Connectivity Requirements (For Local It); Overview; Servers And Dns Requests; Mac Or Ip Address Filter - Ixon IXrouter3 Installation Manual

5. Connectivity requirements (for local IT)
The IXrouter uses outgoing ports to establish a secure connection to our IXON Cloud. This
means there is no need to open any incoming ports in your firewall.
5.1 Overview
Below is an overview of the outgoing ports and protocols that the IXrouter utilizes.
Direction Port
Outbound 443
Outbound 8443​
Outbound 53​ (3)
Outbound 123​
Outbound (no port)​
(1) The very first package may be considered unencrypted as the OpenVPN handshake takes place prior to the TLS handshake.
For this reason an exception may be required on firewall rules that block non-SSL traffic over SSL-ports.
(2) Only used when stealth mode is activated for connectivity via a censored internet connection (i.e. when located in China).
(3) DNS requests are often handled by local DNS servers. In those cases the listed DNS port can be ignored.
(4) (Optional) Used to synchronize the time.
(5) Only used when failover is configured.
5.2 Servers and DNS requests
The IXrouter connects to different IXON servers: REST API, MQTT, and OpenVPN servers, which
include the following domains: .ixon.cloud; .ixon.net; .ayayot.com (phonetic IIoT).
Doing a DNS lookup (nslookup) at the following domain name always returns an up-to-date IP list
of all current IXON servers: whitelist.ixon.cloud
5.3 MAC or IP address filter
Internet access may be granted to specific devices, based on their MAC or IP addresses. The
IXrouter's MAC address can be obtained from the label on the side of the IXrouter. The IP
address can be set to a static IP address. However, by default the IP address is set to be
assigned dynamically via DHCP.
More info
More info detailed information on connectivity requirements is available through our support
website.
● How to use ​ s tealth
A guide to ​ s et up a static
●
www.ixon.cloud
Transport
TCP
TCP
(2)
TCP & UDP
UDP
(4)
(5) ICMP (Echo request)
mode
IP
Application
HTTPS, MQTT (TLS) OpenVPN​
HTTPS
DNS
NTP
-
(1)
15