nerdexam
Cisco

300-715 · Question #129

An engineer is tasked with placing a guest access anchor controller in the DMZ. Which two ports or port sets must be opened up on the firewall to accomplish this task? (Choose two.)

The correct answer is B. TCP port 161 C. TCP port 514. To enable a guest access anchor controller in the DMZ, TCP ports 161 (for SNMP) and 514 (for Syslog) must be opened on the firewall for management and logging.

Architecture and Deployment

Question

An engineer is tasked with placing a guest access anchor controller in the DMZ. Which two ports or port sets must be opened up on the firewall to accomplish this task? (Choose two.)

Options

  • AUDP port 1812 RADIUS
  • BTCP port 161
  • CTCP port 514
  • DUDP port 79
  • EUDP port 16666

How the community answered

(49 responses)
  • A
    10% (5)
  • B
    69% (34)
  • D
    4% (2)
  • E
    16% (8)

Why each option

To enable a guest access anchor controller in the DMZ, TCP ports 161 (for SNMP) and 514 (for Syslog) must be opened on the firewall for management and logging.

AUDP port 1812 RADIUS

UDP port 1812 is used for RADIUS authentication, which, while relevant for guest authentication, is not solely focused on the management and logging of the anchor controller itself as the question implies.

BTCP port 161Correct

TCP port 161 is the standard port for SNMP (Simple Network Management Protocol) agents, used for network management and monitoring of devices like Wireless LAN Controllers. Opening this port allows the anchor controller to be managed and monitored from external management stations in the DMZ.

CTCP port 514Correct

TCP port 514 is commonly used for Syslog, which is essential for sending logging and event messages from the WLC (anchor controller) to a syslog server for monitoring, auditing, and troubleshooting purposes.

DUDP port 79

UDP port 79 is for the Finger protocol, which is not typically used for guest access anchor controller operations or management.

EUDP port 16666

UDP port 16666 is not a standard port for core guest access anchor controller operations or management.

Concept tested: Cisco WLC DMZ firewall ports

Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-0/configuration/guide/c70wlan_cg/c70_ports.html

Topics

#Firewall Ports#DMZ Deployment#WLC Management#Network Operations

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice