3CX Self-Hosted / WAN IP Change

[ThatRobbo]

Hi all,

We host 3CX within Azure (Self-Hosted) and we recently changed WAN provider and as a result WAN IP. We now no longer have access to the old IP, and when trying to login to the 3CX management portal we are constantly seeing: Login access denied. Too many incorrect login attempts. Try later or contact the Administrator.

We have SSH access and a backup, the nuclear option here is to deploy a new VM with the backup, but is that going to replicate any whitelist access from certain WAN IPs or is there a way to configure any of the support files (nginx) on the VM so that we can add the new whitelist? Alternatively I might be barking up the wrong tree and it might just be that the admin account is being spammed for login, if thats the case is there a way to create a new one via SSH?

Thanks for your time!

 

[NicholasP_3CX]

I'm assuming you had the Console restrictions turned on with the IP Address defined as the old one.

If you have access to your backup, thats a good thing.

Extract, and check the XML inside and look for this parameter



Within the quotes you should see your old IP Address. Change this to your new IP address, upload the backup to the server, and restore the configuration through the command line

https://www.3cx.com/docs/backup-restore-command-line/

 

[ThatRobbo]

Thanks for the above. I have a backup but the XML inside looks encoded? I've attached an image.

The existing box is a Debian/Linux appliance and I'm trying to open via my Windows PC. I can open via SSH if you think that would be better?

 

[NicholasP_3CX]

Use the document i provided to make a new backup, then download that one. Do not encrypt it. You will then be able to see the information in clear text. A command line backup will only allow you to do the backup locally, for security reasons.

Do not trigger the --pwd=Value option.

 

[ThatRobbo]

That's great, I've done the above and it is indeed whitelisted. If i amend it as per your comment and then re-zip the backup and restore, other than knocking the phone system out briefly it should just continue as normal? One final side question on this would be do i take a full backup or one with licencing and FQDN etc? I'm assuming I'd want to restore the full backup or would restore only part of the backup use the underlying settings?

 

[NicholasP_3CX]

When you do your backup, only extract the one file. Then make the change you need, and add it back to the zip file. This will alsk you to replace the file within the zip. dont extract the whole this then create a new zip file.

When you do the backup, use all the "options". Just dont do the --pwd option. This will create a full backup that will restore your config in full.

It will temporarily stop the PBX services as you rightly mentioned, so you can do this after hours when the PBX isnt used.