3CX Cloud / Blocking WebInterface 5001

[mukkacow]

We would like allow access to 3CX Managment console, WebClient to only a specific IP.
We have many iPhones that are connected to our IKEv2 VPN server so provisioning/registration will not be affected even with all traffic blocked on port 5001 apart from the specific IP but...

....many other mobiles that we don't want to be connected to our VPN (and have random IP from mobile network) will fail registration/provisioning as they will be blocked.

It's possibile playing with following settings and doing appropriate changes in fw/iptables to set registration/provisioning on a different port than the 5001 used for 3CX Managment console / Webclient ?

WEB_ROOT_LOCAL_SEC https://xxx.xxx.xxx.xxx:5001/
WEB_ROOT_EXT_SEC https://xxx.xxx.xxx.xxx:5001/
MYPHONE_LINK_LOCAL_SEC https://xxx.xxx.xxx.xxx:5001/myphone/MPWebService.asmx
MYPHONE_LINK_EXT_SEC https://xxx.xxx.xxx.xxx:5001/myphone/MPWebService.asmx
REPORTER_LINK_LOCAL_SEC https://xxx.xxx.xxx.xxx:5001/Reporter
REPORTER_LINK_EXT_SEC https://xxx.xxx.xxx.xxx:5001/Reporter
PROVISIONING_LINK_LOCAL_SEC https://xxx.xxx.xxx.xxx:5001/provisioning
PROVISIONING_LINK_EXT_SEC https://xxx.xxx.xxx.xxx:5001/provisioning
MANAGEMENT_LINK_LOCAL_SEC https://xxx.xxx.xxx.xxx:5001/management
MANAGEMENT_LINK_EXT_SEC https://xxx.xxx.xxx.xxx:5001/management
CALLUS_LINK_EXT_SEC https://xxx.xxx.xxx.xxx:5001/webrtc

I've added port 5005 to iptables,fw,ngix 3cx config and changed it in EXT links. Now mobiles register correctly via port 5005 but I still have access to 3CX Managment console, Webclient through the new port.

I haven't been able to set it to works only for registration/provisioing. Any idea ?

 

[sip.bg]

See this topic, it is related: https://www.3cx.com/community/threa...the-admin-dashboard-on-different-ports.47890/