3CX failed to establish a TCP connection to activation.3cx.com

[vincent Kavila]

Hello, community,

I needed assistance in activating 3CX.

I reinstalled the PBX but it failed to connect to the activation server.
Below is the error that I'm getting:

3CX failed to establish a TCP connection to activation.3cx.com.
Ensure that the local or border firewalls are configured to allow outbound traffic to activation.3cx.com

It was working, what could be the issue? My servers are windows based

Thank you

Regards
Vincent Kavila

 

[VasilisV_3CX]

Hi @vincent Kavila,

Can you provide more details? Specifically what version of the PBX you're running.

 

[vincent Kavila]

Hi @vincent Kavila,

Can you provide more details? Specifically what version of the PBX you're running.

I was running on V16 and upgraded to V18.
I have 3 servers, one worked 2 failed.

Thank you

 

[VasilisV_3CX]

Hi @vincent Kavila,

From one of the machines where the PBX is hosted, can you resolve activation.3cx.com? Try nslookup activation.3cx.com.

Can you check the primary DNS server, is it set to Google's DNS? If not can you change it to 8.8.8.8?

Another thing to check is if you're allowing traffic to and from activation.3cx.com within your firewall settings.

 

[vincent Kavila]

Hi @vincent Kavila,

From one of the machines where the PBX is hosted, can you resolve activation.3cx.com? Try nslookup activation.3cx.com.

Can you check the primary DNS server, is it set to Google's DNS? If not can you change it to 8.8.8.8?

Another thing to check is if you're allowing traffic to and from activation.3cx.com within your firewall settings.

 

[vincent Kavila]

Hi @VasilisV_3CX

Please see below nslookup results:

 

[Saqqara]

The above screen shot indicates a local network issue,

1. where the 3CX has incorrect DNS entries, Check the dns settings under network, maybe set them to 8.8.8.8 and 8.8.4.4

2. DNS queries from the 3CX are restricted on the firewall. Run nslookup , then type server 8.8.8.8 (this points to google dns server). do you get a ip address if you type activation.3cx.com

 

[vincent Kavila]

The above screen shot indicates a local network issue,

1. where the 3CX has incorrect DNS entries, Check the dns settings under network, maybe set them to 8.8.8.8 and 8.8.4.4

2. DNS queries from the 3CX are restricted on the firewall. Run nslookup , then type server 8.8.8.8 (this points to google dns server). do you get a ip address if you type activation.3cx.com

NSLOOKUPon my firewall appliance is going through, whereas when i do it from the server it is failing.
What could be the reason?
My primary DNS is 8.8.8.8

 

[Saqqara]

Would say the firewall is blocking DNS requests.

When you say primary DNS is 8.8.8.8 is this on the 3CX server network configuration.

 

[vincent Kavila]

Would say the firewall is blocking DNS requests.

When you say primary DNS is 8.8.8.8 is this on the 3CX server network configuration.

Hi Saqqara,

Please elaborate

 

[Saqqara]

What are the dns settings on the network card, if this pointing to external dns servers or local dns server (firewall or dns server)

 

[NickD_3CX]

To add to what is being said, from your screenshot, if this was ran on the 3CX Server, it looks like the Primary DNS is not 8.8.8.8, but an internal IP address which is not answering to the DNS request:


Double-check that you have set the DNS Server to be 8.8.8.8, or at the very least, something that answers to the request.
If you server has multiple NICs, check that you have remove the DNS entries from any unused NICs and preferably also disable them if they are not being used.

 

[vincent Kavila]

To add to what is being said, from your screenshot, if this was ran on the 3CX Server, it looks like the Primary DNS is not 8.8.8.8, but an internal IP address which is not answering to the DNS request:
View attachment 25871

Double-check that you have set the DNS Server to be 8.8.8.8, or at the very least, something that answers to the request.
If you server has multiple NICs, check that you have remove the DNS entries from any unused NICs and preferably also disable them if they are not being used.

Hi, I managed to Disable all the inactive NIC cards and nslookup was successful.
However, the activation is still failing

 

[NickD_3CX]

Hi, I managed to Disable all the inactive NIC cards and nslookup was successful.
However, the activation is still failing

In a PM, send me the FQDN of the system that you are having a problem activating.
Also, does your Firewall have any kind of DPI feature enabled? If yes, try disabling it temporarily, or excluding activation.3cx.com, then try again.

Just to be sure though, when you go to Settings --> License, what exact error are you getting, still the same?

 

[vincent Kavila]

In a PM, send me the FQDN of the system that you are having a problem activating.
Also, does your Firewall have any kind of DPI feature enabled? If yes, try disabling it temporarily, or excluding activation.3cx.com, then try again.

Just to be sure though, when you go to Settings --> License, what exact error are you getting, still the same?

Where do i share the FQDN?

 

[VasilisV_3CX]

Hi @vincent Kavila,

If you hover you mouse over NickD's icon, you'll see an option to start a conversation:

 

[NickD_3CX]

@vincent Kavila
I still don't see any activation requests.

Check this:

• Go to Settings --> License, and press the "Refresh" button, what exact error are you getting, still the same?
• Does your Firewall have any kind of DPI feature enabled? If yes, try disabling it temporarily, or excluding activation.3cx.com, then try again. This could be responsible for blocking Activation Requests.

 

[vincent Kavila]

@vincent Kavila
I still don't see any activation requests.

Check this:

• Go to Settings --> License, and press the "Refresh" button, what exact error are you getting, still the same?
• Does your Firewall have any kind of DPI feature enabled? If yes, try disabling it temporarily, or excluding activation.3cx.com, then try again. This could be responsible for blocking Activation Requests.

Any updates?

 

[NickD_3CX]

Any updates?

No @vincent Kavila ,

WE are waiting for an update from YOU. Have you tried what I asked?