Sorry for any confusion. I haven't thought about RMI clients in awhile, and I know that when wsadmin is using RMI to connect a dmgr or app server, wsadmin connects to the bootstrap port.
The bootrap port is a "well advertised" port that RMI clients can connect to and then client is usually "directed" to another ORB port (ORB listener, etc.) depending if security is enabled or not.
Good overview on how EJBs use the various related ORB ports can be found here ->
www.ibm.com/developerworks/websphere/tec...