For installations where APs are installed off-premises and connecting for service through a firewall, relax the access rules to specific service ports because source addresses are not always deterministic.
| Source IP | Port | Description | Action |
|---|---|---|---|
| 0.0.0.0/0 |
TCP 80
|
AP CAPWAP registration | Allow |
| 0.0.0.0/0 | TCP 443 | ExtremeCloud IQ login access and software updates | Allow |
| 0.0.0.0/0 | TCP 2083 | RADSEC | Allow |
| 0.0.0.0/0 | UDP 12222 | AP CAPWAP | Allow |