Network & Infrastructure Requirements IL · Production
Mandatory network requirements for all Tabit restaurant sites. Intended for external network suppliers, IT teams, and 3rd party vendors.
Region: Israel (IL)
Environment: Production
Last updated: April 2025
Version: 1.0
Network Requirements
Required: Google Public DNS
8.8.8.8 / 8.8.4.4
Port 53 · UDP & TCP
All Tabit devices must be able to resolve DNS via Google Public DNS. This is critical for cloud connectivity, authentication, and all service endpoints.
1
Switch
- POE — For Access Points
- Remote Management Capability
- Short Circuit Protection
Unmanaged Switch: High probability of communication malfunctions — therefore, not approved.
2
Router + Modem
- Cellular SIM Slot compatibility — Cellular backup for Landline Failover
- Remote Management Capability
- The Backup SIM must be issued from a segregated provider — e.g., if the landline is Bezeq, the SIM must not relay from the same source
It is unnecessary to apply any restriction policy on the dedicated Tabit Network. No outbound firewall filtering, content filtering, or URL allowlisting should be applied to this network.
3
Wireless Access Points
- POE installation required
- 5GHz bandwidth — for optimal performance with Apple iPad & Mobile EMV Payment devices
- Dedicated SSID for Tabit devices — segregated from guest Wi-Fi
- Wi-Fi Signal Strength: minimum −65 dBm for optimal coverage
- Recommended coverage area: 25 m² per Access Point
- Password requirements (all SSIDs): minimum 8 characters — must include uppercase, lowercase, number, and special character
4
Internet Connection — Dedicated Network
- Minimal bandwidth: 40 / 3 Mb/s (download / upload)
- Recommended bandwidth: 100 / 5 Mb/s
- Cellular backup (4G/LTE) required for Landline Failover
5
Cabling & Physical Infrastructure
- Minimum recommendation: CAT6 POE cabling
- KDS, Kiosk, and Thermal Printers: Ethernet only — no Wi-Fi
- For every printer: an RJ socket and dedicated electrical outlet are required
- All network sockets must have a protective shutter
- Injector: used for the 2nd Access Point — bypasses the switch as a fail-safe in case of switch failure
6
Network Segmentation — VLAN & Static IP Configuration
- Tabit requires a dedicated network, fully isolated from guest and other business networks
- No captive portal or content filtering on the Tabit device network
- Static IP ranges configured locally by Tabit:
- Gateway: 10.100.10.254 / 10.100.10.1
- Access Points (reserved): 10.100.10.2 – 10.100.10.15
- DHCP — iPads & Wi-Fi devices: 10.100.10.16 – 10.100.10.150
- Kiosk: 10.100.10.200 – 10.100.10.209
- EMV Stationary Devices: 10.100.10.210 – 10.100.10.219
- IP Scales: 10.100.10.220 – 10.100.10.229
- Printers: 10.100.10.230 – 10.100.10.253
- UPS (Uninterruptible Power Supply) required for all main network equipment — ensures resilience during power failures
Services, Ports & Allowed Domains
Wildcard entries (e.g. *.tabit.cloud) cover all subdomains. All services entries are required on every device. Global = region-independent; IL = Israel only.
Non-standard ports: Synqpay Update TCP 9443 · NTP UDP 123 · PAD AMQP 5672/5671 · TeamViewer TCP 5938 · Apple APNs TCP 5223.
Google Public DNS — Critical: All devices must reach 8.8.8.8 and 8.8.4.4 on port 53 (UDP + TCP).
62
Total entries
62
Showing
32
App domains
30
Infra / 3rd party
| Endpoint / Domain | Protocol | Port | Required by | Category |
|---|
No entries match your filter or search.
Legend
All services All Tabit products
TG Tabit Go — POS terminal
KDS Kitchen Display System
Kiosk Self-service kiosk
Office Tabit Office
PAD Payment & Android Device
Guest Display Customer display
Auth Authentication
Infra Monitoring & observability
Payments Payment gateways
DNS DNS resolution
TeamViewer Remote support
MDM Mobile Device Management
Apple Apple / APNs / enrollment
Windows Windows Update & services