Configuring a gateway with Wi-Fi

Make sure your network is ready for Amper devices

Verify network and gateway compatibility

1. Supported networks:
   - 2.4GHz only
   - WPA2 (most common)
   - WPA
   - WEP
   - Unsecured/open
2. Unsupported networks:
   - 5GHz
   - WPA-2 Enterprise networks
   - WPA3
   - Hidden SSID networks
   - Networks that require a captive portal login (e.g. guest network with login or terms agreement popup)
   - Static IP assignment (Note: If you wish to assign a device to a specific IP address, you must allocate one in your network's DHCP settings based on the device's MAC addresses, which Amper can provide if needed.)

Configure your network for devices

All device connections are outbound, but devices both send and receive data on each connection. Make sure that the following domains and ports are whitelisted in your firewall.
(You must whitelist using the domain, not the resolved IP address.)

1. Required service: Particle (device management)
   - Protocol: UDP
   - Port: 5684
   - Destination: *.udp.particle.io
   - Notes: Dynamic IP pool; firewall must use domain and not resolved IP addresses.
   
2. Required service: AWS (data transfer)
   - Protocol: TCP
   - Port: 8883
   - Destination: a1z2vcintpz3vi-ats.iot.us-west-2.amazonaws.com
   - Notes: Dynamic IP pool; firewall must use domain and not resolved IP addresses.
3. Legacy required service: Particle (legacy gateways without button)
   - Protocol: TCP
   - Port: 5683
   - Destination: device.tcp.particle.io
   - Notes: Dynamic IP pool; firewall must use domain and not resolved IP addresses.
4. Domains open (outbound connections)
   DNS domain filtering must use DNS group filtering, not single-host DNS filtering.
   - device.spark.io
   - device.nodes.spark.io
   - device.udp.particle.io
   - device.tcp.particle.io
   - a1z2vcintpz3vi-ats.iot.us-west-2.amazonaws.com
5. Device MAC addresses whitelisted
   If your network restricts access to unknown devices by MAC address, go to the Hardware page in the Amper app to download your device MAC addresses for your network administrator.