The vcenter server requires port 80 for direct HTTP connections. Port 80 redirects the request to HTTPS port 443. This port is useful if you accidentally use http://server instead of https://server.
389 This port must be open on both local and all remote instances of Vcenter server. This is the LDAP port number of the directory service for the Vcenter server group. The vcenter server system needs to bind port 389, even if this vcenter server instance is not added to the link mode group. If another service is running on this port, it is a good idea to remove the service or change its port to another port. You can run the LDAP service on either port from 1025 to 65535. If this instance acts as a Microsoft Windows Active Directory, change the port number from 389 to any available port from 1025 through 65535.
The 443 vcenter Server system is used to listen for the default port for connections from the vsphere client. To enable vcenter server to receive data from the vsphere client, open port 443 in the firewall. The Vcenter server system also uses port 443 to listen to data transmitted by Vsphere Web Access client and other SDK clients. If you use a different port number for HTTPS, you must use <ip-address>:<port> when you log on to the Vcenter server system.
636 for vcenter link mode, this is the SSL port for the local instance. If another service is running on this port, it is a good idea to remove the service or change its port to another port. You can run the SSL service on either port from 1025 to 65535.
The 902 vcenter Server system is used to send data to the managed host's default port. The managed host also sends a heartbeat to the Vcenter server system on a regular basis via UDP port 902. Firewalls between servers and hosts, or between individual hosts, must not block this port.
902/903 must not block ports 902 and 903 between vsphere client and host. These ports are used by vsphere Client to display the virtual machine console.
8080 Web service HTTP. For VMware VirtualCenter Management webservices.
8443 Web service HTTPS. For VMware VirtualCenter Management webservices.
60099 Web Service Change service notification port