---
title: Manage Firewall Rules
slug: manufacturing-connect-edge-v2/manage-firewall-rules
docTags: 
createdAt: 2023-11-20T18:32:12.936Z
---

You can manage firewall rules to open specific ports or port ranges for inbound communication by navigating to **System **> **Network **and clicking the **Firewall **tab. 

:::hint{type="info"}
**Notes**: 

- These firewall rules apply only to IPv4 traffic. 
- Only Admin users are able to add and edit firewall rules. See [Users](docId\:Tls9-yYfMMtuyr9lRmpPD) to learn more. 
:::

The **Firewall **pane allows you to do the following:

- Review what ports are being used by Manufacturing Connect Edge system components, applications, and containers. 
- Ensure that any DeviceHub drivers and Docker container applications are not running on conflicting ports. 
- Open ports and port ranges with appropriate protocol (TCP/UDP) for Docker applications, containers, and DeviceHub drivers.
- Manage and close ports as needed. 

You can review any firewall changes in **System **> **Events**. 

The pane shows a summary of what ports are currently open. 

![](https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/SdOvWUEjDMhmxVl-N_GQa_image.png)

# List of Reserved Ports

There are some ports that cannot be used for firewall rules because they are reserved for system services. 

Review the list of reserved ports. 

| **Reserved Port or Port Range** | **System Service that Uses Port(s)**        |
| ------------------------------- | ------------------------------------------- |
| 21                              | FTP                                         |
| 22                              | SSH                                         |
| 80                              | HTTP                                        |
| 123                             | NTP                                         |
| 389                             | LDAP                                        |
| 443                             | Manufacturing Connect API                   |
| 636                             | LDAP with SSL                               |
| 1880                            | Manufacturing Connect Edge UI REST endpoint |
| 2121                            | FTP                                         |
| 4840                            | OPC UA                                      |
| 5353                            | mDNS                                        |
| 5355                            | LLMNR                                       |
| 8081-8199                       | REST API endpoints                          |
| 9081-9199                       | gRPC API endpoints                          |
| 8883                            | MQTT to Manufacturing Connect               |
| 51280                           | Manufacturing Connect Remote Access         |

# Add Port Rule

1. Navigate to **System **> **Network **and click the **Firewall **tab. 
2. Click **Add Rule**.
   The *Add Inbound Rule *dialog displays.
   ![](https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/0e-h3d5D0I0knXfUmIYjM_add-firewall-rule.png)
3. Configure the parameters for the firewall rule.
   - **Port or Port Range**: Enter a single port number or a range of port numbers separated by a hyphen (-). 
   - **Protocol**: Select **TCP **(transmission control protocol) or **UDP **(user datagram protocol). 
   - **Interface**: Select **eth0 **or **eth1**. 
   - (**Optional) Service Name or Description**: Enter a name for the rule. 
4. Click **Add**. 
   The new rule displays on the pane. 

# Manage Port Rules

To manage port rules, click the **Action menu **for a rule. 

![](https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/0Z198HqzF9mnOPGNsEUQx_image.png)

- **Edit**: Update the rule. 
- **Delete**: Remove the rule and close the port or port range.