Howto:Innovaphones public services

Applies To

This information applies to

• All versions

Services

Some services or products use a data connection to the vendor system. Innovaphone will provide his services from the following IP-networks:

46.232.228.0/26
213.144.10.192/29
141.95.57.16/28
2a0f:ff00:2001:366::21/128
45.133.189.205/32

To configure your firewall accordingly, allow those entire networks as shown above.

STUN

STUN Service for all customers

stun.innovaphone.com (udp/3478)

Note: It is not a good idea to use innovaphone's STUN server. Although this server would yield the same results, there is no guarantee of availability. Your ISP or SIP provider's STUN should do better

TURN

TURN fallback service on port 443 for all customers

turn-fallback.innovaphone.com (tcp/443)

Note: This TURN server shall only be used as 443 fallback server. It is not intended to be used as your regular TURN server as it is not designed as a primary TURN server. Do not use turn.innovaphone.com either.

Provisioning

Provisioning System for all devices

config.innovaphone.com (tcp/http/https)

Push

Push for iOS, Android, Huawei and Browser Clients

push.innovaphone.com (tcp/https/wss)

Store

store.innovaphone.com (tcp/http/https)

Devices/Rental

my-app.innovaphone.com (tcp/https)

NTP

NTP Service for all customers

ntp.innovaphone.com (udp/123)

Remote Control Central ID service

Central ID service server

remotecontrol.innovaphone.com (tcp/https/wss)

Certificates

innovaphone provides a public certificate download for used public keys.

• https://download.innovaphone.com/certificates/innovaphone.pem (the current innovaphone public key which will used for example for our push service)
• https://download.innovaphone.com/certificates/ca.pem (all innovaphone Device Certification Authority public keys)
• https://download.innovaphone.com/certificates/ca-unverified.pem (all innovaphone Unverified Device Certification Authority public keys)
  • The Unverified CA is used for non hardware devices, e.g. IPVAs, which are not shipped with an official innovaphone Device Certification Authority certificate, as innovaphone has no control over the serial number here.

If needed, you can trust them manually or distribute them via device's configuration.

Related Articles

• Reference13r2:Concept_Push_Notifications_for_iOS_and_Android
• Concept Status innovaphone Services
• Reference13r1:Concept_Provisioning
• Howto:Update_innovaphone.com_Wildcard-Certificate_in_a_Device_Trustlist