Technical data

Envoy Installation and Operation
 2014 Enphase Energy Inc. 141-00011 Rev 05
35
WARNING: Do not change the Envoy DHCP setting to use a static IP address unless you also
reserve the same IP address on the broadband router. See the section on DHCP reservations in
the router instructions. Failure to reserve the static IP address on the router will result in
duplicate IP addresses and intermittent Internet connection problems with the Envoy.
MAC Filtering
Check to see if MAC filtering is in use at the site. This has nothing to do with Apple Macintosh computers, but
rather, refers to the MAC (Media Access Control) address that each individual network card possesses. The
MAC Address is a 48-bit address, which uniquely identifies that piece of hardware. MAC filtering is a security
mechanism by which routers allow administrators to specify which devices can use the router for access to
the Internet. This prevents unauthorized/unknown personnel from using the router to get to the Internet.
An example of a MAC address would be: 00:17:F2:D6:B1:45
MAC addresses contain six pairs of characters, including any number 0-9 and letters A-F.
The MAC address of the Envoy will begin with: 00:D0:69:41:
If MAC filtering is in use at the site, identify the specific MAC address of the Envoy and add it to list of
authorized devices on the router. To do this, browse to the home page of the Envoy’s web-service using an
ordinary web-browser. The home page contains that specific Envoy unit’s MAC address. The MAC address
is also located on a sticker that is located on the back of the Envoy.
Firewall Settings
The Envoy initiates outbound connections to Internet servers. Such connections may be restricted by
firewall rules set up on the site’s broadband router. Broadband routers typically allow all outbound
connections but restrict any/all inbound connections.
If outbound firewall rules are applied at the site, you must configure a static IP address for the Envoy and
add new rules that allow outbound access as follows:
Direction
Source
Protocol
Port
Destination
OUT
<Envoy IP address>
TCP
443
reports.enphaseenergy.com
OUT
<Envoy IP address>
TCP
443
securereports.enphaseenergy.com
OUT
<Envoy IP address>
TCP
443
home.enphaseenergy.com
OUT
<Envoy IP address>
UDP
123
us.pool.ntp.org
The Envoy connects to these servers using their DNS names. If you add firewall rules for Envoy reporting,
Enphase recommends using the DNS names rather than the underlying IP addresses. This is because the IP
addresses are subject to change without notice.