wilbywilson Posted May 6, 2014 Report post Posted May 6, 2014 I've been setting up a DP/MP/SUP in my DMZ, and during the setup, I opened up the firewall from intranet to DMZ (but everything is closed to the internet) to get everything installed properly. Now I'm locking things back down, but I've run into an issue where I can't distribute a package from the Primary to the DMZ distro point. Logs are showing "failed to connect to remote DP" and "Error = 0x800706BA", which based on my last few days of troubleshooting, definitely indicates firewall issues. According to the MS documentation, port 135 (both UDP and TCP) and port 445 (TCP) handle this communication. The documentation also lists RPC "DYNAMIC". So, what in the world are those DYNAMIC ports? I'm assuming it's a range of TCP ports, but I don't know the range. This is Windows 2012 R2 we're talking about. Thanks for any advice. Quote Share this post Link to post Share on other sites More sharing options...
wilbywilson Posted May 7, 2014 Report post Posted May 7, 2014 I found a Microsoft KB (http://support.microsoft.com/kb/832017) which seems to indicate that for Windows 2012, the dynamic RPC ports are: 49152 through 65535 As soon as that range of ports was opened up on my firewall (between SCCM Primary and DMZ server, the packages that were queued up started to send successfully.) Hope this information is useful to someone else. Quote Share this post Link to post Share on other sites More sharing options...
