Network Connection for On-Premise Lock Systems
Some lock systems run on a server at the property instead of in the cloud. For the LIKE MAGIC cloud to reach that server, a secure network connection is needed. This guide describes the three options, and the table in section 4 lists the port each lock system needs.
1. Site-to-Site VPN
LIKE MAGIC sets up a secure Site-to-Site VPN tunnel between its cloud infrastructure and your on-premise network. This option costs EUR 55.00 per month, which is what LIKE MAGIC pays Google for the VPN.
The configuration details are:
- VPN Gateway IP:
34.65.102.168 - Subnetwork:
10.100.0.64/26 - IKE version:
IKEv2 - IKE pre-shared key: define the key and share it securely with LIKE MAGIC, for example with onetimesecret.com
- Supported IKE Ciphers: Google Cloud VPN Supported IKE Ciphers
Share your VPN connection details with LIKE MAGIC via a Support Ticket, and allow traffic to the server on the port of your lock system (see section 4).
2. Firewall Allowlist
Alternatively, allow traffic from LIKE MAGIC's fixed egress IP address on your firewall, so that LIKE MAGIC can send requests to the server.
- Fixed Egress IP:
34.65.225.215
Share the server's IP address with LIKE MAGIC via a Support Ticket, and allow traffic on the port of your lock system (see section 4).
3. Internet Access
If the server is reachable from the internet, share its address with LIKE MAGIC via a Support Ticket.
4. Ports per Lock System
| Lock system | Port | Guide |
|---|---|---|
| Salto Space (ProAccess Space) | 8100 | Salto Space Integration |
| Assa Abloy Visionline | 443 | Assa Abloy (Visionline) |
5. Conclusion
An on-premise lock server is connected to LIKE MAGIC over a Site-to-Site VPN, a firewall allowlist or the internet. Whichever option you choose, allow traffic on the port of your lock system and share the connection details via a Support Ticket. The rest of the setup is described in the guide for your lock system.