3CX and Meraki x64 - Any known issues

[Chris Wheeler]

I will be implementing a premise 3CX system behind a Meraki x64 firewall using a 3CX supported SIP trunk provider.
I read one post where someone was running into issues and it appears this box doesnt even have SIP ALG to turn off.
I havent used this combination myself, so I wanted to ask if any who has can provide any feedback.
The setup will be primarily local office Yealinks. Remote users with the Smartphone app and possible using the softphone.

 

[leejor]

I assume you came across this thread, which doesn't sound encouraging...

https://www.3cx.com/community/threads/3cx-and-meraki-mx64-not-playing-nice.57969/

and this, about a similar model...

https://www.3cx.com/community/threads/firewall-sip-alg-mismatched-port-mapping.52897/

 

[3CXDude]

We have 2 locations running behind Meraki firewalls without any issues.

Customer's IT setup them up and manages them, so I cant give you any how-to.....etc....

But I can confirm, they work and don't give us any trouble at all !!!!

 

[cobaltit]

Pretty much the only reason to use Meraki is the support so they should be able to help you make it work. I have a customer using Meraki and 3CX and it works just fine. But like @3CXDude we didn't set it up.

 

[Chris Wheeler]

Pretty much the only reason to use Meraki is the support so they should be able to help you make it work. I have a customer using Meraki and 3CX and it works just fine. But like @3CXDude we didn't set it up.

Thank you

 

[Chris Wheeler]

We have 2 locations running behind Meraki firewalls without any issues.

Customer's IT setup them up and manages them, so I cant give you any how-to.....etc....

But I can confirm, they work and don't give us any trouble at all !!!!

@3CXDude Are either Meraki X64 models by chance? I am ssuming SIP trunks connecting to 3CX through the Meraki?
I appreciate your feedback on this.

 

[3CXDude]

Not 100% if they are X64s, but I believe so and SIP trunks and remote phones work perfectly.

 

[Evolute IT]

I will be implementing a premise 3CX system behind a Meraki x64 firewall using a 3CX supported SIP trunk provider.
I read one post where someone was running into issues and it appears this box doesnt even have SIP ALG to turn off.
I havent used this combination myself, so I wanted to ask if any who has can provide any feedback.
The setup will be primarily local office Yealinks. Remote users with the Smartphone app and possible using the softphone.

I have currently a few customers using Meraki and in-house we are too. We have no issues at all. Model is MX64 configured with 2 VLANs.

These firewalls comes with QoS preconfigured for VoIP and videoconferencing. You simply need to forward your SIP ports if on-premise or nothing if you are using 3CX Client.

I would recommend a SBC if you have many phones and also create a separate VLAN for the phones, it helps. It is fairly simply to create on Meraki devices and ports can be assigned to use LLDP.

 

[Paul Otter]

We have several home workers using Meraki Z1's to connect to our MX64, all of which have telephones.
They are configured in Hub / Spoke mode.
The phones work fine (Fanvil's) , but I can't force re provisioning from the console, I have to log into the phones, manually enter the static provisioning server address, and re-boot.
I've also had a couple of occasions where I've had to re-boot the Z1's when they lost connectivity, but this is very rare, and very quickly fixed.
Overall, I would recommend the kit, not specifically for the support as another poster mentioned, but because of how good the kit is.
We also have several MR33 Wireless AP's, and the handover of clients from one AP to another is seamless, even on VOIP calls.

 

[Chris Wheeler]

I have currently a few customers using Meraki and in-house we are too. We have no issues at all. Model is MX64 configured with 2 VLANs.

These firewalls comes with QoS preconfigured for VoIP and videoconferencing. You simply need to forward your SIP ports if on-premise or nothing if you are using 3CX Client.

I would recommend a SBC if you have many phones and also create a separate VLAN for the phones, it helps. It is fairly simply to create on Meraki devices and ports can be assigned to use LLDP.

Thank you. In this situation the phones and 3CX will be on the local LAN behind the Meraki connecting to a supported SIP provider. I had read a couple of posts about having trouble with getting the firewall checker to work, but it sounds like you have with no issue?
Outside of the Meraki will just be the SIP trunks, Smartphone app access and possible softphone/client access.

 

[Evolute IT]

Thank you. In this situation the phones and 3CX will be on the local LAN behind the Meraki connecting to a supported SIP provider. I had read a couple of posts about having trouble with getting the firewall checker to work, but it sounds like you have with no issue?
Outside of the Meraki will just be the SIP trunks, Smartphone app access and possible softphone/client access.

In this case, simply open these ports on your local MX: UDP 5060 (SIP), TCP 5090 (tunnel) and TCP 5001 (provisioning for mobile).

If you need any help, DM me.