Arguments to enable JMX on JVM - Example of setenv.sh file

jmxremote_arguments.sh

-Dcom.sun.management.jmxremote
-Dcom.sun.management.jmxremote.port=8086
-Dcom.sun.management.jmxremote.ssl=false
-Dcom.sun.management.jmxremote.authenticate=false

jmxremote_arguments_over_vm.sh

-Dcom.sun.management.jmxremote
-Dcom.sun.management.jmxremote.port=8086
-Dcom.sun.management.jmxremote.ssl=false
-Dcom.sun.management.jmxremote.authenticate=false
-Djava.rmi.server.hostname=localhost # use a public IP if you're not using NAT (port forwarding)
-Dcom.sun.management.jmxremote.rmi.port=8086

jmxremote_arguments_with_password.sh

-Dcom.sun.management.jmxremote
-Dcom.sun.management.jmxremote.port=8086
-Dcom.sun.management.jmxremote.ssl=false
-Dcom.sun.management.jmxremote.authenticate=false
-Dcom.sun.management.jmxremote.password.file=./myapp/jmxremote.password

setenv.sh

# Pay attention to:
### CATALINA_OPTS = (Optional) Java runtime options used when the "start", or "run" command is executed.
### JAVA_OPTS = (Optional) Java runtime options used when the "start", "stop", or "run" command is executed.

export CATALINA_OPTS="-Djava.awt.headless=true -server \
                      -Xms128m -Xmx256m -XX:MaxPermSize=96m \
                      -Dcom.sun.management.jmxremote \
                      -Dcom.sun.management.jmxremote.port=8086 \
                      -Dcom.sun.management.jmxremote.ssl=false \
                      -Dcom.sun.management.jmxremote.authenticate=false"

More info,
http://pineapplesoftware.blogspot.com.br/2012/11/this-post-is-basically-commercial-for.html

"[...] The port for the RMI server, which is returned in the stub retrieved from the registry, is however anonymous by default. This makes tunneling traffic pretty cumbersome. [...]" -- http://hirt.se/blog/?p=289