Mac Filtering; Firewall Settings - enphase Envoy Installation And Operation Manual

WARNING: Do not change the Envoy DHCP setting to use a static IP address unless you also
reserve the same IP address on the broadband router. See the section on DHCP reservations in
the router instructions. Failure to reserve the static IP address on the router will result in
duplicate IP addresses and intermittent Internet connection problems with the Envoy.

MAC Filtering

Check to see if MAC filtering is in use at the site. This has nothing to do with Apple Macintosh computers, but
rather, refers to the MAC (Media Access Control) address that each individual network card possesses. The
MAC Address is a 48-bit address, which uniquely identifies that piece of hardware. MAC filtering is a security
mechanism by which routers allow administrators to specify which devices can use the router for access to
the Internet. This prevents unauthorized/unknown personnel from using the router to get to the Internet.
An example of a MAC address would be:
MAC addresses contain six pairs of characters, including any number 0-9 and letters A-F.
The MAC address of the Envoy will begin with:
If MAC filtering is in use at the site, identify the specific MAC address of the Envoy and add it to list of
authorized devices on the router. To do this, browse to the home page of the Envoy's web-service using an
ordinary web-browser. The home page contains that specific Envoy unit's MAC address. The MAC address
is also located on a sticker that is located on the back of the Envoy.

Firewall Settings

The Envoy initiates outbound connections to Internet servers. Such connections may be restricted by
firewall rules set up on the site's broadband router. Broadband routers typically allow all outbound
connections but restrict any/all inbound connections.
If outbound firewall rules are applied at the site, you must configure a static IP address for the Envoy and
add new rules that allow outbound access as follows:
Direction Source
OUT <Envoy IP address>
OUT <Envoy IP address>
OUT <Envoy IP address>
OUT <Envoy IP address>
The Envoy connects to these servers using their DNS names. If you add firewall rules for Envoy reporting,
Enphase recommends using the DNS names rather than the underlying IP addresses. This is because the IP
addresses are subject to change without notice.
35
00:17:F2:D6:B1:45
00:D0:69:41:
Protocol Port
TCP 443
TCP 443
TCP 443
UDP 123
 2014 Enphase Energy Inc.
Envoy Installation and Operation
Destination
reports.enphaseenergy.com
securereports.enphaseenergy.com
home.enphaseenergy.com
us.pool.ntp.org
141-00011 Rev 05