If your server is going to sit behind a firewall, you need to configure the firewall to allow the necessary traffic through. You need to open the following ports to allow the required traffic to pass through your firewall.
From the servers WAN IP address to the Internet (outbound):
We strongly recommend that you allow all traffic outbound from the WAN IP of your server to the Internet. We also strongly recommend that any form of traffic filtering is disabled.
However, if you do have to restrict what ports are open outbound - the following ports are required to be open Outbound, from the WAN IP of your EasyConnect server to the specified hosts:
A VPN tunnel needs to be established from the server to our Management Cloud, on either port UDP 1194 or TCP 443. The server will first try and use UDP 1194, and if that doesn't work will fall back to TCP 443.
- VPN Connection
UDP 1194 to 18.104.22.168 (access.prolianteasyconnect.com)
TCP 443 to 22.214.171.124 (access.prolianteasyconnect.com)
TCP and UDP 53 to DNS server IP specified in the Installation Console (126.96.36.199 by default)
- Other services
TCP 443 to 188.8.131.52 and 184.108.40.206
From the Internet to the servers WAN IP address (inbound):
If (and only if) you wish to use the End User VPN feature, you need to allow the VPN traffic through the firewall to the WAN IP address of your server. The port you need to open is below:
- UDP 1194
Note: this is only needed if you want to allow end users to use the client VPN from remote devices to make inbound VPN connections.
From the Internet to the servers iLO IP address (inbound):
The following ports are required to be open Inbound to the iLO port from the specified hosts. These ports can be changed in the Commissioning Console.
- TCP 20022 from 220.127.116.11 and 18.104.22.168
- TCP 20080 from 22.214.171.124 and 126.96.36.199
- TCP 20443 from 188.8.131.52 and 184.108.40.206
- TCP 20988 from 220.127.116.11 and 18.104.22.168
- TCP 20990 from 22.214.171.124 and 126.96.36.199
If you need any further help configuring your firewall please contact your Firewall vendor for support
Below are links to popular firewall documentation and support sites: