Which port on the firewall must be opened to allow the CoA traffic to traverse the network?