> <proposed text>
> 3.  CAPWAP Transport
> [...]
>    In order for CAPWAP to be compatible with potential middleboxes in
>    the network, CAPWAP implementations MUST send return traffic from the
>    same port on which it received traffic from a given peer.  Further,
>    any unsolicited requests generated by a CAPWAP node MUST be sent on
>    the same port.
> </proposed text>
> 
> And the same text in the NAT Considerations section.