Ports and Protocols

You must configure your network to permit communication to-and-from the Sapphire Cloud hosting your instance.  Here is a list of the ports and protocols required.

Overview

Outbound access must be allowed to this IP range 64.65.61.0/24 which is where 7SIGNAL customer cloud instances are hosted.

Outbound access must be allowed to 192.237.169.61 for provisioning/management.

Outbound access must be allowed to 108.166.5.195 for diagnostics.

NTP/123 outbound must also be allowed.

Required for Sapphire Eye Connectivity

Source Destination Protocol/Port Purpose
Sapphire Eye Ethernet IP redirector.7signal.com  DNS (TCP/UDP 53) Cloud Redirector Service
Sapphire Eye Ethernet IP 64.65.61.0/24 TCP/7799  Cloud Management 
Sapphire Eye Ethernet IP 64.65.61.0/24 TCP/7800  Cloud Management 

Recommended for Sapphire Eye Connectivity

Source Destination

Protocol/Port

Purpose
Sapphire Eye Ethernet IP 108.166.5.195 SYSLOG (UDP/514) Health Monitoring
Sapphire Eye Ethernet IP time1.google.com NTP (UDP/123) Time
Sapphire Eye Ethernet IP time2.google.com NTP (UDP/123) Time
Sapphire Eye Ethernet IP time3.google.com NTP (UDP/123) Time
Sapphire Eye Ethernet IP time4.google.com NTP (UDP/123) Time

Required for Sonar® Cloud Endpoint Testing

Source Destination Protocol/Port  Purpose
Sapphire Eye Ethernet/Wi-Fi Sonar Server HTTP (TCP/80) Throughput Test 
Sapphire Eye Ethernet/Wi-Fi Sonar Server UDP/50000-50300  Voice Quality Test 
Sapphire Eye Ethernet/Wi-Fi Sonar Server ICMP  Ping Test 

Sonar Cloud Endpoints

FQDN IP Address Location
east1.sonar.7signal.com 185.59.223.104 New Jersey, US
east2.sonar.7signal.com 89.187.176.135 New York, US
central1.sonar.7signal.com 185.93.0.180 Atlanta, US
midwest1.sonar.7signal.com 185.93.1.59 Chicago, US
pacific1.sonar.7signal.com 185.152.67.214 San Francisco, US
emea1.sonar.7signal.com 89.187.169.70 Frankfurt, DE
emea2.sonar.7signal.com 195.181.165.171 London, GB
apac1.sonar.7signal.com 89.187.162.74 Singapore

Port Check Utility

Below are download links to utilities that test whether you have met these basic requirements. Ensure that you run the script from a machine on the same vlan that the Sapphire Eyes will use.

The ‘Welcome to Sapphire Cloud’ email you received from 7SIGNAL Support tells you which Sapphire Could instance is hosting your account. Edit the first line of the script and set the $carat parameter to the fully qualified domain name URL corresponding to your cloud instance.

7SIGNAL Port Check for Windows PowerShell

7SIGNAL Port Check for MacOS

Additional Port Check Verification

After a Sapphire Eye is plugged into the network, you may find that it cannot connect to the cloud.  If so, you can SSH to the Sapphire Eye and run the 7config conn check command to gain more insight. You should expect to see the following output:

Success: Carat server reachable by using carat_ip:7799
Success: TLS connection established to Carat carat_ip:7799
Success: Carat server reachable by using carat_ip:7800
Success: TLS connection established to Carat carat_ip:7800