Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We're setting up about a dozen mac mini's across the city that need to be managed from a central .

Our IT department is willing to open up some ports and forward them to our lion server but they are not willing to give us VPN access.

What ports do I need to forward to the mini server in order to manage the devices?

  • I'm thinking mostly of when I update a profile and need it to be pushed out to the other devices.
  • I also need each device to be able to authenticate via Open Directory when the machine is remote. Of course I'll setup "mobility" but I still need the machines to sync changes like new passwords when they "can" connect.
  • Lastly, I'd like to be able to connect FROM the server TO each Mac mini via Apple . (The machines will not have static IP addresses on their side.)
share|improve this question
up vote 0 down vote accepted

Looking at the apple support page, I've discovered that

  • Open Directory runs on port 625.
  • Password server runs on port 106.
  • Profile Manager runs on port 1640 & 2195.
  • Remote Desktop runs on port 3283.
  • Push Notifications run on port 2196.
  • Simple Authentication runs on port 3659.
  • Bonjour runs on port 5353.
  • Software update service runs on port 8088.
  • Netboot runs on ports 67 & 68.
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.