thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Wireless & Mobility · Foundational

Control and Provisioning of Wireless Access Points (CAPWAP)

IETF tunneling protocol (RFC 5415) between lightweight APs and controllers, using UDP 5246 and 5247.

Definition

CAPWAP carries control messages on UDP 5246, always protected by DTLS, and client data on UDP 5247 with optional DTLS encryption. It replaced Cisco's earlier LWAPP (UDP 12222/12223). CAPWAP adds overhead, so path MTU and firewall rules must allow it.

Example

A firewall between APs and the WLC must permit UDP 5246-5247.

Exam tip

Control = 5246 (encrypted); data = 5247 (DTLS optional).

Related terms