Skip navigation

Apple Profile Manager : MDM Ports , Push Notifications

1634 Views 2 Replies Latest reply: Jul 11, 2013 2:16 AM by Andreas Schenk RSS
iPad786 Calculating status...
Currently Being Moderated
Apr 16, 2013 6:47 AM

Hi All

I have configured MDM with Mountain Lion , Server Tools 2.2.1 , worked fine with iOS device (checked with iPad) worked fine.

But when I push to OSX devices, it stuck , ... lot of search on Google and found some threads that people had the same issues.

 

 

http://serverfault.com/questions/102416/iptables-equivalent-for-mac-os-x/105736# 105736
https://discussions.apple.com/thread/4254271?start=0&tstart=0

https://discussions.apple.com/message/19441034#19441034

http://krypted.com/iphone/managing-ios-devices-with-apple-configurator/

 

The solution was to open following ports:

o use Profile Manager, you should ensure that the following ports are open on your network.

 

2195, 2196TCPUsed by Profile Manager to send push notifications
5223TCPUsed to maintain a persistent connection to APNs and receive push notifications
80/443TCPProvides access to the web interface for Profile Manager admin
1640TCPEnrollment access to the Certificate Authority

 

But when I tried to open the ports (tried both text based and with ICE Flor)
sudo ipfw add 27860 allow tcp from any to any dst-port 2196
sudo ipfw add 27860 allow tcp from any to any dst-port 2195
add 78600 allow tcp from any to any dst-port 5223

When I use sudo lsof -i -P | grep -i "listen" , it didnot show me if the ports are open.

iPad, iOS 6
  • lukematt Calculating status...

    Did you install the Trust Profile for your OSX devices in addition to the enrollment profile?

  • Andreas Schenk Level 1 Level 1 (5 points)

     

    But when I tried to open the ports (tried both text based and with ICE Flor)
    sudo ipfw add 27860 allow tcp from any to any dst-port 2196
    sudo ipfw add 27860 allow tcp from any to any dst-port 2195
    add 78600 allow tcp from any to any dst-port 5223

    When I use sudo lsof -i -P | grep -i "listen" , it didnot show me if the ports are open.

     

    You don't see those ports open on your server, because they are not supposed to be open and your server is not listening on them.

    2195 and 2196 are used by your server to connect outgoing to APNS (Apple Push Notification Server), so your server won't need to listen there, nor be reachable here, but your server must be able to connect to Apple on these ports.

    5223 is basically the same, but for your clients. Any Apple device that wants to have Push services will use this port for an outgoing TCP connection to APNS. So again, your server wont listen here.

    The only incoming ports to the server are 443 (for both the web interface and the devices checking in for new profiles etc.) and 1640 (only used during inital enrollment).

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.