Firewall Settings; Replacing An Envoy - enphase Envoy Installation And Operation Manual

Firewall Settings

The Envoy initiates outbound connections to Internet servers. Such connections may be restricted by
firewall rules set up on the site's broadband router. Broadband routers typically allow all outbound
connections but restrict any/all inbound connections.
If outbound firewall rules are applied at the site, you must configure a static IP address for the Envoy and
add new rules that allow outbound access as follows:
Direction Source
OUT <Envoy IP address>
OUT <Envoy IP address>
OUT <Envoy IP address>
OUT <Envoy IP address>
The Envoy connects to these servers using their DNS names. If you add firewall rules for Envoy
reporting, Enphase recommends using the DNS names rather than the underlying IP addresses. This is
because the IP addresses are subject to change without notice.

Replacing an Envoy

If problems remain after following the troubleshooting steps above, contact Enphase at
http://www.enphase.com/support. If Customer Support authorises an Envoy replacement (RMA), perform
the following steps.
1. Disconnect the Ethernet cable and power cord from the old Envoy.
2. When the replacement Envoy arrives, connect it to the Ethernet cable and power cord.
3. Verify that the new Envoy powers up. The Envoy LCD may display "Upgrading... Do Not
Unplug" for up to 20 minutes. Wait for this to complete before proceeding.
4. Verify that the new Envoy indicates "+Web" within five minutes. If not, follow the network
troubleshooting steps above.
5. If possible, log in to Enlighten and add the Envoy to the Activation for this system by clicking
"Add Another Envoy" under the "Envoy" section.
6. Verify that the new Envoy start discovering microinverters within 20 minutes of starting up. If
necessary, use the LCD menu (or the Enlighten Envoy page) to start a new device scan
during daylight hours. (See Using the Envoy LCD Menu on page 20.)
NOTE: If the old Envoy has communicated to the microinverters on the same day that
the new replacement Envoy is installed, the new Envoy will be unable to discover the
microinverters. Contact Enphase at
this situation.
7. After all microinverters have been discovered, stop the new device scan using the LCD
menu. (See Using the Envoy LCD Menu on page 20.)
8. Assess the power line communications by running a Communication Check from the LCD
menu (or from the Enlighten Envoy page) during daylight hours. (See Using the Envoy LCD
Menu on page 20.) If fewer than three bars are shown, relocate the Envoy for better power
line communications.
9. Contact Enphase Support at
to your system and to retire the replaced Envoy.
10. Ship the old Envoy to Enphase using the supplied RMA shipping label.
35
Protocol Port
TCP 443
TCP 443
TCP 443
UDP 123
http://www.enphase.com/support
http://www.enphase.com/support
 2014 Enphase Energy Inc.
Envoy Installation and Operation
Destination
reports.enphaseenergy.com
securereports.enphaseenergy.com
home.enphaseenergy.com
europe.pool.ntp.org
for assistance in
to have the new Envoy added
141-00014 Rev 04