3cx Google Cloud - LAN Registration Exception

[IDSMATT]

Hey All,

I've got started with the GCE version of 3cx, purely as we have multiple sites it makes sense.
I'm going to restrict the FW on google to limit non-tunnel protocol traffic to just our static IP addresses.

However, I did have to also un-enable

Extension > Options > Disallow use of extension out of the LAN (unticked)

To allow them to register, realistically I don't want to allow this with exception of some whitelisted IPs, is there a way I can do this?

Alternatively, if not - Can i globally turn this off and then I could just restrict it on the FW.

(I am making the assumption when it says 'outside of the lan' it only refers to SIP connection and not to tunnelled connection)

 

[YiannisH_3CX]

Hello @IDSMATT

That option applies only for extensions that are connected to the PBX using STUN. If you wish to leave that option enabled and allow only tunnelled connections to the PBX i would recommend provisioning your phones through the 3CX SBC. You will need an SBC device in each site. Alternatively you will need to have a VPN connection and provision the phones as local devices.
https://www.3cx.com/3cxacademy/videos/intermediate/configuring-remote-extensions/