{"title":"Network configuration","category":"default","creationDate":1567160460,"content":"<p>When you make a point-of-sale transaction, your POS app, terminal, and Adyen need to be able to communicate with one another. The <a href=\"#network-communications-flow\">flow of this communication<\/a> depends on whether your integration uses local or cloud communications. To enable this communication, you need to <a href=\"#configuring-your-network\">configure your network<\/a> to allow access to specific ports and addresses.<\/p>\n<h2>Requirements<\/h2>\n<table>\n<thead>\n<tr>\n<th style=\"text-align: left;\">Requirement<\/th>\n<th style=\"text-align: left;\">Description<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: left;\"><strong>Integration type<\/strong><\/td>\n<td style=\"text-align: left;\">A <a href=\"\/point-of-sale\/basic-tapi-integration\/\">Terminal API integration<\/a> with payment terminals.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Limitations<\/strong><\/td>\n<td style=\"text-align: left;\">Take into account the following limitations: <ul><li markdown=\"1\">If you are using <a href=\"#tls-10-and-11-deprecation\">TLS 1.0 or 1.1 for local communications<\/a>, terminals on software versions v1.81 and later will not be able to process transactions.<\/li><li markdown=\"1\">Note, that in case of <a href=\"#handling-loss-of-internet-connectivity\">loss of internet connectivity<\/a> offline payments are only available for integrations that use <a href=\"\/point-of-sale\/design-your-integration\/choose-your-architecture\/local\">local communications<\/a>.<\/li><\/ul><\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Setup steps<\/strong><\/td>\n<td style=\"text-align: left;\">Before you begin: <ul><li markdown=\"1\">Optionally, contact our <a href=\"https:\/\/ca-test.adyen.com\/ca\/ca\/contactUs\/support.shtml?form=other\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" class=\"external-link no-image\">Support Team<\/a> if you want to be <a href=\"#get-notified-about-ip-address-changes\">informed about IP address changes<\/a> in a local communication. Provide them with:<\/li><ul><li markdown=\"1\">The URL to an endpoint where you want to receive the new IP address of a terminal.<\/li><li markdown=\"1\">The access credentials of the endpoint.<\/li><\/ul><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2 id=\"network-communications-flow\">Network communications flow<\/h2>\n<p>When you make a transaction, your integration uses one of the following communications flows:<\/p>\n<ul>\n<li><a href=\"#local-communications\">Local communications<\/a>.<\/li>\n<li><a href=\"#cloud-communications\">Cloud communications<\/a>.<\/li>\n<\/ul>\n<h3 id=\"local-communications\">Local communications<\/h3>\n<p><a rel=\"lightbox\" href=\"\/user\/pages\/docs\/03.point-of-sale\/04.design-your-integration\/07.network-and-connectivity\/01.network-configuration\/Local_network.png\" src=\"\">\n  <img alt=\"\" src=\"\/user\/pages\/docs\/03.point-of-sale\/04.design-your-integration\/07.network-and-connectivity\/01.network-configuration\/Local_network.png\" \/>\n<\/a><\/p>\n<h3 id=\"cloud-communications\">Cloud communications<\/h3>\n<p><a rel=\"lightbox\" href=\"\/user\/pages\/docs\/03.point-of-sale\/04.design-your-integration\/07.network-and-connectivity\/01.network-configuration\/Cloud_network.png\" src=\"\">\n  <img alt=\"\" src=\"\/user\/pages\/docs\/03.point-of-sale\/04.design-your-integration\/07.network-and-connectivity\/01.network-configuration\/Cloud_network.png\" \/>\n<\/a><\/p>\n<h2>Communications security<\/h2>\n<p>In accordance with PCI-DSS requirements, we use Transport Layer Security (TLS) 1.2 for secure data transmission over the internet.<\/p>\n<h3>TLS 1.0 and 1.1 deprecation<\/h3>\n<p>In September 2022, with terminal software version 1.81, we deprecated TLS 1.0 and 1.1. This means that if you are still using TLS 1.0 or 1.1 for <a href=\"#local-communications\">local communications<\/a>, terminals on software versions v1.81 and later will not be able to process transactions.<\/p>\n<div class=\"notices green\">\n<p>If you are using <a href=\"#cloud-communications\">cloud communications<\/a>, nothing changes because our cloud endpoints do not accept TLS versions below 1.2.<\/p>\n<\/div>\n<h4>Check your current TLS library version and cipher suite<\/h4>\n<p>If you are using the latest version of your operating system, you are probably already using TLS 1.2 or 1.3 protocols. For non-Android terminals on software version 1.80 and later, you can check the current TLS version, cipher, and URL by running the <a href=\"\/point-of-sale\/pos-troubleshooting\/connection-tests#local-communications-tls\">Local communications TLS test<\/a>.<br \/>\nYou can also check the TLS library version and cipher suites of your operating system:<\/p>\n<ul>\n<li>Windows: to list the supported cipher suites, open the PowerShell terminal and use the command <a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/tls\/get-tlsciphersuite?view=windowsserver2022-ps\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" class=\"external-link no-image\">\n  <code>Get-TlsCipherSuite<\/code>\n<\/a>. For TLS versions supported on your Windows OS, refer to <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/secauthn\/protocols-in-tls-ssl--schannel-ssp-#tls-protocol-version-support\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" class=\"external-link no-image\">TLS protocol version support<\/a>.<\/li>\n<li>OS X \/ iOS: for supported TLS protocol versions and cipher suites, refer to <a href=\"https:\/\/support.apple.com\/guide\/security\/tls-security-sec100a75d12\/web\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" class=\"external-link no-image\">Apple Platform Security<\/a> documentation.<\/li>\n<li>Linux \/ Unix: to list the cipher suites with the supported TLS protocol version, open a shell terminal and use the command <code>openssl ciphers -v | column -t<\/code>.<\/li>\n<\/ul>\n<div class=\"notices green\">\n<p>You can use websites like <a href=\"https:\/\/ciphersuite.info\/cs\/?software=openssl&amp;singlepage=true\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" class=\"external-link no-image\">ciphersuite.info<\/a> to learn more about ciphers suites. For example, you can filter the list of cipher suites by <strong>TLS Version<\/strong>.<\/p>\n<\/div>\n<h4>Supported ciphers<\/h4>\n<p>When you upgrade to TLS protocol version 1.2, make sure you use one of the following ciphers:<\/p>\n<ul>\n<li>TLS 1.2 AES256-GCM-SHA384<\/li>\n<li>TLS 1.2 AES256-SHA256<\/li>\n<li>TLS 1.2 AES128-GCM-SHA256<\/li>\n<li>TLS 1.2 AES128-SHA256<\/li>\n<\/ul>\n<h2 id=\"configuring-your-network\">Configuring your network<\/h2>\n<p>To configure your network for point of sale communications:<\/p>\n<ol>\n<li>\n<p>If you need to allowlist IP addresses, add Adyen's in-person payments URLs to your firewall's allowlist.<\/p>\n<ol>\n<li>Add Adyen's domains to your firewall's allowlist.<br \/>\nConfigure your firewall to allow outgoing HTTPS traffic from the IP addresses of your POS apps and terminals to:\n<ul>\n<li><code>*.adyen.com<\/code><\/li>\n<li><code>*.adyenpayments.com<\/code><\/li>\n<\/ul><\/li>\n<\/ol>\n<p>Allowlisting should be based on the DNS name of these URLs. Your firewall should dynamically check for IP address updates, at least every 60 seconds.<\/p>\n<div class=\"notices red\">\n<p>Do not hard-code Adyen's IP addresses, because these can change over time. We do not share a list of our IP addresses publicly.<\/p>\n<\/div>\n<\/li>\n<li>\n<p>Open the ports:<\/p>\n<ul>\n<li><span translate=\"no\"><strong>tcp\/443<\/strong><\/span> to the internet.<\/li>\n<li>\n<p><span translate=\"no\"><strong>tcp\/8443<\/strong><\/span> on your LAN.<\/p>\n<!-- list separator -->\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>If your integration uses <a href=\"\/point-of-sale\/design-your-integration\/choose-your-architecture\/local\">local communications<\/a>:<\/p>\n<ul>\n<li>Make sure that your terminal and POS app are connected to the same local network.<\/li>\n<li><a href=\"\/point-of-sale\/design-your-integration\/choose-your-architecture\/local#protect-communications\">Protect the communications<\/a> between your POS app and the terminal.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>If you are using a legacy setup where the cash register and the terminal communicate over a serial connection, use hardware flow control.<\/p>\n<\/li>\n<\/ol>\n<h2 id=\"configuring-the-terminal-IP-address\">Configuring the terminal IP address<\/h2>\n<p>To send payments for online authorization, the terminal must have a valid IP address. There are several ways to assign an IP address to a terminal:<\/p>\n<ul>\n<li><strong>Dynamic IP<\/strong>: your DHCP server issues an IP address to the terminal on the fly.<\/li>\n<li><strong>DHCP reservation<\/strong>: on the DHCP server, you bind an IP address to the terminal's MAC address. The DHCP server then assigns the exact same IP address to the terminal each time. This is an alternative to using static IP addresses, especially if you are dealing with a large number of terminals.<\/li>\n<li><strong>Static IP<\/strong>: you enter the IP address and other network configuration details manually on the terminal.<\/li>\n<\/ul>\n<p>It is not possible to configure an IP address from the Customer Area.<\/p>\n<p>You cannot use a mix of dynamic and static IPs. The IP address of the terminal and the IP addresses of the DNS server and router must be either all dynamic, or all static.<\/p>\n<p>By default, DHCP is enabled on the payment terminal. With this setting, your DHCP server issues an IP address to the terminal, either dynamically or through DHCP reservation (if you have set that up). If you are using a V400m with a Bluetooth base station, the base station too has DHCP enabled and receives an IP address from your DHCP server.<\/p>\n<h3 id=\"ip-recommendations\">Recommendations<\/h3>\n<ul>\n<li>\n<p>If it is possible to set the DHCP lease time on the DHCP server, set this to 24 hours or more. The lease time is the time that the terminal keeps an IP address before the DHCP server renews the terminal's lease on the IP address.<\/p>\n<\/li>\n<li>\n<p>In an integration with <em>cloud communications<\/em>, you should use dynamic IP addresses without DHCP reservation.<\/p>\n<\/li>\n<li>\n<p>In an integration with <em>local communications<\/em>, you should either use DHCP reservation, or manually configure static IP addresses.<\/p>\n<\/li>\n<\/ul>\n<h3>Get notified about IP address changes<\/h3>\n<p>When a terminal's IP address changes in a local communication because of an issue or because it connected to a different access point, there is a risk of losing connection to your POS app. When this happens, you can configure your terminal to automatically send you the new IP address when it is back online.<br \/>\nTo configure this, you need to contact our <a href=\"https:\/\/ca-test.adyen.com\/ca\/ca\/contactUs\/support.shtml?form=other\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" class=\"external-link no-image\">Support Team<\/a> and provide them with:<\/p>\n<ul>\n<li>The URL to an endpoint where you want to receive the new IP address of a terminal.<\/li>\n<li>The access credentials of the endpoint.  <\/li>\n<\/ul>\n<p>When this feature is enabled, the terminal sends a webhook to that endpoint with the <code>uniqueTerminalId<\/code> and the <code>new_ip<\/code> address of the terminal. <\/p>\n<div data-component-wrapper=\"code-sample\">\n    <code-sample :title=\"'Example webhook IP address change'\" :id=\"''\" :code-data='[{\"language\":\"json\",\"tabTitle\":\"\",\"content\":\"{\\n    \\\"new_ip\\\": YOUR_NEW_TERMINAL_IP,\\n    \\\"uniqueTerminalId\\\": YOUR_UNIQUE_TERMINAL_ID\\n}\"}]' :enable-copy-link-to-code-block=\"true\" :code-sample-card-size=\"'fullsize'\"><\/code-sample>\n<\/div>\n<p>You can then use the terminals ID and the new IP address to reestablish the connection to the terminal from your POS app.<\/p>\n<h3>Defining a static IP address<\/h3>\n<p>If you have an integration with local communications and cannot use a DHCP server with DHCP reservation, you need to disable DHCP and define a static IP address for the terminal.<\/p>\n<ol>\n<li>On the connected terminal, <a href=\"\/point-of-sale\/menu-access\/\">open the Admin menu<\/a>.<\/li>\n<li>Select <strong>Network<\/strong> and enter the <a href=\"\/point-of-sale\/menu-access\/#manage-passcodes\">Admin &amp; Settings<\/a> passcode.<\/li>\n<li>Open the settings for the network you are connected to.\n<div class=\"notices green\">\n<p>The terminal UI for network settings depends on the operating system version. You may need to long-press the network name or select the gear icon to access advanced settings.<\/p>\n<\/div><\/li>\n<li>Under <strong>IP Settings<\/strong>, turn off <strong>DHCP<\/strong> or select <strong>Static<\/strong>.<\/li>\n<li>Enter your network details:\n<ul>\n<li>IP address of the terminal - this must be unique in the network<\/li>\n<li>Subnet mask of the network<\/li>\n<li>IP address of the router<\/li>\n<li>IP addresses of the preferred DNS server (<span translate=\"no\"><strong>DNS1<\/strong><\/span>) and the alternate DNS server (<span translate=\"no\"><strong>DNS2<\/strong><\/span>)<\/li>\n<\/ul><\/li>\n<li>Select <strong>Save<\/strong> or <strong>Apply<\/strong> to confirm.<\/li>\n<\/ol>\n<p><\/li>\n<\/ol>\n<h2>General networking recommendations<\/h2>\n<p>To prevent network issues from interfering with your point of sale transactions, we recommend that you:<\/p>\n<ul>\n<li>\n<p>Use a segmented network, dedicated to point of sale communications.<\/p>\n<\/li>\n<li>\n<p>Make a DNS server accessible from your local network. This should be able to resolve <code>*.adyen.com<\/code> and <code>*.adyenpayments.com<\/code>.<\/p>\n<div class=\"notices blue\">\n<p>If you use a caching name-server, the Time to live (TTL) set by Adyen must be honored (60 seconds for Disaster Recovery).<\/p>\n<\/div>\n<\/li>\n<li>\n<p>Follow our <a href=\"#ip-recommendations\">guidelines for IP address configuration<\/a>.<\/p>\n<\/li>\n<li>\n<p>If you use intrusion detection (IDS) and prevention systems (IPS), ensure they are using up-to-date firmware and signatures. If these are out of date, the encrypted communications used by your integration may be disrupted.<\/p>\n<\/li>\n<li>\n<p>Connect the whole POS system, including the terminals, to an uninterrupted power supply (UPS).<\/p>\n<\/li>\n<li>\n<p>Use a cellular backup connection by:<\/p>\n<ul>\n<li>Having an automatic cellular failover on your main router.<\/li>\n<li>\n<p>Using terminals that have a built-in cellular connection, such as a portable or mobile terminal.<\/p>\n<!-- list separator -->\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>If the network connection is fine but you are noticing issues with terminals and payments that seem to point to network connection problems, see <a href=\"\/point-of-sale\/design-your-integration\/network-and-connectivity\/networking-issues#avoid-mtu-issues\">Dropped network packets when the internet connection is available<\/a>.<\/p>\n<\/li>\n<\/ul>\n<h2>Wi-Fi recommendations<\/h2>\n<p>To connect your payment terminals over Wi-Fi, your access point needs to support:<\/p>\n<ul>\n<li>WPA\/WPA2-Enterprise encryption, or WPA\/WPA2-Personal encryption.<\/li>\n<li>2.4Ghz or 5Ghz frequencies.<\/li>\n<\/ul>\n<p>In addition, we recommend that you:<\/p>\n<ul>\n<li><a href=\"\/point-of-sale\/design-your-integration\/network-and-connectivity\/wi-fi-profiles\">Configure a remote Wi-Fi profile<\/a>.\n<div class=\"notices blue\">\n<p>To use Enterprise encryption, using a remote Wi-Fi profile is mandatory.<\/p>\n<\/div><\/li>\n<li>Use a dedicated private wireless network.<\/li>\n<li>If your integration uses <a href=\"\/point-of-sale\/design-your-integration\/choose-your-architecture\/local\">local communications<\/a>, disable the <em>Wireless Isolation<\/em>, <em>AP Isolation<\/em>, <em>Client Isolation<\/em>, or other similar features on your access point.<\/li>\n<li>Check what <a href=\"\/point-of-sale\/design-your-integration\/network-and-connectivity\/network-configuration\/wifi-channels\">Wi-Fi frequencies and channels<\/a> your payment terminal supports in your region. <\/li>\n<\/ul>\n<p>Note that when the terminal indicates it is connected to your Wi-Fi network, this doesn't necessarily mean that it is connected to the internet. There can be issues with the connection from your Wi-Fi network to the internet.<\/p>\n<h2 id=\"handling-loss-of-internet-connectivity\">Handling loss of internet connectivity<\/h2>\n<div class=\"sc-notice info\"><div>\n<p>When a transaction is declined because of a network connection issue, the error condition you receive for the transaction is <span translate=\"no\"><strong>UnreachableHost<\/strong><\/span>.<\/p>\n<\/div><\/div>\n<p>There are several ways you can continue making transactions when your primary internet connection is unavailable. These are:<\/p>\n<ul>\n<li><a href=\"\/point-of-sale\/design-your-integration\/network-and-connectivity\/cellular-failover\">Use a cellular failover connection<\/a>. When your primary internet connection fails, transactions are processed using the cellular connection of either a 3G\/4G payment terminal or a cellular router.<\/li>\n<li>\n<p><a href=\"\/point-of-sale\/offline-payment\">Enable offline transactions<\/a>. This will allow you to continue processing transactions when your store has no internet connection.<\/p>\n<div class=\"notices blue\">\n<p>Offline payments are only available for integrations that use <a href=\"\/point-of-sale\/design-your-integration\/choose-your-architecture\/local\">local communications<\/a>.<\/p>\n<\/div>\n<div class=\"notices red\">\n<p>You are fully liable for the risk of failed captures, chargebacks, and disputes related to offline payments.<\/p>\n<\/div>\n<\/li>\n<\/ul>\n<h2>Using a proxy<\/h2>\n<p>Adyen-supplied payment terminals do not support proxy connections. If your network uses a proxy, allow your terminals to bypass the proxy and connect directly to the Adyen payments platform.<\/p>\n<h2>See also<\/h2>\n<div class=\"see-also-links output-inline\" id=\"see-also\">\n<ul><li><a href=\"\/point-of-sale\/design-your-integration\/choose-your-architecture\/local\"\n                        target=\"_self\"\n                        >\n                    Local communications\n                <\/a><\/li><li><a href=\"\/point-of-sale\/design-your-integration\/choose-your-architecture\/local#protect-communications\"\n                        target=\"_self\"\n                        >\n                    Protecting local communications\n                <\/a><\/li><li><a href=\"\/point-of-sale\/design-your-integration\/choose-your-architecture\/cloud\"\n                        target=\"_self\"\n                        >\n                    Cloud communications\n                <\/a><\/li><\/ul><\/div>\n","url":"https:\/\/docs.adyen.com\/point-of-sale\/design-your-integration\/network-and-connectivity\/network-configuration","articleFields":{"description":"Recommendations for configuring your network.","last_edit_on":"07-10-2020 09:29","page_id":"e0811c52-e107-4727-ba2b-21c486dce38c","feedback_component":true,"filters_component":false,"decision_tree":"[]"},"algolia":{"url":"https:\/\/docs.adyen.com\/point-of-sale\/design-your-integration\/network-and-connectivity\/network-configuration","title":"Network configuration","content":"When you make a point-of-sale transaction, your POS app, terminal, and Adyen need to be able to communicate with one another. The flow of this communication depends on whether your integration uses local or cloud communications. To enable this communication, you need to configure your network to allow access to specific ports and addresses.\nRequirements\n\n\n\nRequirement\nDescription\n\n\n\n\nIntegration type\nA Terminal API integration with payment terminals.\n\n\nLimitations\nTake into account the following limitations: If you are using TLS 1.0 or 1.1 for local communications, terminals on software versions v1.81 and later will not be able to process transactions.Note, that in case of loss of internet connectivity offline payments are only available for integrations that use local communications.\n\n\nSetup steps\nBefore you begin: Optionally, contact our Support Team if you want to be informed about IP address changes in a local communication. Provide them with:The URL to an endpoint where you want to receive the new IP address of a terminal.The access credentials of the endpoint.\n\n\n\nNetwork communications flow\nWhen you make a transaction, your integration uses one of the following communications flows:\n\nLocal communications.\nCloud communications.\n\nLocal communications\n\n  \n\nCloud communications\n\n  \n\nCommunications security\nIn accordance with PCI-DSS requirements, we use Transport Layer Security (TLS) 1.2 for secure data transmission over the internet.\nTLS 1.0 and 1.1 deprecation\nIn September 2022, with terminal software version 1.81, we deprecated TLS 1.0 and 1.1. This means that if you are still using TLS 1.0 or 1.1 for local communications, terminals on software versions v1.81 and later will not be able to process transactions.\n\nIf you are using cloud communications, nothing changes because our cloud endpoints do not accept TLS versions below 1.2.\n\nCheck your current TLS library version and cipher suite\nIf you are using the latest version of your operating system, you are probably already using TLS 1.2 or 1.3 protocols. For non-Android terminals on software version 1.80 and later, you can check the current TLS version, cipher, and URL by running the Local communications TLS test.\nYou can also check the TLS library version and cipher suites of your operating system:\n\nWindows: to list the supported cipher suites, open the PowerShell terminal and use the command \n  Get-TlsCipherSuite\n. For TLS versions supported on your Windows OS, refer to TLS protocol version support.\nOS X \/ iOS: for supported TLS protocol versions and cipher suites, refer to Apple Platform Security documentation.\nLinux \/ Unix: to list the cipher suites with the supported TLS protocol version, open a shell terminal and use the command openssl ciphers -v | column -t.\n\n\nYou can use websites like ciphersuite.info to learn more about ciphers suites. For example, you can filter the list of cipher suites by TLS Version.\n\nSupported ciphers\nWhen you upgrade to TLS protocol version 1.2, make sure you use one of the following ciphers:\n\nTLS 1.2 AES256-GCM-SHA384\nTLS 1.2 AES256-SHA256\nTLS 1.2 AES128-GCM-SHA256\nTLS 1.2 AES128-SHA256\n\nConfiguring your network\nTo configure your network for point of sale communications:\n\n\nIf you need to allowlist IP addresses, add Adyen's in-person payments URLs to your firewall's allowlist.\n\nAdd Adyen's domains to your firewall's allowlist.\nConfigure your firewall to allow outgoing HTTPS traffic from the IP addresses of your POS apps and terminals to:\n\n*.adyen.com\n*.adyenpayments.com\n\n\nAllowlisting should be based on the DNS name of these URLs. Your firewall should dynamically check for IP address updates, at least every 60 seconds.\n\nDo not hard-code Adyen's IP addresses, because these can change over time. We do not share a list of our IP addresses publicly.\n\n\n\nOpen the ports:\n\ntcp\/443 to the internet.\n\ntcp\/8443 on your LAN.\n\n\n\n\n\nIf your integration uses local communications:\n\nMake sure that your terminal and POS app are connected to the same local network.\nProtect the communications between your POS app and the terminal.\n\n\n\nIf you are using a legacy setup where the cash register and the terminal communicate over a serial connection, use hardware flow control.\n\n\nConfiguring the terminal IP address\nTo send payments for online authorization, the terminal must have a valid IP address. There are several ways to assign an IP address to a terminal:\n\nDynamic IP: your DHCP server issues an IP address to the terminal on the fly.\nDHCP reservation: on the DHCP server, you bind an IP address to the terminal's MAC address. The DHCP server then assigns the exact same IP address to the terminal each time. This is an alternative to using static IP addresses, especially if you are dealing with a large number of terminals.\nStatic IP: you enter the IP address and other network configuration details manually on the terminal.\n\nIt is not possible to configure an IP address from the Customer Area.\nYou cannot use a mix of dynamic and static IPs. The IP address of the terminal and the IP addresses of the DNS server and router must be either all dynamic, or all static.\nBy default, DHCP is enabled on the payment terminal. With this setting, your DHCP server issues an IP address to the terminal, either dynamically or through DHCP reservation (if you have set that up). If you are using a V400m with a Bluetooth base station, the base station too has DHCP enabled and receives an IP address from your DHCP server.\nRecommendations\n\n\nIf it is possible to set the DHCP lease time on the DHCP server, set this to 24 hours or more. The lease time is the time that the terminal keeps an IP address before the DHCP server renews the terminal's lease on the IP address.\n\n\nIn an integration with cloud communications, you should use dynamic IP addresses without DHCP reservation.\n\n\nIn an integration with local communications, you should either use DHCP reservation, or manually configure static IP addresses.\n\n\nGet notified about IP address changes\nWhen a terminal's IP address changes in a local communication because of an issue or because it connected to a different access point, there is a risk of losing connection to your POS app. When this happens, you can configure your terminal to automatically send you the new IP address when it is back online.\nTo configure this, you need to contact our Support Team and provide them with:\n\nThe URL to an endpoint where you want to receive the new IP address of a terminal.\nThe access credentials of the endpoint.  \n\nWhen this feature is enabled, the terminal sends a webhook to that endpoint with the uniqueTerminalId and the new_ip address of the terminal. \n\n    \n\nYou can then use the terminals ID and the new IP address to reestablish the connection to the terminal from your POS app.\nDefining a static IP address\nIf you have an integration with local communications and cannot use a DHCP server with DHCP reservation, you need to disable DHCP and define a static IP address for the terminal.\n\nOn the connected terminal, open the Admin menu.\nSelect Network and enter the Admin &amp; Settings passcode.\nOpen the settings for the network you are connected to.\n\nThe terminal UI for network settings depends on the operating system version. You may need to long-press the network name or select the gear icon to access advanced settings.\n\nUnder IP Settings, turn off DHCP or select Static.\nEnter your network details:\n\nIP address of the terminal - this must be unique in the network\nSubnet mask of the network\nIP address of the router\nIP addresses of the preferred DNS server (DNS1) and the alternate DNS server (DNS2)\n\nSelect Save or Apply to confirm.\n\n\n\nGeneral networking recommendations\nTo prevent network issues from interfering with your point of sale transactions, we recommend that you:\n\n\nUse a segmented network, dedicated to point of sale communications.\n\n\nMake a DNS server accessible from your local network. This should be able to resolve *.adyen.com and *.adyenpayments.com.\n\nIf you use a caching name-server, the Time to live (TTL) set by Adyen must be honored (60 seconds for Disaster Recovery).\n\n\n\nFollow our guidelines for IP address configuration.\n\n\nIf you use intrusion detection (IDS) and prevention systems (IPS), ensure they are using up-to-date firmware and signatures. If these are out of date, the encrypted communications used by your integration may be disrupted.\n\n\nConnect the whole POS system, including the terminals, to an uninterrupted power supply (UPS).\n\n\nUse a cellular backup connection by:\n\nHaving an automatic cellular failover on your main router.\n\nUsing terminals that have a built-in cellular connection, such as a portable or mobile terminal.\n\n\n\n\n\nIf the network connection is fine but you are noticing issues with terminals and payments that seem to point to network connection problems, see Dropped network packets when the internet connection is available.\n\n\nWi-Fi recommendations\nTo connect your payment terminals over Wi-Fi, your access point needs to support:\n\nWPA\/WPA2-Enterprise encryption, or WPA\/WPA2-Personal encryption.\n2.4Ghz or 5Ghz frequencies.\n\nIn addition, we recommend that you:\n\nConfigure a remote Wi-Fi profile.\n\nTo use Enterprise encryption, using a remote Wi-Fi profile is mandatory.\n\nUse a dedicated private wireless network.\nIf your integration uses local communications, disable the Wireless Isolation, AP Isolation, Client Isolation, or other similar features on your access point.\nCheck what Wi-Fi frequencies and channels your payment terminal supports in your region. \n\nNote that when the terminal indicates it is connected to your Wi-Fi network, this doesn't necessarily mean that it is connected to the internet. There can be issues with the connection from your Wi-Fi network to the internet.\nHandling loss of internet connectivity\n\nWhen a transaction is declined because of a network connection issue, the error condition you receive for the transaction is UnreachableHost.\n\nThere are several ways you can continue making transactions when your primary internet connection is unavailable. These are:\n\nUse a cellular failover connection. When your primary internet connection fails, transactions are processed using the cellular connection of either a 3G\/4G payment terminal or a cellular router.\n\nEnable offline transactions. This will allow you to continue processing transactions when your store has no internet connection.\n\nOffline payments are only available for integrations that use local communications.\n\n\nYou are fully liable for the risk of failed captures, chargebacks, and disputes related to offline payments.\n\n\n\nUsing a proxy\nAdyen-supplied payment terminals do not support proxy connections. If your network uses a proxy, allow your terminals to bypass the proxy and connect directly to the Adyen payments platform.\nSee also\n\n\n                    Local communications\n                \n                    Protecting local communications\n                \n                    Cloud communications\n                \n","type":"page","locale":"en","boost":16,"hierarchy":{"lvl0":"Home","lvl1":"In-person payments","lvl2":"Design your integration","lvl3":"Network and connectivity","lvl4":"Network configuration"},"hierarchy_url":{"lvl0":"https:\/\/docs.adyen.com\/","lvl1":"https:\/\/docs.adyen.com\/point-of-sale","lvl2":"https:\/\/docs.adyen.com\/point-of-sale\/design-your-integration","lvl3":"https:\/\/docs.adyen.com\/point-of-sale\/design-your-integration\/network-and-connectivity","lvl4":"\/point-of-sale\/design-your-integration\/network-and-connectivity\/network-configuration"},"levels":5,"category":"In-person payments","category_color":"green","tags":["Network","configuration"]},"articleFiles":{"Cloud_network.png":"<img alt=\"\" src=\"https:\/\/docs.adyen.com\/user\/pages\/docs\/03.point-of-sale\/04.design-your-integration\/07.network-and-connectivity\/01.network-configuration\/Cloud_network.png\" \/>","Local_network.png":"<img alt=\"\" src=\"https:\/\/docs.adyen.com\/user\/pages\/docs\/03.point-of-sale\/04.design-your-integration\/07.network-and-connectivity\/01.network-configuration\/Local_network.png\" \/>"}}
