Skip to main content
All CollectionsCommand Connector
Command Connector Network Settings
Command Connector Network Settings
Updated over a week ago

This article outlines the required network settings for your Command Connector to communicate with non-Verkada cameras and Verkada Command. For more information on the required network settings for other Verkada product lines, see Required Network Settings.

Important. The Command Connector has 2 RJ-45 Ethernet Interfaces. Only connect one of the interfaces to your network. Connecting both interfaces could lead to a Layer 2 loop.

IP address

The Command Connector must be assigned an IPv4 address to communicate on the LAN and with Verkada Command. The Command Connector obtains its IP address and network configurations using Dynamic Host Configuration Protocol (DHCP) and User Datagram Protocol (UDP).

Note: The Command Connector has two ethernet interfaces. If you are using IP address reservations, it is recommended to configure two reservations—one for each Ethernet port.

Domain Name System

Command Connectors use a DNS server to resolve Verkada’s fully qualified domain names (FQDN) to IP addresses to communicate with them. Your DHCP server tells the Command Connector where the DNS server is on the network, and it communicates using UDP port 53.

Note: DNS over HTTPS (DoH) is currently not supported.

Non-Verkada cameras

Verify the Command Connector and non-Verkada camera are on the same Local Area Network (LAN). Dynamic NAT or L3 translation is not supported between the devices.

The Command Connector and non-Verkada cameras need bidirectional traffic to communicate. The non-Verkada cameras must be online and discoverable over the network to establish a connection.

The Command Connector connects to non-Verkada cameras over the LAN using port 4100. Non-Verkada cameras use port 554 to serve RTSP streams and port 80, 8080, or 443 to serve ONVIF.

Verify these ports are allowed on the network:

  • TCP+UDP ports 80, 8080, 443: Enables the Command Connector to read and set camera parameters using ONVIF.

  • TCP+UDP port 554: Enables the Command Connector to ingest RTSP video streams from non-Verkada cameras.

  • Port 3702: Enables WS-Discovery so the Command Connector can discover and connect to non-Verkada cameras over the LAN.

Firewall settings

Command Connectors require access to many endpoints to ensure they can communicate with Command and all features will be accessible. Many customers may want to allow the Command Connector to communicate with the general required endpoints.

These are the general domains to allow, applicable for all organizations:

  • 34.216.15.26 - UDP/123

  • *:4100 - TCP/UDP on LAN

  • *.verkada.com - UDP/123 + TCP+UDP/443

  • time.cloudflare.com - TCP/4460 + UDP/123

  • *.amazonaws.com - TCP+UDP/443

  • *.backblazeb2.com - TCP/443

If your firewall does not allow wildcard masking, or you prefer to have the entire FQDN of the endpoint in your firewall rules, you can add the domains to your allowlist.

  • 34.216.15.26 - UDP/123

  • *:4100 - TCP/UDP on LAN (only required for local streaming)

  • api.control.verkada.com - TCP+UDP/443

  • api-ga.control.verkada.com - TCP+UDP/443

  • api.global-prod.control.verkada.com - TCP+UDP/443

  • device-nlb.verkada.com - TCP+UDP/443

  • device.pyramid.verkada.com - TCP+UDP/443

  • firmware.control.verkada.com - TCP+UDP/443

  • index.control.verkada.com - TCP+UDP/443

  • nlb.verkada.com - TCP+UDP/443

  • relay.control.verkada.com - TCP+UDP/443

  • relay.global-prod.control.verkada.com - TCP+UDP/443

  • time.control.verkada.com - UDP/123

  • update.control.verkada.com - TCP+UDP/443

  • vlogging.command.verkada.com - TCP+UDP/443

  • user.pyramid.verkada.com - TCP+UDP/443

  • vconductor.global-prod.command.verkada.com - TCP+UDP/443

  • *.vnetcap.control.verkada.com - TCP/443

  • *.vosprey.vnetcap.control.verkada.com - TCP/443

  • *.vstream.vnetcap.control.verkada.com - TCP/443

  • *.vsubmit.vnetcap.control.verkada.com - TCP/443

  • *.vprovision.vnetcap.control.verkada.com - TCP/443

  • *.vproxy.vnetcap.control.verkada.com - TCP/443

  • *.kinesisvideo.us-west-2.amazonaws.com - TCP+UDP/443

  • s3.ap-southeast-2.amazonaws.com - TCP/443†*

  • s3.ca-central-1.amazonaws.com - TCP/443†*

  • s3.us-west-004.backblazeb2.com - TCP/443†

  • s3.eu-central-003.backblazeb2.com - TCP/443†*

  • s3.eu-west-1.amazonaws.com - TCP/443†*

  • time.cloudflare.com - TCP/4460 + UDP/123


Need more help? Contact Verkada Support.

Did this answer your question?