Configure Distribution Point as a update source for Endpoints

[Tahmeed702]

We have an architecture in which the distribution point does not have internet access and receives updates from Ksc and pushes those updates to a Distribution point scope that is connected to KSC, and endpoints receive updates from distribution points only, not from Ksc. How can we configure net agents for both the distribution point and the group that has been selected as the distribution point scope? And I need help with any form of network configuration, such as network polling or establishing sub-nets.
 

We need to do following things,

1) create 2 network agents in KSC (one for DP & the other one for group that has been selected as the distribution point scope). DP can download from the ksc & endpoints can't download/get any updates from KSC.
2)Configure properly DP & Endpoints Communication.
3) Ensure all updates and content delivery through DP. endpoints in distribution point scope are not all allowed to communicate with KSC for any kind of updates.

4)What are the specifiq ports used by Net agents in endpoints to connect with KSC.