3CX Client Requires Direct SIP Ports

[cambrio]

Our 3CX client requires us to manually configure firewall rules to allow direct SIP communication, instead of using the tunnel. Users report no sound during calls, internal or external, unless the SIP ports are open. 3CX claims all that needs to be done is allow the 3CX tunnel, but this is already turned on for the users.

 

[Alphabetic]

For clarification, are you referring to STUN or Direct SIP?

 

[Evolute IT]

Our 3CX client requires us to manually configure firewall rules to allow direct SIP communication, instead of using the tunnel. Users report no sound during calls, internal or external, unless the SIP ports are open. 3CX claims all that needs to be done is allow the 3CX tunnel, but this is already turned on for the users.

What? Hmm no.

SBC takes care of bypassing the firewall. Forget SIP ports. Just run an SBC on-site and provision the phones via that.

STUN is prone to issues all the time.

 

[SteveITS]

Our 3CX client requires us to manually configure firewall rules to allow direct SIP communication, instead of using the tunnel. Users report no sound during calls, internal or external, unless the SIP ports are open. 3CX claims all that needs to be done is allow the 3CX tunnel, but this is already turned on for the users.

The apps and web client also require media ports:https://www.3cx.com/docs/ports/
I'd suggest using the firewall checker until it passes, then you can back out rules until something doesn't work.

 

[cambrio]

On further checking, we do not need the SIP ports open, but do need the RTP/Media ports open.
We were following this guide here which does NOT specify we need the media ports when using the 3CX Apps, only for remote IP phones, which we are not using. https://www.3cx.com/docs/manual/firewall-router-configuration/ Is it expected to need the media ports open for 3CX Apps?

 

[SteveITS]

The naming is confusing but Windows Client is the legacy software and Desktop App is the web client in a wrapper to make it run outside of a browser. There are also the mobile apps.

If you're using the Desktop App follow the web client instructions. On the page you linked they mention WebRTC in the "Configure the Ports for your SIP Trunk / VoIP Provider" section: "Open these ports to allow 3CX to communicate with the VoIP Provider/SIP Trunk and WebRTC" or in https://www.3cx.com/docs/ports/ on "if you intend on using remote extensions, WebRTC or a VoIP Provider." So yeah it could be clearer.