Client communication port for workgroup servers

We have SCCM 2012 R2 Single Primary Site in intranet. We have PKI with ADCS 2012. We are in process of mirating to HTTPS communication using certificates. We have few servers in workgroup and we plan to manage those servers with configuration manager by
manually installing client and specifying smsmp=sccm fqdn. for lookup management point.
Can we change client communication port for these servers?
For successful client communication do we need to open any ports except 443 in firewall?
What all ports needed to be open in this scenario?

Hi,
You configure the Communications port for the MP in the site so they must use the same ports, you can configure alternate ports so if it cannot communicate on port 443 it tries the next port.
http://technet.microsoft.com/en-us/library/gg712276.aspx
443 is sufficient, the client will also try to communicate on port 10123 for Client Notification,
http://www.google.se/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0CCsQFjAA&url=http%3A%2F%2Fblogs.technet.com%2Fb%2Fconfigmgrteam%2Farchive%2F2012%2F09%2F27%2Ffast-channel-for-system-management.aspx&ei=1dAhU7qqOIL8ygPb1IHQAQ&usg=AFQjCNF4_G2sZBMbDDtJa95LBx7EYYBrRw
But it should fallback to 443 if not available as well.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Similar Messages

Change default communication port for BITS

We are currently using ConfigMgr2007 (native mode). We currently have a global GPO wihich is throttling BITS to 56kpbs during current business hours (8am-5pm). It has been suggest to use QoS to controll the amount of traffic used by SCCM distributions
to clients. Seeing the BITS uses HTTP (80) and HTTPS (443) by default, is there a way to change the default ports used by BITS.
I did find the following article (About Configuration Manager Client Installation Properties)
that there are two setting which can change the default ports.
CCMHTTPPORT=
CCMHTTPSPORT=
Is there any other methods to change the Default port for BITS communication as a whole.

Thanks Kent and Jason. I know I posted in the ConfigMgr forum and you pointed my to the proper documentation. We have non-Microsoft email archiving product which utilizes BITS which is the reason for the general question regarding BITS.
I did not see a dedicated forum for BITS so I posted here.
The documentation as suggested by Kent will assist with making changes for ConfigMgr if necessary.

Communication port for JCo

Hi All,
I am about to install JCo in Solaris server. I want to confirm one thing.
Which is the port I need to open up for JCo to communicate to SAP server?
The version of JCo is "SAP JCo 2.1.8 ".
Is there any documents regarding the communication port?
All inputs are welcome
Regards
George

I think you need to open 3200 and 3300.
The following is the list of all related ports:
sapdp## 32##/tcp # SAP Dispatcher.       3200 + System-Number
sapgw## 33##/tcp # SAP Gateway.          3300 + System-Number
sapsp## 34##/tcp #                       3400 + System-Number
sapms## 36##/tcp # SAP Message Server.   3600 + System-Number
sapdp##s 47##/tcp # SAP Secure Dispatcher 4700 + System-number
sapgw##s 48##/tcp # SAP Secure Gateway    4800 + System-Number
sapgw97 3397/tcp # SAP Oss
sapgw98 3398/tcp # SAPcomm
sapgw99 3399/tcp # SAP EPS
sapdp99 3299/tcp # SAProuter
Dennis

Duplicated CIs for workgroup Servers

Hello.
In my environment, I have a few servers in a workgroup with SCCM client and SCOM agent installed.
The connectors are working fine, but I see two CIs per server with different principal names:
- "ServerDMZxx": from SCOM connector.
- "ServerDMZxx.WORKGROUP": from SCCM connector.
Is there any way to merge them or to have only one CI?

I am seeing the same behavior with my SCSM 2012 R2 UR4 environment. Did you ever get a resolution on this?

Open same port for multiple servers.

I am sorry if this sounds rudimentary, but I wanted to make sure. I want to open up port 80 to more than one web server. I already have port 80 open on one public IP address and have another one ready to use for another server. My assumption is that I should just be able to create a policy using the additional IP address and use port 80 without any issues. Is that correct to assume? I would also like to know, how one would do this is they only had one public IP address. I believe these should be relatively easy questions for the experts here. Thanks.

If you have a netblock from which you can assign multiple IP addresses then, yes - just asign additional access-list entries and static NAT entries.
If you only had a single (or limited number all in use) public IP address then you would have to use some sort of PAT (port address translation). for instance:
server 0 is <outside address>:80
server 1 is <outside address>:81
server 2 is <outside address>:82
..etc. Your remote users would then have to specify the non-default port (80/81/82) when browsing to the site.

Using separate ethernet ports for LAN and internet

Following scenario:
A couple of Lion clients and a Lion server connected to a switch. Switch connected to router for internet access. All devices, clients, server and router are in the same C-Class net.
I'd like to connect the Lion server with 2 ethernet ports to the switch, so that one port is solely used for connections to the Lion clients (aka LAN) and the other port is solely used for connections to the internet. That way heavy LAN traffic to/from the server cannot bog down internet access to the server. Any ideas how to acomplish that?
Usually you would configure the Lion server as a router and connect the Lion clients (via a switch) to one port and the cable modem to the other, so both ports are in different subnets. But I don't want all internet traffic from the clients going through the Lion server.
The best I've come up so far was to configure both ethernet ports with static IP addresses. The one connecting to the clients with a 255.255.255.0 netmask but no router IP given. The one for internet with a 255.255.255.255 netmask and the router IP set to my physical router IP. It seems to work, but I'm not sure, whether this is the suggested way to do such a setup.
Maybe some manual editing of the routing table is are more solid solution?
Any tips appreciated.
Pete

What you want to do can be done but maybe not the way you are trying.
First yes, you would use two Etherner ports on the Mac, if it is a Mac Pro or XServe it has two built-in, other Mac models can do this using a USB Ethernet interface.
Next, the way I would normally do this is to have a separate switch for the WAN router, this would make the setup look like the following
LAN Switch ----- Server ------------ Router --- Internet
       | |                             |
       | |                            NAT
       | +-----------------------------+
       |
       +------ Client Devices
The router could be doing NAT via one interface, or a separate Firewall box could do the NAT.
Another possible way would involve segmenting the lan switch by setting up a VLAN and putting one port for the Servers second Ethernet connection on to that VLAN (using public IP addresses and the a connection to the router on that VLAN, the LAN switch could then route between the two VLANs. Cheaper LAN switches do not have this ability.

Random jmx communication port

i have a setup with 2 node agents and 1 DAS behind a firewall.
from what i understand, in order for the node agents to communicate with the DAS, a communication channel is created on a random port via JMX.
the problem here is with the random port having to operate over a firewall. Is there any way to assign a fixed port for JMX communication?

8686 is the initial communication port for JMX,
do an "grep jmx-connector" on server.xml, you can see 3 ports as a result. Open those ports in your firewall and try.
One will be 8686 which will be for DAS-SERVER
<admin-service system-jmx-connector-name="system" type="das-and-server">another with variable JMX_SYSTEM_CONNECTOR_PORT, which you can see from admin console. This is for Server
<admin-service system-jmx-connector-name="system" type="server">another some random port number after nodeagent definition for JMX
<node-agent name="node agent name" start-servers-in-startup="true" system-jmx-connector-name="system">Regards
Activexpert

How do I change the listener port for APEX on XE

Hi all,
I did a default install of XE onto a Linux box which is my DMZ server. The default port for the listener is 8080, however I have since found that port 8080 is the port for proxy servers and therefore I cannot access APEX on my DMZ site from behind a client's proxy server.
Is there is simple way to change the listener to port 80 for access to APEX.
Many thanks
Bryan

Hi Bryan,
See http://download.oracle.com/docs/cd/B25329_01/doc/admin.102/b25107/network.htm#BHCBABJB
Hope this helps,
Andrew
http://www.apexskins.com

SCCM 2012 Secondary site Client Communication for SUP

Hi,
We have an SCCM 2012 Setup and here is the design CAS-->Primary-->Secondary site servers.
SUP is configured for Secondary site too. Boundaries are defined with IP Address Range and is proper.
Some clients are comminicating to Secondary site for updates. Downloading successfully and installing the software.
But some of the clients are communicating to primary site for updates and retain with the status "Downloading update"
I have checked the locationservices.log and it is fluctuating between Primary and secondary MP.
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:35:59 AM 768 (0x0300)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
1 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
I have also checed "DataTransferService.log" and found more errors.
Error retrieving manifest (0x800704cf). Will attempt retry 7 in 1920 seconds. DataTransferService 4/5/2013 11:51:59 AM 5576 (0x15C8)
DTSJob {141CB5AE-8EF2-464D-8D8C-68B868EE7F7B} in state 'DownloadingManifest'. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Failed to send request to /SMS_DP_SMSPKG$/1fd86ee1-ece0-41ae-a2b8-5a2b305746d4 at host xxxxxxxx.xxxxxxx.com, error 0x2efe DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
[CCMHTTP] ERROR: URL=https://xxxxxxxx.xxxxxxx.com:443/SMS_DP_SMSPKG$/1fd86ee1-ece0-41ae-a2b8-5a2b305746d4, Port=443, Options=192, Code=12030, Text=ERROR_WINHTTP_CONNECTION_ERROR DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Raising event:
instance of CCM_CcmHttp_Status
ClientID = "GUID:0DA907D5-1709-4B10-B627-61E289FD7149";
DateTime = "20130405062159.643000+000";
HostName = "xxxxxxxx.xxxxxxx.com";
HRESULT = "0x80072efe";
ProcessID = 4260;
StatusCode = 600;
ThreadID = 4200;
DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Successfully sent location services HTTPS failure message. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Error sending DAV request. HTTP code 600, status '' DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
GetDirectoryList_HTTP mapping original error 0x80072efe to 0x800704cf. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
GetDirectoryList_HTTP('https://xxxxxxxx.xxxxxxx.com:443/SMS_DP_SMSPKG$/1fd86ee1-ece0-41ae-a2b8-5a2b305746d4') failed with code 0x800704cf. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Error retrieving manifest (0x800704cf). Will attempt retry 7 in 1920 seconds. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
my query is how some of the clients are communicating primary site server for updates even though the boundary details are properly configured and Secondary site is configured with sup. Also need to know (as per the log "DataTransferService.log")how
come the clients are communicating SSL port for updates. Plz help in resolving the issue.

Hi Kent,
Thanks for the reply.
Primary and secondary sites are connected over WAN and we have around 2000 clients which are reporting to Secondary site.
Considering the WAN bandwidth utiliztaion and number of clients on secondary site we have configured the SUP role.
Not all the clients are with the above error message around 40%-50% of the clients are with above stated error message.
Plz let me know what is the error message indicates and do we need to reffer any other logs for indepth analysis.
Locationservices.log is with fluctuating connectivity
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:35:59 AM 768 (0x0300)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
1 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
how come the clients are communicating SSL port for updates. Plz help in resolving the issue.

Remote Policy Initiation for DMZ Workgroup Servers

Hi,
I could successfully see the client as Active for a DMZ workgroup server. When forced run any policy from client properties on the server, it runs fine. However when trying to run the same from the SCCM console, it gives an error as below.
The area in "Black" denotes the name of the server. The message says "<Server Name> is not on".
The ports are already open and I have tested the patch deployments and it works successfully.

Patch deployment and client notification are two completely different things. Successful patching (or any other standard ConfigMgr activity/action) is meaningless when it comes to client notification. Also, client showing as "active" has nothing
to with client notification. Active simply means that the client has reported in to the MP recently (in the form hw inv, sw inv, heartbeat, or a policy request).
Client notification requires a persistent connection initiated by the client to the client's MP on port 10123 (or 80 as the client will fallback to 80 if 10123 if not available although this does cause more load on the MP).
However, the dialog you have above is not generated by ConfigMgr or client notification. It looks like it is being generated by one of the right-click tools which truly have nothing to do with ConfigMgr. For most of the tools to work, you must be able to
communicate from the console you are working on (since the console is calling the right-click tool) to the target system. Some right-click tools use psexec or WMI and some use WinRM. If the tool cannot make a connection on the appropriate protocol channel,
then it will give you the above message. Ultimately as mentioned though, this has nothing to do with ConfigMgr
Jason | http://blog.configmgrftw.com | @jasonsandys

Lync Client uses wrong RTP Ports for calls from/to RGS with Agent Anonymity

We have QoS implemented and client ports for audio, video und application defined by Set-CsConferencingConfiguration. We also use firewalls in our LAN between the different VLANs for Clients, Servers and Gateways/SBC. Only RTP from the client with the defined
ports are allowed by the firewall. Media ByPass is enabled.
In all normal cases, the right ports will be used and marked by GPO with the right DSCP value. But if an agent get a call from a RGS which has agent anonymity enabled, the client uses a port in the range 1024-65535 for audio. Also if you make a call on behalf
of the RGS, the client use a random port between 1024-65535. As soon, as the source of the call is in another VLAN (e.g. a call from PSTN which comes in over a SBC in e separate VLAN), the firewall between the two VLANs block the RTP traffic.
We see the deny on the firewall log and in the SBC log we see, the reinvite for the media by pass with the IP of the agent and a not valid port. We also see, that no RTP from the client/agent will arrive the SBC and no RTP from the SBC will arrive the client/agent.
So the call will be disconnected, as soon as an agent wants accept the call.
Is there an additional setting to make sure, the Lync client always use the valid RTP port range?
This behavior exist in Lync 2010 and Lync 2013 clients.

Hi Holger,
Thanks for reply!
Sure! I set all AudioPorts on all Services, but the problem are not the ports used by the server, the problem are the ports used by the client. We set the client ports to 49152 with a count of 40. The client (2013 and also 2010) use these ports correctly in all
cases exept for call from/on behalf of an RGS with Agent Anonymity.
If we disable the RGS agent anonymity, restart the client of the agent, then the client uses also the correct source ports for RTP.
I've checked this behaviour now on 3 customer installations, our own productive installation and in our lab.
Because until now only one of our customers have firewalls between the internal VLANs, only this single customer have the issues...
Regards,
Stephan

Connection to serial port for communication RFID

HI,
I have occurred problem in communication to serial port for accessing the RFID
through Serial Port COM1 or COM2 . I got garbage values of Card .
Please give me the code for accessing serial port and indicter the cadr is detected by RFID and read the data on card.

EHAG microchip 13,56 MHz dual reader and Mifare 1KB contactless smartcard.
I've succeed to retrieve the data from the transponder (card) but it just only once when i click the button from my application. My question is how do i retrieve the data continuously from the card for every few milliseconds?
sorry for my language.

What is the port for FTPS communication in File Adapter

Hi All,
For FTP communication the port is 21, whats the port for FTPS communication.
XIer

Hi Xler
u can check on this:
Basic FTP Setup Instructions
refer this thread also
FTPS
Thanks !!!

Configure client ports for RTMFP

We are redesigning our Flash application to use RTMFP in place of RTMP, and we are interested in knowing exactly which ports our client app will try to use when connecting with RTMFP. From reading the documentation provided, it appears that the hostport element of Adaptor.xml allows for configuration of ports for Flash Media Server. Will changes to these port values have any effect on the ports being used by the client?

Hi,
Keystore Entry:
Login to Visual Admin --> Server --> Services --> KeyStorage --> TrustedCAs --> Load --> Select the location where you have stored the certificate on your local system
Load function is used as you have already got the certificate....
Once this is done you will find an entry for your certificate in the Entries tab of your TrustedCAs section.
This is your Keystore Entry...in other words it the name of your certificate.
Keystore View:
http://help.sap.com/saphelp_webas630/helpdata/en/16/c0503e1dac5b46e10000000a114084/content.htm
Are you going to consume Logon tickets of the Third party system (which is other than SAP J2ee engine of your XI)? If yes, then you may also need to do some more settings in the J2ee Engine.
Regards,
Abhishek.

I need a laptop with a RS232 port for PLC communications

I need a laptop with a RS232 port for PLC communications. Now all laptop on the
market have no RS232 port. Some laptop has a PC express card slot. I find a
PCMCIA to RS232 RS-232 Notebook Serial I/O adapt Card on eBay but I don’t know
if it can work with PC express card slot. Please give me some advice.
Thank you,
Alfred

Hey I have same problem. No PCMCIA No PCIe No USB converter are usefull
I recommend you to use IBM Thinkpad Laptop with DockStation (adv Mini Dock 2504-10U)
This Dock Sattion have real RS232 port

Client communication port for workgroup servers

Similar Messages

Maybe you are looking for