300-430 · Question #165
A corporation has employees working from their homes. A wireless engineer must connect 1810 OEAP at remote teleworker locations. All configuration has been completed on the controller side, but the…
The correct answer is B. Allow UDP ports 5246 and UDP port 5247 on the firewall. C. Allow UDP ports 12222 and 12223 on the firewall. To ensure the 1810 OEAP can join the controller from remote teleworker locations, the firewall must allow specific UDP ports that are used for AP communication with the controller. UDP ports 5246 and 5247 are used for Control and Provisioning of Wireless Access Points (CAPWAP)…
Question
A corporation has employees working from their homes. A wireless engineer must connect 1810 OEAP at remote teleworker locations. All configuration has been completed on the controller side, but the network readiness is pending. Which two configurations must be performed on the firewall to allow the AP to join the controller? (Choose two.)
Options
- ABlock UDP ports 1812 and 1813 on the firewall.
- BAllow UDP ports 5246 and UDP port 5247 on the firewall.
- CAllow UDP ports 12222 and 12223 on the firewall.
- DEnable NAT Address on the 5520 with an Internet-routable IP address.
- EConfigure a static IP on the OEAP 1810.
How the community answered
(32 responses)- A3% (1)
- B88% (28)
- D6% (2)
- E3% (1)
Explanation
To ensure the 1810 OEAP can join the controller from remote teleworker locations, the firewall must allow specific UDP ports that are used for AP communication with the controller. UDP ports 5246 and 5247 are used for Control and Provisioning of Wireless Access Points (CAPWAP) control and data messages, while UDP ports 12222 and 12223 are used for OfficeExtend APs' data traffic. Blocking these ports would prevent the APs from joining the controller, hence they must be allowed on the firewall. 3/b_Cisco_OfficeExtend_Access_Point_.pdf
Topics
Community Discussion
No community discussion yet for this question.