MV Cloud Connectivity and Firewall Requirements

Last updated
Save as PDF

Overview

Firewall requirements

The MV cameras use the standard Meraki cloud connection IP addresses and ports. They also require connection to compute and storage resources in regional data centers for video processing services. These services use different IP addresses and ports to other Meraki products. If you have a firewall that drops outbound connections unless they are specifically defined, this will prevent your MV camera from streaming video as well as impact other MV related features.

The most up-to-date list of outbound ports and IP addresses for your particular organization can be found under Help > Firewall Info.

Example Firewall Info

This image displays Firewall Rules.

Cloud connectivity troubleshooting

The historical connectivity graph shows offline periods but the camera remained connected to the cloud

This can occur when connectivity to the primary server is affected. The historical connectivity graph is intended to track primary server connectivity, and connectivity states to the backup server are not tracked consistently. To resolve this, ensure firewall rules permit traffic to the primary servers, which are listed under Help > Firewall Info.

You may see an alert under the Network tab of the camera when primary server connectivity is affected, which is phrased as "Connection to the Cisco Meraki Cloud is using the backup Cloud connection. Ensure that all rules on the Firewall configuration page are allowed on your upstream firewalls."

Configuration changes are not being applied to the camera

There may be a connectivity issue between the camera and the cloud which prevents configuration updates from being applied. Refer to the troubleshooting steps in the following article sections Configuration is out of date and Outdated/Unreachable Configuration.

You may see an alert under the Network tab of the camera, which is phrased as "Configuration is out of date. This device is unable to fetch its configuration from the Meraki cloud. This is preventing your device from updating its configuration. How to resolve this error."

Exposed interfaces at factory default state

In its factory default configuration, the Cisco Meraki MV Camera exposes only the following network interfaces:

Ethernet LAN port: (and Wi-Fi radio if present, model-dependent)

In its factory default configuration, the Cisco Meraki MV Camera exposes only the following services on the network interfaces:

TCP port 443 (HTTPS): For encrypted communications with the Meraki Dashboard and Tunnel Server
TCP port 53 (DNS client): For outbound DNS resolution of cloud endpoints

All other ports and services are closed and not accessible in the default configuration. No unencrypted or unauthenticated administrative services are exposed.