Devices in the edge gateway's LAN network are trying to reach a local domain that is inside the same LAN network or the company network, but they cannot reach it.

The edge gateway's DNS rebind protection feature blocks the use of private IP ranges by domains. This protection is used to prevent DNS rebinding attacks.

There are 2 solutions to this problem.

Solution 1 - Configure a forward DNS

1. Connect your computer to one of the LAN ports.
   • The local web interface is not accessible from the WAN side (Internet port).
2. Open a new browser tab and go to the edge gateway's LAN IP address.
   • The default LAN IP address is 192.168.27.1.
   • Make sure that your laptop has an IP address in the same range. You may need to configure this manually. There are many online guides on this if you need a step by step guide.
3. Go to Configuration and log in.
   • The default password (PW) is printed on the side of the edge gateway.
   • If there is no password printed on the side, this edge gateway was manufactured before the local web interface was created. That means it does not have a password and you cannot proceed using this method. Instead, use the IXON Cloud method. Additionally, once the edge gateway is online and has a VPN connection, we can configure a password for you. Please then contact us by granting us support access at Fleet Manager > Tools and tell us the serial number of the edge gateway.
   • If you enter an incorrect password multiple times in a row, you'll need to wait roughly 5 minutes before you can try again. The number of attempts is limited to 5 attempts per 5 minutes.
   • You can change the password by logging in and going to Account in the bottom left corner.
4. Go to WAN > LAN > DHCP, and add a Forward DNS (details below).

   Field	Description
   Domain	Enter the local domain. You can enter the higher-level domain if you wish to allow all domains that end with the higher-level domain. For example, if the domain is "myserver.scada.local", you can enter the full domain to only forward that specific domain, or enter "scada.local" to forward all domains that end with "scada.local", or enter "local" to forward all domains that end with "local".
   IP address	Enter the IP address of the DNS server inside the company network.

5. Click on Apply to save the settings.

Solution 2 - Disable DNS rebind protection

1. Go to Fleet Manager > Devices and click on your device name.
2. Go to Network > Firewall.
3. Under LANWAN, turn off DNS rebind protection.

You have now made the changes in the IXON Cloud, but these are not yet active in your device. You will need to push your changes to your device for them to take effect.

4. Click on Push config to device.