3CX Cloud Remote STUN

[kent3]

Hey Guys & Gals

We have always used 3CXSBC when provisioning more than 4/5 remote phones to a 3CX instance. I have a new client (potential) that wants the system to be fully cloud, NO SBC/VPN! This client will have 140+ Fanvil devices connected to our hosting server. Anyone had any experience with something similar? I know I'll have to set each user individual RTP ports etc.

The reasoning for the fully cloud system is so that every user can take their phone home and it would work without any admin.

Appreciate any input!

 

[JohnS_3CX]

Hi Kent,

The customer's reasoning is flawed unfortunately. For STUN, the same amount of admin applies whether you are in the office or at home.

1. Taking the phone home will still require that the user knows how to forward the correct ports on their modem
2. They will still have to disable ALG or packet inspection
3. Their provider may even block SIP traffic that does not belong to them as an ISP
4. Some providers may not even allow you to log on to the modem and make any changes
5. They may periodically reprovision the modems and your settings may be erased.
6. The voice calls will be affected if the user is also down/uploading stuff at the same time, because there is no bandwidth control
7. Each home connection is just not a controlled environment like the one you could build if it was all under your own control as a system architect.

If this was the reasoning behind the STUN requirement, they're gonna have a bad time.

The best option for home users is the mobile client or webclient. The office phones can then use VPN or SBC without any restrictions, so their experience will not have to suffer due to a requirement designed for home users, who are ultimately out of your control.

 

[eddv123]

If you use STUN full stop you are going to have issues, whether it be onsite (having to configure port forwarding rules for multiple endpoints) or taking phones home and having to deal with cheap provider routers which have features that cannot be turned off such as SIP ALG.

This is why the SBC was created really.

I am by no means involved in this setup however Telcobridges have integrated their hosted SBC with 3CX:

This might offer an option but is not officially supported by 3CX.

 

[kent3]

Thanks for the input guys!

I feel exactly the same about the request and always use SBC but some clients refuse to budge until they hit these hurdles, plus another 3CX provider (my competitor) has promised this setup in their proposal. As long as I outline the potential minefield, I'm covered

 

[eddv123]

(my competitor) has promised this setup in their proposal.

Promised the setup without issues, or just promised the setup ?

Id like to see them get around a home user with a locked down provider router experiencing issues related to call dropping or audio issues.

That is where technical knowledge comes in, you can explain that you can do the same if desired however explain the additional technical pitfalls of configuring in such a way:

* Potential security risk - open ports.
* No encrypted traffic
* Potential issues with one way audio, call transfers, dropped calls (the lists on the forums are endless).

If they want to continue from there at least you have explained the situation to them.

Note: we have sites in this state working fine, the issue is you are heavily reliant on the IT provider/in house IT to configure the firewall correctly and securely.

 

[kent3]

Promised the setup without issues, or just promised the setup ?

Id like to see them get around a home user with a locked down provider router experiencing issues related to call dropping or audio issues.

That is where technical knowledge comes in, you can explain that you can do the same if desired however explain the additional technical pitfalls of configuring in such a way:

* Potential security risk - open ports.
* No encrypted traffic
* Potential issues with one way audio, call transfers, dropped calls (the lists on the forums are endless).

If they want to continue from there at least you have put your 2 pence worth in.

Note: we have sites in this state working fine, the issue is you are heavily reliant on the IT provider/in house IT to configure the firewall correctly and securely.

The majority of sales guys always promise the world and never warn of any possible issues just to get the commission

Honesty id the best policy, doesnt come back to bite you in the arse either

 

[tyenglish]

Hey Guys & Gals

We have always used 3CXSBC when provisioning more than 4/5 remote phones to a 3CX instance. I have a new client (potential) that wants the system to be fully cloud, NO SBC/VPN! This client will have 140+ Fanvil devices connected to our hosting server. Anyone had any experience with something similar? I know I'll have to set each user individual RTP ports etc.

The reasoning for the fully cloud system is so that every user can take their phone home and it would work without any admin.

Appreciate any input!

I highly recommend you show them the Webclient/Chrome App/Phone App. Setting an expectation that the phones can go anywhere at anytime makes for a bad experience. ISPs modems have different settings such as SIP ALG and closed ports that cause many issues and none of it is uniform. Get them set up on the App would be my recommendation.

 

[Alphabetic]

Surely lugging around a deskphone all the time is gonna be a pain. Have you offered them the mobile app?