Administrative ports used by Cisco SD-WAN Manager

Updated: July 7, 2026

Want to summarize with AI?

Lists the administrative ports that Cisco SD-WAN Manager uses for protocol-specific communication and cluster operations.

Cisco SD-WAN Manager uses administrative ports for protocol-specific communication and cluster operations. This reference provides the port specifications for network administrators and system integrators.

Protocol-specific communication ports

Cisco SD-WAN Manager uses these administrative ports for protocol-specific communication:


Purpose	Traffic Direction	Protocol	Port Number
Netconf	Bidirectional Between Cisco SD-WAN Manager and Cisco SD-WAN Controllers or Cisco SD-WAN Validators.This port is used in Cisco SD-WAN Manager to establish initial discovery.	TCP	830 Note Starting from Cisco IOS XE Catalyst SD-WAN Release 17.18.1a and Cisco Catalyst SD-WAN Manager Release 20.18.1, this port is accessible only via the Cisco IOS XE Catalyst SD-WAN device's system IP. Access to this port via other IP addresses is blocked.
HTTPS	Incoming	TCP	443
SNMP query	Incoming	UDP	161
SSH	Incoming Cisco SD-WAN Manager uses SCP to install signed certificates onto the controllers if DTLS/TLS connections are not yet formed between them. SSH uses TCP destination port 22.	TCP	22
RADIUS	Outgoing	UDP	1812
SNMP trap	Outgoing	UDP	162
Syslog	Outgoing	UDP	514
TACACS	Outgoing	TCP	49

Cluster communication ports

Cisco SD-WAN Manager clusters use these ports for communication among the NMSs that comprise the cluster:


Cisco SD-WAN Manager Service	Traffic Direction	Protocol	Port Numbers
Application server	Bidirectional	TCP	80, 443, 7600, 8080, 8443, 57600
Configuration database	Bidirectional	TCP	5000, 7474, 7687
Coordination server	Bidirectional	TCP	2181, 2888, 3888
Message bus	Bidirectional	TCP	4222, 6222, 8222
Statistics database	Bidirectional	TCP	9200, 9300
Tracking of device configurations (NCS and Netconf)	Bidirectional	TCP	830
Cloud Agent	Bidirectional	TCP	8553
SD-AVC	Bidirectional	TCP	10502, 10503
Cloud Agent V2	Bidirectional	TCP	50051

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.