Without authentication nor crypto:
    -Dcom.sun.management.jmxremote
    -Dcom.sun.management.jmxremote.port=1099
    -Dcom.sun.management.jmxremote.authenticate=false
    -Dcom.sun.management.jmxremote.ssl=false

For Tomcat based fixed ports:
    add catalina-jmx-remote.jar to $CATALINA_HOME/lib
    don't specify the .port property on Java command line
    enable (uncomment) the valve
	<Listener className="...JmxRemoteLifecycleListener"
    in server.xml
    in jconsole / visualvm, connect to
	service:jmx:rmi://HOSTNAME:SRVPORT/jndi/rmi://HOSTNAME:RGYPORT/jmxrmi
    or more simply, to
	HOSTNAME:RGYPORT
    or through a tunnel, to
	localhost:RGYPORT
	(after setting up a TCP tunnel from localhost to target
	on RGYPORT>RGYPORT and SRVPORT>SRVPORT)