[NEBULA] Nebula remote IP address?

Chacha

Hi,
I want to lock down the nebula NAP access , i.e open the access in the firewall for NAP102.
From the support I can see the following ports are required : 123 UDP / 443 TCP / 6667 TCP
But what is the IP address to allow access from? Is inbound access required?

Your quick response will be the most welcome.

Nebula_Bayardo

Hey there!
The NCC IP address is 52.210.235.173 with server name: d.nebula.zyxel.com.
It's not required to configure inbound access. Under normal network settings, Nebula connection will be always successful, unless you have a default restriction for your outbound connections, then it will be required to open the access for the IP address and ports you already stated.

Last but not least, Welcome to our forum, I hope we will have a great time around here

Nebula_Bayardo

Hey there!
The NCC IP address is 52.210.235.173 with server name: d.nebula.zyxel.com.
It's not required to configure inbound access. Under normal network settings, Nebula connection will be always successful, unless you have a default restriction for your outbound connections, then it will be required to open the access for the IP address and ports you already stated.

Last but not least, Welcome to our forum, I hope we will have a great time around here

arthurdent

Hey, it has been a while, but i need to know if the adress has changed because the ip for d.nebula.zyxel.com is not the same like 52.210 an so on.

What are the ip and hostnames for zyxel nebula cloud today?

cheers

Zyxel_Melen

Hi @arthurdent,

Yes, the IP address of d.nebula.zyxel.com has been changed. You can use "nslookup" to find the current IP address. In addition, if you want to set the firewall rule, try using the domain name as an easier way.

arthurdent

Thanks for the quick reply! :) I guess using the domain name should be better because for sure youre using some kind of load balancer, right?

but some firewalls could not use domain names for rules… is there a way to get "all" possible ip adresses?

cheers

Zyxel_Melen

Hi @arthurdent,

You are correct. For the firewalls that cannot use domain name for rules, I think the only way is that using NSlookup to find the all IP address.