---
title: Manage Firewall Rules
slug: litmusedge-v1/product-features/system/network/manage-firewall-rules
description: Learn how to manage firewall rules in Litmus Edge. 
docTags: 
createdAt: 2023-12-14T14:32:09.156Z
---

:::hint{type="info"}
**Note**: This feature is available for Litmus Edge version 3.11.0 and later. 
:::

You can manage firewall rules to open specific ports or port ranges for inbound communication by navigating to **System **> **Network **and clicking the **Firewall **tab. 

:::hint{type="info"}
**Notes**: 

- These firewall rules apply only to IPv4 traffic. 
- Only Admin users are able to add and edit firewall rules. See [Users](docId\:Tls9-yYfMMtuyr9lRmpPD) to learn more. 
:::

The **Firewall **pane allows you to do the following:

- Review what ports are being used by Litmus Edge system components, applications, and containers. 
- Ensure that any DeviceHub drivers and Docker container applications are not running on conflicting ports. 
- Open ports and port ranges with appropriate protocol (TCP/UDP) for Docker applications, containers, and DeviceHub drivers.
- Manage and close ports as needed. 

You can review any firewall changes in **System **> **Events**. 

The pane shows a summary of what ports are currently open. 

![](https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/iNbLBGbFDdoudcacdIjsl_image.png "The Firewall pane")

# List of Reserved Ports

There are some ports that cannot be used for firewall rules because they are reserved for system services. 

Review the list of reserved ports. 

| **Reserved Port or Port Range** | **System Service that Uses Port(s)** |
| ------------------------------- | ------------------------------------ |
| 21                              | FTP                                  |
| 22                              | SSH                                  |
| 80                              | HTTP                                 |
| 123                             | NTP                                  |
| 389                             | LDAP                                 |
| 443                             | Litmus Edge Manager API              |
| 636                             | LDAP with SSL                        |
| 1880                            | Litmus Edge UI REST endpoint         |
| 2121                            | FTP                                  |
| 4840                            | OPC UA                               |
| 5353                            | mDNS                                 |
| 5355                            | LLMNR                                |
| 8081-8199                       | REST API endpoints                   |
| 9081-9199                       | gRPC API endpoints                   |
| 8883                            | MQTT to Litmus Edge Manager          |
| 51280                           | Litmus Edge Manager Remote Access    |

# Add Port Rule

1. Navigate to **System **> **Network **and click the **Firewall **tab. 
2. Click **Add Rule**. 
   The *Add Inbound Rule* dialog displays. 
   ::Image[]{src="https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/Rviq-YB7qxmjkIwJwXZi-_add-rule-button.png" size="80" width="1213" height="355" position="center" caption="Add Rule button" showCaption="true"}
3. Configure the parameters for the firewall rule.
   - **Port or Port Range**: Enter a single port number or a range of port numbers separated by a hyphen (-). 
   - **Protocol**: Select **TCP **(transmission control protocol) or **UDP **(user datagram protocol). 
   - **Interface**: Select **eth0 **or **eth1**. 
   - (**Optional) Service Name or Description**: Enter a name for the rule. 
4. Click **Add**. 
   The new rule displays on the pane. 

# Manage Port Rules

To manage port rules, click the **Action menu **for a rule. 

::Image[]{src="https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/z1AtmW3ZhV4HQ42nCpu21_image.png" size="80" width="1436" height="591" position="center" caption="Firewall rule action menu" showCaption="true"}

- **Edit**: Update the rule. 
- **Delete**: Remove the rule and close the port or port range.