Synchronizing MSE with Cisco 5520 WLC: Allowing NMSP Traffic through Firewall

Allowing NMSP Traffic through Firewall

Question

An engineer just added a new MSE to Cisco Prime Infrastructure and wants to synchronize the MSE with the Cisco 5520 WLC, which is located behind a firewall in a DMZ.

It is noticed that NMSP messages are failing between the two devices.

Which traffic must be allowed on the firewall to ensure that the MSE and WLC can communicate using NMSP?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

NMSP (Network Mobility Services Protocol) is a Cisco proprietary protocol used for communication between Mobility Services Engines (MSE) and Wireless LAN Controllers (WLC). To synchronize the MSE with the WLC, the NMSP messages need to be allowed between them.

In this scenario, the WLC is located behind a firewall in a DMZ, which means that traffic must be allowed through the firewall to allow communication between the MSE and WLC.

The correct answer is option C: UDP 1613.

The NMSP protocol uses User Datagram Protocol (UDP) port number 1613 for communication between the MSE and WLC. Therefore, UDP port 1613 traffic needs to be allowed through the firewall.

Option A: TCP 1613 is incorrect because NMSP uses UDP, not TCP.

Option B: UDP 16113 is incorrect because the correct port number for NMSP is 1613, not 16113.

Option D: TCP 16113 is incorrect because NMSP uses UDP, not TCP, and the correct port number is 1613, not 16113.

In summary, to allow communication between the MSE and WLC using NMSP, the firewall needs to allow UDP port 1613 traffic between the two devices.