3CX Mapping does not match

[Alberto Lara]

I can´t start my 3CX service. I have all the ports open in my Tp-link model TL-ER5120. And in the server i have all rules added and i trying disable firewall but dont work. I get this error in firewall test.

resolving 'stun-us.3cx.com'... done
resolving 'stun2.3cx.com'... done
resolving 'stun3.3cx.com'... done
resolving 'sip-alg-detector.3cx.com'... done
testing 3CX SIP Server... failed (How to resolve?)
stopping service... done
detecting SIP ALG... not detected
testing port 5060... Mapping does not match 5060. Mapping is 2145. (How to resolve?)
starting service... done
testing 3CX Tunneling Proxy... failed (How to resolve?)
stopping service... done
testing port 5090... Mapping does not match 5090. Mapping is 2625. (How to resolve?)
starting service... done
testing 3CX Media Server... canceled
stopping service... done
testing ports [9000..10743]... canceled
testing port 9000... Mapping does not match 9000. Mapping is 3010. (How to resolve?)

 

[leejor]

It might be that your router is doing port re-mapping. There may be a setting to turn this off. You say you have the ports "open", but does this mean they are forwarded to the IP of the 3CX server?

Have a read... https://www.3cx.com/community/threads/tplink-router.49622/ not the same model, but not sounding optimistic.

 

[YiannisH_3CX]

Hello @Alberto Lara

You could also read the firewall checker guide and try using the examples to troubleshoot the issue
https://www.3cx.com/docs/firewall-checker/

 

[Alberto Lara]

@YiannisH_3CX

My router has already verified and correctly redirects the ports to the server ip. As in the case of a test, these are marked as open. Within the server the firewall has the rules of 3cx. Also probe deactivating the firewall. And even then it gives me that problem

 

[YiannisH_3CX]

This is why i suggested following the troubleshooting guide and running wireshark side by side the firewall checker. Wireshark captures traffic on the NIC of the machine so you will able to verify what is being sent by 3CX and what is received before the packets reach 3CX. If what is sent does not match what is received then the firewall check will fail.