Connectivity Requirements (For Local It); Overview; Servers And Dns Requests; Mac Or Ip Address Filter - Ixon IXrouter3 IX2400 Installation Manual

Connectivity requirements (for local IT)

The IXrouter uses an outgoing port to establish a secure connection to our IXplatform. This
means there is no need to open any incoming ports in your firewall.

Overview

Below is an overview of the outgoing ports and protocols that the IXrouter utilizes.
Port
443, 8443 (1)
53
(2)
(1) Port 8443 is only used when stealth mode is actived for connectivity via a censored internet connection (i.e.
when located in China). More info:
(2) DNS requests are often handled by local DNS servers. In those cases the listed DNS port can be ignored.

Servers and DNS requests

Via these outgoing ports the IXrouter connects to different IXON servers: REST API, MQTT,
and OpenVPN servers. The IP addresses of these servers, as well as the amount of servers,
may change over time and are thus not pre-defined. What is pre-defined is the domain of
these servers. This domain will always end with ".ixon.net" (i.e. am01.ixon.net). The IXrouter
attempts to resolve these addresses by doing DNS requests. If it can't perform DNS
requests, it can't connect to our servers.

MAC or IP address filter

The local IT department may choose to only grant specific devices internet access, based
on the MAC address or IP address of the device. The MAC address can be obtained from
the label on the side of the IXrouter. The IP address can be set to a static IP address (guide:
https://support.ixon.cloud/hc/articles/360002960372). However, by default the IP address is
set to be assigned dynamically via DHCP.
Transport
TCP
TCP & UDP
https://support.ixon.cloud/hc/articles/360001088912
Cloud enable your machines
Application
HTTPS, MQTT (TLS), OpenVPN
DNS
16