Router settings

Use this page when a device connects to WiFi but does not show as connected in the app. Use it also before an installation on a network with a strict firewall. Menu names are different on each router. See the manual of your router.

All requirements are on the Network requirements page.

1. Turn on the 2.4 GHz network

1. Open the admin page of the router.
2. Find the wireless settings.
3. Make sure that the 2.4 GHz band is on.
4. If the router uses one network name for 2.4 GHz and 5 GHz (band steering), give the 2.4 GHz band its own name. This helps during setup.
5. Set the security to WPA2-PSK or mixed WPA2/WPA3. Do not use WPA3 only.

Note

A 20 MHz channel width is necessary only for the older numeric families (8, 10, 14, 15, 20, 25, 29). The serial number shows the family, for example 20:123.

2. Allow the outbound ports

1. Open the firewall settings.
2. Allow outbound TCP 9002 to *.hamsystems.eu.
3. Allow outbound TCP 443 to *.hamsystems.eu.
4. For the phones and computers that open the app, also allow outbound TCP 9001 to *.hamsystems.eu.

You do not need port forwarding. The device always opens the connection outwards.

Test port 9002

From a computer on the same network, make sure that outbound port 9002 is open. Use a public port test service that accepts connections on port 9002. If the connection fails, the firewall or the internet provider blocks the port.

3. Give a fixed address with a DHCP reservation

The device gets its address only from DHCP. If you need a fixed address:

1. Find the MAC address of the device in the client list of the router.
2. Open the DHCP settings of the router.
3. Add an address reservation (Address Reservation or DHCP Binding) for the MAC address.
4. Restart the device. The device gets the new address.

4. Check DNS and filters

• DNS must return addresses for the *.hamsystems.eu names.
• If you use DNS filtering, add hamsystems.eu to the allow list.
• If the network has a captive portal (a login page), devices cannot pass it. Use a different network or exclude the devices.

5. Turn off SSL inspection for the devices

A firewall with SSL inspection or a transparent TLS proxy opens the TLS connection. Then the mutual authentication fails and the device does not connect. Exclude the HAM devices (by their MAC or IP address) from SSL inspection.

6. Check the guest network

Guest networks often have client isolation. Client isolation stops the device setup. Do the setup on a network without isolation.

If the device still does not connect

If the router or the internet provider changed, the device still has the old WiFi details. Do the WiFi setup again. See change the WiFi network and device is offline.

If the problem continues, contact support.