[miro]

Hi,

we have 3cx on a public ip, we tested sip TLS from the internet and it is working fine. problem is when we move 3cx behind the ruter and put it on the private IP, we cannot register our 3cx softphone from outside (Internet). internal everthing is ok, so certificate is good...

In the firewall we allow 5061 and forward that port to internal ip on our 3cx internal ip on our 3cx, we can see that packet are hits our rule on the firewall and that traffic is coming to our 3cx.

In server activity log there is a log: Got TLS read ret=0 error=6 error:00000006:lib(0):func(0):EVP lib


Please help, thanks.

[miro]

We also tried with Yealink SIP phone, and it was successfully registered over TLS via Internet, but no RTP, over 3CX softphone doesnt work.

Please help anyone.

[miro]

More result from testing

Yealink phone:

registered when 3CX PBX directly connected over public IP address and if 3CX is behind router/firewall/nat in both situation Yealink which is external extension cannot hear voice (RTP) and opposite side can hear voice in both situation.

3CX softphone:

directly connected to the Internet 3CX PBX, softphones are registered and RTP is working on both side, when 3CX PBX behind NAT softphone cannot registered.
We also tried with STUN, but with no luck.

Please help, thanks.