5247
Summary
- // if you see it open
- CAPWAP data-channel traffic can carry encapsulated wireless data between WTPs and an AC. Verify the endpoint role and security configuration; port assignment alone does not identify observed traffic or establish safety.
- // common applications
- Wireless access point management and dat CAPWAP communication between Wireless Termination Points and an Access Controller; registration and protocol specification do not prove a host's deployment or observed traffic.
About port 5247/udp.
IANA assigns UDP port 5247 the service name capwap-data for the CAPWAP Data Protocol, specified in RFC 5415. The protocol enables an Access Controller (AC) to manage Wireless Termination Points (WTPs), such as wireless access points. The supplied evidence does not establish whether this port is deployed on any particular host or whether it should be reachable from the public internet.
RFC 5415 describes CAPWAP traffic between WTPs and an AC, including a data channel that can carry encapsulated wireless data. It also specifies DTLS security mechanisms. These protocol details describe intended operation; they do not show that observed traffic on UDP 5247 is CAPWAP or that a particular deployment is securely configured.
UDP 5247 is registered for the CAPWAP Data Protocol. RFC 5415 describes Split MAC, where wireless data and management frames are encapsulated between the WTP and AC; in Local MAC mode, data frames may be bridged locally or tunneled as 802.3 frames, while wireless management frames are processed at the WTP and forwarded to the AC. Verify whether a system using this data endpoint follows the expected configuration for its role.
- Exposure
- Unknown; the evidence identifies CAPWAP use but does not establish the intended internet reachability of a specific deployment.
- Security implications
- CAPWAP can carry wireless data between WTPs and an AC; confirm endpoint identity and security configuration before allowing access.
- Prevalence
- Unknown; no scoped measurement was supplied.
- IANA service name
capwap-data[Confirmed] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv
Protocol association
CAPWAP Data Protocol
- RFC reference
- RFC 5415 [Confirmed] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv
- CAPWAP role
- Enables an Access Controller to manage Wireless Termination Points [Confirmed] — https://www.rfc-editor.org/rfc/rfc5415.txt
- UDP registration
- IANA lists port 5247/udp for the CAPWAP Data Protocol and cites RFC 5415 [Confirmed] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv
Service assignments.
| Name | Protocol | Description | Open frequency |
|---|---|---|---|
| capwap-data | TCP | CAPWAP Data Protocol | 0.00% |
| capwap-data | UDP | CAPWAP Data Protocol | 0.00% |
Service assignments from the IANA Service Name and Transport Protocol Port Number Registry, with open-frequency data from nmap-services.