WCS behind a firewall

[jjiles]

We are moving the wcs (7.0.164) and MSE (7.0.105) servers behind a stateful firewall. Which inbound ports are needed open in the firewall for the controllers to comunicate with the application?

Thanks for any info.

Jorge.

[Lucien Avramov]

WCS uses the following ports:

Advent   Net (WebNMS)	2000
Database	1315
FTP	21
HTTP   Connector	8456
HTTP   Connector Redirect	8457
HTTP	80
HTTPS	443
RMI	1299
TFTP	69
SNMP	161, 162
Web   Container	8009
Location   Server	8001

For the controller to talk to the access points you need to allow capwap or lwapp ports.

[lpl]

Hi Lucien,

Thank you for this answer.

The list provided in the Prerequisites section of the "Cisco Wireless Control System Configuration Guide" (release 7.0, pg 2-1)is not exaclty the same:

- HTTP: configurable during install (80 by default)
–HTTPS: configurable during install (443 by default)
–1315
–1299
–6789
–8009
–8456
–8005
–69
–21
–162
–8457

Moreover, on the Wireless Control System (WCS) Troubleshoot FAQ web page (http://www.cisco.com/en/US/products/ps6305/products_qanda_item09186a00807a60f0.shtml), they talk about the UDP port 169 (trap receiver). I suppose it is an error and they mean UDP port 162.

Can you confirm that the ports list you provided is correct?

Thank you.