Purpose
This article outlines the networking requirements that are needed to accommodate, a ReadyTouch kiosk that utilizes a Meraki router, MM6 Mini Dining devices, as well as the 365 Dining Handheld.
Process
To view the network requirements for other products, please see the list of all Network Requirements.
Basic Networking Requirements
All 365 Kiosks Require:
- A persistent internet connection.
- A "persistent" network connection is always on. This can be the local network of the business where the kiosk is located, a dedicated DSL line, or any other "always on" type connection.
- A "persistent" network connection is always on. This can be the local network of the business where the kiosk is located, a dedicated DSL line, or any other "always on" type connection.
- A minimum speed of 2 Mbps up and 1 Mbps down.
- Firewall exceptions to allow both inbound and outbound connections (ports listed below).
The router creates a secure network connection between the devices plugged into the router and the 365 server. All traffic initiated from the kiosks travels through this secure, private connection.
This connection is called a VPN tunnel (Virtual Private Network) and uses a communication protocol called IPSec with IKE in order to create a private connection over public data pathways. The data is encrypted with two complex ciphers known as 3DES and AES.
White List Addresses
Below is a brief summary of what needs to be opened for the system to function properly.
| Description | FQDN/IP | Ports |
|---|---|---|
| POS Connection | *.readytouchpos.com | 443 |
| Software package updates | *.jfrog.io | 443 |
| Antivirus definition updates (Cisco Secure Endpoint) | *.amp.cisco.com | 443 |
| FreedomPay Credit Card Servers |
https://cs.freedompay.us/Freeway/Service.asmx https://cs.freedompay.us/CardStor/CardStorService.asmx 64.74.156.0/24 |
TCP: 443 |
| Apriva Credit Card Servers | 63.241.142.183 63.241.142.205 64.255.204.170 api.apriva.com t.apriva.com aibapp19.aprivaeng.com |
UDP/TCP: 11079, 11099 (if Split-Tunneling) |
| OS package updates | api.snapcraft.io *.download.docker.com |
443 |
| TeamViewer | *.teamviewer.com | UDP: 5938 TCP: 5938, 443, 80 |
| Messaging Queue Gateway | b-46fc5d10-881e-459c-bcc6-ad3299fae303-1.mq.us-east-2.amazonaws.com b-46fc5d10-881e-459c-bcc6-ad3299fae303-2.mq.us-east-2.amazonaws.com mq1-prod.365retailmarkets.com mq2-prod.365retailmarkets.com mq.prod.365rm.us *.prod.365rm.us mq1.prod.365rm.us mq2.prod.365rm.us mq3.prod.365rm.us mq4.prod.365rm.us mq5.prod.365rm.us mq6.prod.365rm.us mq7.prod.365rm.us mq8.prod.365rm.us |
TCP/UDP: 61617, 8155 |
| Order Ahead mobile app authentication service | *.365rm.us | TCP: 443, 80 |
| OS Security & Package Repos | http://ca.archive.ubuntu.com http://security.ubuntu.com |
TCP: 443, 80 |
| Operator using POS WiFi for inventory or sales on-site | https://readytouchpos.com https://adm.365retailmarkets.com https://adm.365retailmarkets.co.uk https://365mobileinventory.com/login |
** If you are unable to meet the above network requirements, please contact your account manager for options.
ReadyTouch Network Configuration
All new ReadyTouch POS have a Meraki VPN router.
Contact your local network administrator or 365's Support department at 888-365-6282 or support@365rm.com with any questions related to the network configuration.
Meraki Routers (VPN)
For new Dining implementations with more than 4 networked devices, a Meraki MX68W is used. Otherwise, newer ReadyTouch devices use a Meraki Z4 router. Older ReadyTouch devices may use the prior model, the Meraki Z3. All Meraki router models facilitate a secure VPN connection.
The Meraki router creates a secure network connection between the devices plugged into the router and the 365 server. This connection is called a VPN tunnel (Virtual Private Network) and uses a communication protocol called IPsec with IKE in order to create a private connection over public data pathways. The data is encrypted with two complex ciphers known as AES and 3DES.
Should the device utilize a Meraki Router, Meraki Cloud and Registry addresses will have to be whitelisted, as well as any above sections/requirements.
| Service | FQDN/IP | Ports |
|---|---|---|
| Meraki Cloud Communication and VPN Registry | 64.62.142.12/32 158.115.128.0/19 209.206.48.0/20 216.157.128.0/20 api.meraki.com |
UDP: 7351, 9350-9381 TCP: 80, 443 |
| IPsec VPN | 69.39.84.205/32 69.39.84.206/32 |
UDP: 32768 through 61000 |
| Continuous Router Uplink Status Checks | 8.8.8.8 8.8.4.4 |
UDP: 53 ICMP |
| Cisco Umbrella DNS for Meraki Router DHCP assignments | 208.67.222.222 208.67.220.220 |
UDP: 53 |
Router Setup and Installation
- Using an operator-provided network cable, connect the Internet port to your local internet connection jack. The maximum cable length is 100ft.
- Using the included network cable, connect one of the LAN ports to the kiosk.
- Using the included power adapter, plug the Power port into a nearby power outlet.
Change Log
| Date | Author | Notes |
| 8-26-2021 | CK | Created article from existing PDF. |
| 2-15-2022 | CK | Added note regarding PoE capability |
| 2-18-2022 | CK |
Updated Messaging Gateway section, added:
|
| 3-1-2022 | CK | Added "OS Security & Package Repos" row |
| 5-27-2022 | CK | Edited OS Security & Package Repos |
| 4-15-2025 | BM | Updated Port Info. for Meraki VPN Registry and Meraki Cloud Communication. |
| 7-2-2025 | BM | Added White list addresses - jfrog.io, api.snapcraft.io, amp.cisco.com. Also added VPN disclaimer below the White List Addresses section. |
| 7-7-2025 | BM |
Amended Descriptions for the jfrog.io, api.snapcraft.io, and amp.cisco.com FQDN/IPs under the White List Addresses section. Also amended the disclaimer below the White List Addresses section. |
| 7-22-2025 | CL |
Added image of Meraki MX68W router Added complete row to Whitelist for "POS Connection". Added aibapp19.aprivaeng.com to "Apriva Credit Card Servers". Added *.download.docker.com to "OS package Updates" |
| 9-11-2025 | CL | Removed https://prodrepo.365smartshop.com/ from OS Security and Package Repos & Messaging Queue Gateway |
| 10-28-2025 | ES | Split Meraki FQDNs to different section to isolate |
| 12-30-2025 | BM |
Updated Basic Networking Requirements section:
Updated Meraki Router (VPN) section:
|