For question 1, there is a specific Collector deployment type from the 1-VM vApp, which is intended for this, yes.  As for question 2, 48443 is used for administrative communication between the Web Service Gateways on the servers, but the other ports must be opened for other kinds of traffic.  As the port usage document states, some of these ports are configurable, but you would not be able to have them all shared on a single port.  I would also suggest reviewing the ports which must be open in the other direction (Base SRM vApp -> Standalone Collector).
Hi all,  1. Can I deployed extra collector across Firewall in different network segment if deploy only 1 vApp (All-in-One) Deployment type?   2. From the ViPR_SRM_3 6 3_Ports_Uage.xlsx doc, Collector to the Backend DB needs at least following ports        2020, 2001, 48443, 52004, 52007, 2040       Can we limit the ports to 443 or 48443?       If the collector is in different segment for Host collection and the Base SRM vApp in Management Network.  Thanks.
vApp Deployment and Firewall ports