HI, If I try to install some server behind a firewall, it fails to retreive wdsnbp.com using TFTP. Port 69 and 4011 are open. If I manually download wdsnbp.com using a tftp from a linux server behind the same firewall, it works. Is there any other port used by SCCM during pxe boot ? (of course port 80, 445 are open too). Thanks for your help

the following lists the ports it uses http://technet.microsoft.com/en-us/library/bb680753.aspx Firewall and server port settings The following UDP ports must be open on the WDS server and on the firewall: Port 67 (DHCP) Port 69 (TFTP) Port 4011 (PXE) what is the exact error you get on the client ? also see below If DHCP is installed on a server that is located in a different subnet, you will need to do one of the following: (Recommended) Configure your router to forward broadcast packets. All DHCP broadcasts by client computers on UDP port 67 should be forwarded directly to both the DHCP server and the Windows Deployment Services server. Also, all traffic on UDP port 4011 from the client computers to the Windows Deployment Services server should be routed appropriately (these requests direct traffic, not broadcasts, to the server). Add DHCP options 66 and 67. Option 66 should be set to the Windows Deployment Services server, and option 67 should be set to boot\x86\wdsnbp.com. For more information, see Managing Network Boot Programs (http://go.microsoft.com/fwlink/?LinkId=115304 ). My step by step SCCM Guides I'm on Twitter > ncbrady

The TFTP boot fails and then my client try to download the menu from the linux DHCP, so the message is not very explicit. But I can see from the network trace that it is the TFTP the cause of the problem. There is something we didn't do, it's to broadcast the DHCP. We redirect the DHCP to the linux DHCP only. I try to broadcast it and let you know...

It finally works without forwarding broascast to the sccm server, only to the DHCP.