161, 162 for all the management servers that will be in the resource pool you use for network monitoring, not the other ones
Agent push doesn't require 5723 nor 5724 at all.
5723 is used only for agent to scom server communication, and 5724 is used for SDK connections (SCOM console to management server, for example).
Agent push requires the following ports for scom server to servers where you want to push the agent :
135/TCP, 137/UDP, 138/UDP, 139/TCP, 445/TCP
RPC/DCOM High ports (2008 OS and later) Ports 49152-65535/TCP