Configuring a gateway with Wi-Fi

Make sure your network is ready for Amper devices

Verify network and gateway compatibility

1. Supported networks:
   - Both 2.4GHz and 5GHz
   - WPA2 (most common)
   - WPA
   - WEP
   - Unsecured/open
2. Unsupported networks:
   - WPA-2 Enterprise networks
   - WPA3
   - Hidden SSID networks
   - Networks that require a captive portal login (e.g. guest network with login or terms agreement popup)
   - Static IP assignment (Note: If you wish to assign a device to a specific IP address, you must allocate one in your network's DHCP settings based on the device's MAC addresses, which Amper can provide if needed.)

Configure your network for devices

All device connections are outbound, but devices both send and receive data on each connection. Make sure that the following domains and ports are whitelisted in your firewall.
(You must whitelist using the domain, not the resolved IP address.)

1. Required service: Particle (device management)
   - Protocol: UDP
   - Port: 5684
   - Destination: *.udp.particle.io
   - Notes: Dynamic IP pool; firewall must use domain and not resolved IP addresses.
   
2. Required service: AWS (data transfer)
   - Protocol: TCP
   - Port: 8883
   - Destination: a1z2vcintpz3vi-ats.iot.us-west-2.amazonaws.com
   - Notes: Dynamic IP pool; firewall must use domain and not resolved IP addresses.
3. Legacy required service: Particle (legacy gateways without button only)
   - Protocol: TCP
   - Port: 5683
   - Destination: device.tcp.particle.io
   - Notes: Dynamic IP pool; firewall must use domain and not resolved IP addresses.
4. Device MAC addresses whitelisted
   If your network restricts access to unknown devices by MAC address, go to the Hardware page in the Amper app to download your device MAC addresses for your network administrator.