeThingHandler] - KNX secure: tunnel keys are properly set
2025-01-06 18:26:40.881 [DEBUG] [nternal.handler.IPBridgeThingHandler] - KNX secure available for 0 devices, 0 group addresses
2025-01-06 18:26:40.881 [DEBUG] [nternal.handler.IPBridgeThingHandler] - Secure group addresses and associated devices: {}
2025-01-06 18:26:40.881 [DEBUG] [nternal.handler.IPBridgeThingHandler] - KNX secure tunneling needs a few seconds to establish connection
2025-01-06 18:26:40.882 [DEBUG] [nx.internal.client.AbstractKNXClient] - Bridge knx:ip:0083-7c402324 is disconnecting from KNX bus
2025-01-06 18:26:41.882 [DEBUG] [nx.internal.client.AbstractKNXClient] - Bridge knx:ip:0083-7c402324 is connecting to KNX bus
2025-01-06 18:26:41.883 [DEBUG] [binding.knx.internal.client.IPClient] - Establishing connection to KNX bus on 10.10.200.90:3671 in mode SECURE TUNNEL.
2025-01-06 18:26:42.629 [ERROR] [NX IP 🔒 Tunneling 10.10.200.90:3671] - establishing connection failed, error response from control endpoint 10.10.200.90:3671: requested address is not a tunneling address
2025-01-06 18:26:42.629 [DEBUG] [nx.internal.client.AbstractKNXClient] - Bridge knx:ip:0083-7c402324 cannot connect: error response from control endpoint 10.10.200.90:3671: requested address is not a tunneling address
2025-01-06 18:26:42.629 [DEBUG] [binding.knx.internal.client.IPClient] - Bridge knx:ip:0083-7c402324 closing TCP connection
2025-01-06 18:26:42.635 [WARN ] [imero.knxnetip.tcp 10.10.200.90:3671] - session 1 does not exist

My configuration looks as follows, comments added for clarity:

UID: knx:ip:0083-7c402324
label: MDT KNX Interface
thingTypeUID: knx:ip
configuration:
  keyringPassword: *** // Set on keyring export
  readRetriesLimit: 3
  tunnelUserPassword: *** // Copied from ETS, item "Tunneling Channel"
  ipAddress: 10.10.200.90
  localSourceAddr: 1.1.200 // an unused address
  readingPause: 50
  type: SECURETUNNEL
  tunnelUserId: "2" // copied from keyring file
  tunnelDeviceAuthentication: *** // copied from ETS, item "IP Interface"
  portNumber: 3671
  useNAT: false
  keyringFile: knx.knxkeys // exported from ETS
  autoReconnectPeriod: 60
  responseTimeout: 10

I cannot see any relevant difference to the linked tutorial above. However, I’m pretty sure, I’m doing something wrong :wink:

Any advice is highly appreciated. Thank you!

Kind regards
Marvin