3CX over Meraki MX Site-to-Site VPN

[Lance Caffey]

I have a client that is running 3CX on premise. They are planning to open a 2nd location and were asking if they could "port" some of their DIDs to the new location. After some thought I'm curious why we couldn't set up Site-to-Site VPN between their Meraki MX firewalls at each location and just pick up and move those phones to the new location.

This seems too easy to me. What might I be missing? I assume businesses do this all the time?

Thanks in advance.
-Lance

 

[jcostlow]

As long as the site to site VPN is passing traffic it will work. Phones will need to either be provisioned to use local IP or ensure the DNS can resolve the internal IP to go over the tunnel.

We have several customers with multiple locations and an IPSEC VPN between the SonicWalls at each office. Each SonicWall gives the main offices DNS server on the DHCP scope.

 

[Saqqara]

Another option install SBC at the remote site, this way you do not have to setup VPN tunnels. - https://www.3cx.com/docs/3cx-tunnel-session-border-controller/

Make sure the phones you get, support SBC

 

[SweetAction]

Yes, we have customers who have phones at remote locations provisioned as lan but really behind MX AutoVPN. As long as your VPN firewall rules allow the traffic, you are golden.
Meraki doesn't do SIP ALG at all, so you don't have to worry about that either.