Envoy-S Installation and Operation
2016 Enphase Energy Inc.
141-00031 Rev 01
38
MAC Filtering
Check to see if MAC filtering is in use at the site. This has nothing to do with Apple Macintosh computers,
but rather, refers to the MAC (Media Access Control) address that each individual network card
possesses. The MAC Address is a 48-bit address, which uniquely identifies that piece of hardware. MAC
filtering is a security mechanism by which routers allow administrators to specify which devices can use
the router for access to the Internet. This prevents unauthorised/unknown personnel from using the
router to get to the Internet.
An example of a MAC address would be: 00:17:F2:D6:B1:45
MAC addresses contain six pairs of characters, including any number 0-9 and letters A-F.
The MAC address of the Envoy will begin with: 00:D0:69:
If MAC filtering is in use at the site, identify the specific MAC address of the Envoy and add it to list of
authorised devices on the router. The MAC addresses (wired and wireless) are located on a label on the
back of the Envoy.
Firewall Settings
The Envoy initiates
outbound
connections to Internet servers. Such connections may be restricted by
firewall rules set up on the site’s broadband router. Broadband routers typically allow all outbound
connections but restrict any/all inbound connections.
If outbound firewall rules are applied at the site, you must configure a static IP address for the Envoy and
add new rules that allow outbound access as follows:
Direction Source
Protocol
Port
Destination
OUT
<Envoy IP address>
TCP
80
reports.enphaseenergy.com
OUT
<Envoy IP address>
UDP
80
ping-udp.enphaseenergy.com
OUT
<Envoy IP address>
TCP
443
home.enphaseenergy.com
The Envoy connects to these servers using their DNS names. If you add firewall rules for Envoy
reporting, Enphase recommends using the DNS names rather than the underlying IP addresses. This is
because the IP addresses are subject to change without notice.
