When you configure a cluster, you have the option of specifying an Admin Port and Host that are separate from the RPC Port and Host.
Specifying a separate Admin Port allows you to distinguish between administrative and non-administrative users, and limit network access to certain administrative actions, which may be advantageous when you have firewalls in place.