Access list ports needed for AD authentication

[CraigGilliam09639]

I`m looking for the ports needed to be allowed for AD authentication in an access list on a Vlan interface. I built a monster acl allowing various ports I found for this and still didn`t work, Finally did a permit ip to and from the Domain Controller. With the Acl I had built it would just sit on the Welcome screen, wasn`t seeing any deny on the Nexus 9k so not sure if I was missing a port or a return line in the acl.

[balaji.bandi]

there are the ports required for AD Services to work :

https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/config-firewall-for-ad-domains-and-trusts

Can you post the config the nexus switch to look what is wrong?

Tell us what is the IP address of the user and where it connected. what is the IP address of AD server and where it connected ?

Nore:  Nexus switch default is not a stateful FW, so you need to construct ACL accordingly.