Which port on the firewall must be opened to allow the COA traffic to traverse the network?