3CX on Azure

[Dennytje]

Hi Guys,

New to the 3CX system, and playing around with it.

What I am trying to reach:

3CX running on a VM on MS Azure platform

How far am I ?

Created the VM, setup the system, installed 3CX and apllied free licence.
Created the VoIP provider, registers fine
Created some extensions

Then in Azure created the following endpoint settings:

5060 -> 5060
5061 -> 5061
5090 -> 5090 TCP and UPD
5000 -> 5000

Now the status is as followed; I can reach the admin web interface from an external IP. Yet, registering a external extension is not possible. Also every single firewall checker run gives me that port forwarding is not properly configured.

It probably has something to do with Azure tunneling the traffic, but I can not figure out where it goes wrong.

The external IP is 138.91.54.8 and the VM IP is 100.92.142.143.

Anyone has an idea what I am missing ?

PS Firewall is turned off

UPDATE

The ports do show up as open when testing with a external website...
http://www.yougetsignal.com/tools/open-ports/
Port 5060 is open on suppahost01.cloudapp.net.

Yet the soft phone will still not connect.

UPDATE 2"

Phone connects for a second, and then comes back with error 407...

No idea what to do anymore..

 

[Nick@Troosters]

Hi,

I also got a VM working with a static DIP and a PIP, but where do I now open ports ?
If I open ports in the Windows Firewall, the firewall checker still says it is closed ?
Also a online port checker says it is so ?

 

[terra]

Hi,

I also got a VM working with a static DIP and a PIP, but where do I now open ports ?
If I open ports in the Windows Firewall, the firewall checker still says it is closed ?
Also a online port checker says it is so ?

im also interested in this, i have an azure vm with pip, and even if i open ports on the firewall, i still see them closed

 

[Pauliebrisbane]

im also interested in this, i have an azure vm with pip, and even if i open ports on the firewall, i still see them closed

Firewall rules on the Azure cloud network also need to be configured. It took me a while to find out where it was, though I haven't tested it yet. I have only tested on google cloud and aws.

The firewall rules are in the Virtual Machines section under the heading "ENDPOINTS", it seems you can't add a range and will have to manually enter the ports individually. *see attached

Again I haven't yet tested this (I already have 3cx in google cloud and aws, and i don't feel like adding all those firewall rules) but I would be interested to see how you go with it.

 

[troosters]

I also did Get-AzureVM -ServiceName "3CX" -Name "3CX" | Set-AzurePublicIP -PublicIPName "3CX" | Update-AzureVM
so it is really PIP

and then in Windows Firewall I could just open the ports

 

[terra]

i could get a 3cx instance to run proper, but the RTP works with the normal phones connected via sbc, but the webrtc will connect but no audio.

i tried 3cx support to no avail, i told them that the vm has a direct IP and that the local windows firewall is the only one regulating the packets, but they still could not help me.

i have the 3cx pbx running fine on azure, but if you so much as loot at it wrong or restart the vm it will break webrtc and no one seems to be able to figure out how to make it work again

 

[gbardissi]

It has something to do with the firewall mechanism that Azure uses. Bottom line is you wont be able to get the firewall checker to pass but it should function. Not reccomended of course but it should function.

 

[imerecom]

Actully, the firewall checker works just fine but you need to define static public and internal ip's on azure we have this working for both tenant and stand alone on azure...

look at this:

Asign local ip after creating vnet in portal:

PS C:\> Test-AzureStaticVNetIP –VNetName yourname –IPAddress 192.168.x.x

PS C:\> Get-AzureVM -ServiceName yourname -Name vmname | Set-AzureStaticVNetIP -IPAddress 192.168.x.x | Update-AzureVM


Asign static PIP:

Get-AzureRole -ServiceName yourname -Slot Production -InstanceDetails

Get-AzureVM -ServiceName yourname -Name yourname | Set-AzurePublicIP -PublicIPName yourname | Update-AzureVM

 

[terra]

I could get the PIP Going thx, but now webrtc is connecting but i get no audio its very frustrating

 

[terra]

also how do you guys do it when you need to restart your azure vm and when it comes back online you get a different local IP and a different PIP?