# Ignition OPC UA connectivity and Firewall configuration

**URL:** <https://forum.inductiveautomation.com/t/ignition-opc-ua-connectivity-and-firewall-configuration/35458>\
**Category:** Ignition\
**Created:** [June 9, 2020, 3:07pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-ua-connectivity-and-firewall-configuration/35458 "2020-06-09T15:07:08Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![SaravanaKumar.S2](https://avatars.discourse-cdn.com/v4/letter/s/8edcca/32.png) [@SaravanaKumar.S2](https://forum.inductiveautomation.com/u/SaravanaKumar.S2)\
**Post date:** [June 9, 2020, 3:07pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-ua-connectivity-and-firewall-configuration/35458/1 "2020-06-09T15:07:08Z")

</div>

Dear Ignition team,

I have to establish a OPC-UA connectivity between 2 ignition gateways

**1) Ignition OPC UA Server running on OT network(Yokogawa DCS network)**  
**2) Ignition OPC UA Client running on IT network**  
**3) These 2 gateways will be connected through firewall**

I have few question about above configuration

**1) What are the port numbers I should allow through firewall?**  
**2) IP address class is different for IT and OT network, in this case what specific action I should perform?**

Included the system architecture here:

[Yokogawa-Ignition OPC-UA connectivity\_Transition\_020.pdf](https://forum.inductiveautomation.com/uploads/short-url/t2HZrZVvnphwmu8DS3b3DRjAGxT.pdf) (233.0 KB)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [June 10, 2020, 1:21pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-ua-connectivity-and-firewall-configuration/35458/2 "2020-06-10T13:21:52Z")

</div>

> [@SaravanaKumar.S2](#):
>
> 1. What are the port numbers I should allow through firewall?

As your diagram already suggests, you'll need to allow the client to connect to the server on port 62541.

> [@SaravanaKumar.S2](#):
>
> 1. IP address class is different for IT and OT network, in this case what specific action I should perform?

If the traffic is routable and subnet masks are correct, maybe nothing? This is largely something that IT or whoever is handling the network setup must handle. The 2 networks need to be able to talk to each other, they should be able to make that happen somehow. If you end up using NAT then the OPC UA server should have the IP address the client is using to reach it added to its Endpoint Address list.

---

<div class="post-metadata">

**Author:** ![SaravanaKumar.S2](https://avatars.discourse-cdn.com/v4/letter/s/8edcca/32.png) [@SaravanaKumar.S2](https://forum.inductiveautomation.com/u/SaravanaKumar.S2)\
**Post date:** [June 10, 2020, 2:05pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-ua-connectivity-and-firewall-configuration/35458/3 "2020-06-10T14:05:17Z")

</div>

> [@Kevin.Herron](#):
>
> As your diagram already suggests, you’ll need to allow the client to connect to the server on port 62541.

Hi Kevin,

Thanks for quick reply 🙂

Do I need to enable anyother port apart from 62541 for Ignition gateways to communicate?

Regards,  
Saravanan.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [June 10, 2020, 3:01pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-ua-connectivity-and-firewall-configuration/35458/4 "2020-06-10T15:01:56Z")

</div>

Not if you’re just using OPC UA between the gateways.

---

<div class="post-metadata">

**Author:** ![SaravanaKumar.S2](https://avatars.discourse-cdn.com/v4/letter/s/8edcca/32.png) [@SaravanaKumar.S2](https://forum.inductiveautomation.com/u/SaravanaKumar.S2)\
**Post date:** [June 11, 2020, 3:02am UTC](https://forum.inductiveautomation.com/t/ignition-opc-ua-connectivity-and-firewall-configuration/35458/5 "2020-06-11T03:02:03Z")

</div>

Thankyou keviin