Posts: 20
Threads: 4
Joined: Nov 2020
Reputation:
0
Hi,
I'm having trouble accessing my webinterface through VPN set up by a client. Also having trouble accessing the programming interface via LM in ETS when connected to VPN.
The IT department at my client asked me what ports that needed to be opened up.
I said TPC 80 or 443 and UDP 3671.
Anything else that needs to be opened?
Posts: 7765
Threads: 42
Joined: Jun 2015
Reputation:
447
Yes, it's TCP 80/443 for the web interface and UDP 3671 for KNX tunneling. Access to the KNX port is blocked from public IP ranges. In some rare cases internal networks are misconfigured to use public IP ranges. Private ranges are defined as follows:
10.0.0.0 – 10.255.255.255
172.16.0.0 – 172.31.255.255
192.168.0.0 – 192.168.255.255
Posts: 20
Threads: 4
Joined: Nov 2020
Reputation:
0
Hi, thanks for the reply.
That's strange, I've asked for 80 and 443 TCP and 3671 UDP. And the LM is on range 172.22.74.xxx. Are there any other issues that might stop my connection?
Posts: 21
Threads: 6
Joined: Dec 2015
Reputation:
0
Hello asgeirsb.
Are you Shute that you entered the correct subnet mask and gateway?
Posts: 20
Threads: 4
Joined: Nov 2020
Reputation:
0
04.07.2022, 18:24
(This post was last modified: 04.07.2022, 18:25 by asgeirsb.)
When I think about it I am actually not sure I did. I need to contact IT again and ask them what is the correct subnet mask and gateway. I just assumed the standard 255.255.255.0 and 172.22.74.1 gateway
Posts: 92
Threads: 16
Joined: Jan 2020
Reputation:
2
Hi.
Have you find any solution on your issue?
I have a similar issue. Have a ISE Remote access on site at client and a openVPN setup that have work fine until last week when I tried, now suddely I cant fine the IP adress of the controller and even when I ad a fixed route to the local IP of the controler it cant connect.
Posts: 167
Threads: 20
Joined: Apr 2017
Reputation:
2
14.10.2022, 13:31
(This post was last modified: 14.10.2022, 13:31 by Dré.)
You sure the VPN is working, did he connect ?
Does the controller work locally at the moment?
or maybe you can try a ping or a scan to find all the IP addresses?