Wireless Access

In our wireless deployment with gateways (tunneled mode), we see UDP 3478 traffic coming from the AP IP towards the internet. What is this traffic? If it it STUN/Teams relateted, then user traffic should be tunneled towards the gateways, and be originated from the client IP, right? Anyone that can shed a light on this?

-------------------------------------------

Teams uses that port for STUN. So are you running AOS10 ?

------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
------------------------------

That is probably the public IP discovery to pqm.arubanetworks.com:

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Check, that matches the 52.X.X.X IP address. How necessary is it for the AP's to be able to do this? It's not in the list to be allowed in the firewall.

-------------------------------------------

Original Message:
Sent: Aug 25, 2025 04:23 AM
From: Herman Robers
Subject: UDP/3478 from AP IP

That is probably the public IP discovery to pqm.arubanetworks.com:

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Blocking this will result in the information not being available for reporting within Central.

------------------------------
Carson Hulcher, ACEX#110
------------------------------

Original Message:
Sent: Aug 25, 2025 07:06 AM
From: Chris
Subject: UDP/3478 from AP IP

Check, that matches the 52.X.X.X IP address. How necessary is it for the AP's to be able to do this? It's not in the list to be allowed in the firewall.

But, not unblocking this port will not kill functionality, right? It's not of essential importance?

-------------------------------------------

Original Message:
Sent: Aug 25, 2025 11:02 AM
From: chulcher
Subject: UDP/3478 from AP IP

Blocking this will result in the information not being available for reporting within Central.

------------------------------
Carson Hulcher, ACEX#110
------------------------------


Original Message:
Sent: Aug 25, 2025 07:06 AM
From: Chris
Subject: UDP/3478 from AP IP

Check, that matches the 52.X.X.X IP address. How necessary is it for the AP's to be able to do this? It's not in the list to be allowed in the firewall.

Original Message:
Sent: Aug 25, 2025 04:23 AM
From: Herman Robers
Subject: UDP/3478 from AP IP

That is probably the public IP discovery to pqm.arubanetworks.com:

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

The correct answer here is: we have provided a list of domains and ports that should be allowed for proper communication and operation of the network devices within your network.  Any deviation from that list may result in unexpected or undesired behaviors.

------------------------------
Carson Hulcher, ACEX#110
------------------------------

Original Message:
Sent: Aug 26, 2025 09:41 AM
From: Chris
Subject: UDP/3478 from AP IP

But, not unblocking this port will not kill functionality, right? It's not of essential importance?

Original Message:
Sent: Aug 25, 2025 11:02 AM
From: chulcher
Subject: UDP/3478 from AP IP

Blocking this will result in the information not being available for reporting within Central.

------------------------------
Carson Hulcher, ACEX#110


Original Message:
Sent: Aug 25, 2025 07:06 AM
From: Chris
Subject: UDP/3478 from AP IP

Check, that matches the 52.X.X.X IP address. How necessary is it for the AP's to be able to do this? It's not in the list to be allowed in the firewall.