The most common issue during the creation of cloud integration is that the connection between the AI Model Manager and the Cloud provider, times out. This can be caused by multiple issues, but most commonly it is connected to network settings. AI Model Manager executes actions through the Industrial Edge Management. In order for this process to go through correctly, the network and firewall configurations have to be set correctly on the Industrial Edge. The required setting can be found in the Industrial Edge Security overview 2.3.2 "IP protocols and ports"
All the required settings can be found in the Industrial Edge Security overview document. AI Model Manager API must be accessible from all Industrial Edge Devices that are the target of the deployments. The IED (physical or virtual) on which AI Model Manager is installed (Manager device) may have several network interfaces. One of them must be reachable from the target devices using the assigned IPv4 address. If the manager device and the target devices are connected to different networks, there must be a network route that makes this possible.
If you are installing AI Model Manager on a virtual device, we recommend that you configure a Bridged Network Adapter for the virtual machine. Then the virtual network adapter can have an IP address assigned from the host network.
In addition to the required network settings for Industrial Edge, the following ingress and egress rules must be implemented in the firewalls for the listed features to work.
Port |
Protocol |
Direction |
Usage/Feature |
8883, TCP |
MQTTS |
Egress |
Workspace with AWS Iot Core or Azure Iot Hub integration in case the connection is established using MQTT protocol over TLS transport. |
443, TCP |
MQTTS |
Egress |
Workspace with AWS Iot Core integration in case the connection is established using MQTT protocol over TLS and Application Layer Protocol Negotiation (ALPN). This rule applies to Siemens AI Services integration as well. |
443, TCP |
WSS |
Egress |
Workspace with Azure IoT Hub integration in case the connection is established using MQTT over Secure WebSockets |