This testvar must be explicitly defined in the configuration file
This parameter specifies a space separated list of TCP ports that are expected to be closed by the DUT on the WAN interface. These ports will be verified as closed ports during the firewall port scan tests. The special keyword all may be used for non-stealth devices that report all TCP ports closed.
Please see this article for more information on port scan testing within CDRouter.