Blocked ports on Cisco 2500 wlc

[Qwerty11111]

How can I tell which ports are being blocked on a cisco 2500 wlc?

i need to make sure the following ports are open https://support.apple.com/en-gb/HT202487

[AFROJ AHMAD]

AFAIK, i don't this we can check the TCP/UDP block ports via WLC ..

Thanks-

Afroz

[Qwerty11111]

We currently have an issue with profile manager sending app updates/settings.

Our network has two types of access point consisting of a xirrus array and a Cisco setup (using a wlc)

The profile manager is able to push apps/settings when a device is connected through the xirrus array, but not the cisco.

Is when the devices were enrolled they were done using wireless from the xirrus array.

Is there a likely cause that the devices cant be found when connected via a cisco AP?  (all aps provide access to same network)

[Leo Laohoo]

A WLC is a dumb switch.  Check if the WLC has ACL that are blocking ports. 

[Qwerty11111]

that is what i thought but there were no access control lists at all.  I have tried making one with all ports open but still no luck.

If we have an array of xirrus APs on our network along side the Cisco WLC, which can access the apple server no problem, then surely the problem would be with the WLC?

[Leo Laohoo]

then surely the problem would be with the WLC

What happens if the WLC is removed from the network?

The only thing that pops into my mind is duplicate IP address.

[Qwerty11111]

If the WLC was removed wouldn't the Acess Points attached stop working? (2500 series wireless controller)

i imagine the xirrus aps would remain working

Duplicate IPs of what however? (the apple server is a static reserved IP)

[Leo Laohoo]

I want to help determine if there is a configuration error which can be mistaken as "the WLC is blocking the Apple server".  

Ok, tell me the whole story:  When wireless clients authenticate, do they obtain a valid IP address?  Can the wireless client ping the default gateway?  Can the wireless client go to the internet?  Can the wireless client see the Apple server (I presume the answer is no)?