Port 5246. CAPWAP is an application layer protocol based on UDP port of user datagram protocol, which can carry two kinds of data messages. When the capwap tunnel encapsulates the control message, the udp port number is port 5246. Except that the Discovery Request and Discovery Response are transmitted in plain text, DTLS protection is mandatory for control messages, and DTLS can be selected for data messages.