City firewall and capture standards ask which UDP destination port identifies VXLAN traffic in the data plane. Which value is correct?
Select an answer to reveal the explanation.
Short Explanation
When the capture filter needs VXLAN, look for UDP destination 4789—that is the IANA port the data plane uses. Do not confuse it with BGP’s 179, IKE’s 500, or DHCP’s 67. Memorize 4789 once and the municipal packet captures get easier.
Full Explanation
IANA assigns UDP port 4789 as the destination port for VXLAN. Captures, ACLs, and underlay QoS policies often key on that port plus VTEP addresses. BGP uses TCP 179 for the control plane, which is unrelated to VXLAN encapsulation ports; IKE/DHCP ports likewise are not VXLAN identifiers. Confirming 4789 connectivity between VTEPs is a basic data-plane health check when overlays fail to form.