Or if you have SZ, from KBA-3402: SmartZone ports to be open on a Firewall w/NAT
3. Port forward vSCG necessary ports.
UDP:12223,123,161; TCP:21,22,91,443,8080,8443,8090,8099,8100,8111,9997,9998,9080,9443,16384-65000
UDP-
12223: ZD AP using LWAPP join
123: AP sync ntp with SCG
161: SNMP query
TCP-
21 : ZD AP fw update via FTP
22 : SCG AP communicated with SCG
91 : SCG AP fw update via HTTP
443 : Let SCG AP get SSH private key
8080 : SCG setup wizard GUI
8443 : SCG GUI
8090, 8099, 8100, 8111, 9997, 9998 : For WISPr
9080, 9443 : For Northbound API (NBI)
16384-65000: For ZD AP fw update via FTP
Note: If the SZ controller is the Ruckus Cloud, be sure no webfilter blocking access to
ruckuswireless.com.