300-715 · Question #129
An engineer is tasked with placing a guest access anchor controller in the DMZ. Which two ports or port sets must be opened up on the firewall to accomplish this task? (Choose two.)
The correct answer is B. TCP port 161 C. TCP port 514. To enable a guest access anchor controller in the DMZ, TCP ports 161 (for SNMP) and 514 (for Syslog) must be opened on the firewall for management and logging.
Question
An engineer is tasked with placing a guest access anchor controller in the DMZ. Which two ports or port sets must be opened up on the firewall to accomplish this task? (Choose two.)
Options
- AUDP port 1812 RADIUS
- BTCP port 161
- CTCP port 514
- DUDP port 79
- EUDP port 16666
How the community answered
(49 responses)- A10% (5)
- B69% (34)
- D4% (2)
- E16% (8)
Why each option
To enable a guest access anchor controller in the DMZ, TCP ports 161 (for SNMP) and 514 (for Syslog) must be opened on the firewall for management and logging.
UDP port 1812 is used for RADIUS authentication, which, while relevant for guest authentication, is not solely focused on the management and logging of the anchor controller itself as the question implies.
TCP port 161 is the standard port for SNMP (Simple Network Management Protocol) agents, used for network management and monitoring of devices like Wireless LAN Controllers. Opening this port allows the anchor controller to be managed and monitored from external management stations in the DMZ.
TCP port 514 is commonly used for Syslog, which is essential for sending logging and event messages from the WLC (anchor controller) to a syslog server for monitoring, auditing, and troubleshooting purposes.
UDP port 79 is for the Finger protocol, which is not typically used for guest access anchor controller operations or management.
UDP port 16666 is not a standard port for core guest access anchor controller operations or management.
Concept tested: Cisco WLC DMZ firewall ports
Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-0/configuration/guide/c70wlan_cg/c70_ports.html
Topics
Community Discussion
No community discussion yet for this question.