@starpatrick 

29810 - 29813 are the ports used for the discovery of a controller, this is programmed into the device firmware and cannot be disabled.   Even if you have manually configured the AP (as you appear to have) this will always check for a controller.

Ultimately this is an EAP and is therefore primarily designed to be managed by a controller, yes it can be configured to run standalone but it will always be on the search for a controller.

Ubiquiti for example do the same, its broadcasts UDP on 10001