I'm not quite sure what is meant about 'Upper Ports', but 2 things in your description stood out to me:
- There is a Firewall involved
- There is no mention of OB2PORTRANGE or OB2PORTRANGESPEC
Whenever there is a Firewall in the configuration, your Firewall Administrator must create a Firewall rule to allow data to be passed through the firewall through a specific range of ports. Then, you must add that range to the 'omnirc' file of the Disk Agents and Media Agents, and, apparently, to the cell manager is your case
OB2PORTRANGE is a general Environment variable setting to allow all signals to and from CRS and Session Manager to pass through
OB2PORTRANGESPEC is designed to allow only specific processes to use only specific ports, for example
CRS
xSM
Any Session Session Manger
I would encourage you to review an old Administrators Guide for DP 5.5 that really explains this pretty well
This explains the 'omnirc' file ,and, in particular its impact on a Firewall environment