Solved 3cx server in the cloud with mikrotik router

[netsystems]

Hello,

i am having issues no voice when calling after changing my router from dlink to mikrotik, i tried creating rules in the firewall to allow port 9000 - 10999 but still not working, has anyone configure 3cx server in the cloud using mikrotik.

thank you

 

[HRMNY]

https://www.3cx.com/community/threads/information-to-provide-when-requesting-help.67558/

Some information about you system that is almost always useful is the following:

• 3CX Version, e.g. Standard Annual 16.0.2.910
• Server OS, e.g. Debian 9 / Windows Server 2012 R2 / Raspberry Pi
• Is the 3CX Server Hosted and where?
• IP Phone Make/Model/Firmware
• Provisioning Method: Local / VPN / STUN / SBC
• Trunk Provider or Gateway Make/Model
• Has the Firewall Checker passed: YES / NO
• Are custom Phone Templates being used: YES / NO

 

[cobaltit]

Did you follow this guide?

https://www.3cx.com/docs/mikrotik-firewall-configuration/

 

[netsystems]

https://www.3cx.com/community/threads/information-to-provide-when-requesting-help.67558/

Some information about you system that is almost always useful is the following:

• 3CX Version, e.g. Standard Annual 16.0.2.910
• Server OS, e.g. Debian 9 / Windows Server 2012 R2 / Raspberry Pi
• Is the 3CX Server Hosted and where?
• IP Phone Make/Model/Firmware
• Provisioning Method: Local / VPN / STUN / SBC
• Trunk Provider or Gateway Make/Model
• Has the Firewall Checker passed: YES / NO
• Are custom Phone Templates being used: YES / NO

• 3CX Version, Professional Annual 16.0.2.910
• Server OS, Debian 9
• Is the 3CX Server Hosted and where? Hosted - windows Azure
• IP Phone Make/Model/Firmware - Grandstream GXP 2130 firmware 1.0.4
• Provisioning Method: Local / VPN / STUN / SBC - Stun
• Trunk Provider or Gateway Make/Model - IPNX
• Has the Firewall Checker passed: YES / NO - No
• Are custom Phone Templates being used: YES / NO - No

 

[netsystems]

Did you follow this guide?

https://www.3cx.com/docs/mikrotik-firewall-configuration/

Yes i tried this, and checked the firewall and not working

 

[nub]

I am using just winbox,

make a rule that is in reverse to, you can disable it if it has no traffic on the stats tab.


see attached pic:

edit!
NOTE: protocol is wrong, that should be 17 udp not tcp.

 

[cobaltit]

Not sure what not working means. I'm assuming the RTP range since that's what you lead with but is all all ports, some ports, ports above a certain range, etc?

 

[JohnS_3CX]

So the machine is in the cloud, and the phones are behind the mikrotik connecting to the PBX remotely via STUN? The port forwards will need to be done per phone in this case so the screenshot above would indicate wrong settings and should be ignored. You may have an easier time with a 3CX SBC if the above is accurate

How many phones are there and do all the extensions currently have "PBX Delivers Audio" enabled?

 

[netsystems]

Not sure what not working means. I'm assuming the RTP range since that's what you lead with but is all all ports, some ports, ports above a certain range, etc?

yes I can see the RTP Sart from 14000 and ends 14019, is that what your asking about?

 

[netsystems]

So the machine is in the cloud, and the phones are behind the mikrotik connecting to the PBX remotely via STUN? The port forwards will need to be done per phone in this case so the screenshot above would indicate wrong settings and should be ignored. You may have an easier time with a 3CX SBC if the above is accurate

How many phones are there and do all the extensions currently have "PBX Delivers Audio" enabled?

3 physical phones now, rest are using softphone on devices, PBX Delivers Audio not enabled

 

[JohnS_3CX]

PBX Delivers Audio is necessary for STUN phones. You can enable it on their extensions and try again.

Then you must open the individual ports for each extension on the microtik. note that STUN extensions need unique ports per extension device configured in the management console


Ext 1: SIP Port 5065, RTP Ports 14000-14019
Ext 2: SIP Port 5066, RTP Ports 14020-14039
Ext 3: SIP Port 5067, RTP Ports 14040-14059
(and open all these on mikrotik per phone IP, each their own)

 

[netsystems]

PBX Delivers Audio is necessary for STUN phones. You can enable it on their extensions and try again.

Then you must open the individual ports for each extension on the microtik. note that STUN extensions need unique ports per extension configured in the management console

View attachment 13305
Ext 1: SIP Port 5065, RTP Ports 14000-14019
Ext 2: SIP Port 5066, RTP Ports 14020-14039
Ext 3: SIP Port 5067, RTP Ports 14040-14059
(and open all these on mikrotik per phone IP, each their own)

IP on the local LAN is dhcp enabled, do you want me to give static ip to each extensions for this? with the other router calls are received without issues to the voice.

 

[netsystems]

I am using just winbox,

make a rule that is in reverse to, you can disable it if it has no traffic on the stats tab.


see attached pic:

edit!
NOTE: protocol is wrong, that should be 17 udp not tcp.

View attachment 13296

priv ip - is this the ip for the router?

 

[JohnS_3CX]

Don't trust the fact that it worked with the other router, using STUN without opening ports will work until one day it doesn't, so for consistent reliability you need to open the ports.

Static IP is not really needed by the phone, if you can ensure that the ports you open will always be assigned to the same phone with its unique MAC address. Many routers can reserve DHCP IPs for specific devices for this reason. If not, then yes setup static IPs

 

[netsystems]

Don't trust the fact that it worked with the other router, using STUN without opening ports will work until one day it doesn't, so for consistent reliability you need to open the ports.

Static IP is not really needed by the phone, if you can ensure that the ports you open will always be assigned to the same phone with its unique MAC address. Many routers can reserve DHCP IPs for specific devices for this reason. If not, then yes setup static IPs

thank you for this, but all my extension as details as follows below

local sip port for phone -> 5060
local rtp audio port starts -> 14000
local rtp aduio port ends -> 14019

would i have to change this for all physical desk phones?

 

[JohnS_3CX]

Yes. Please refer to my post #11 where I explain how it needs to be done to ensure good service

 

[netsystems]

So the machine is in the cloud, and the phones are behind the mikrotik connecting to the PBX remotely via STUN? The port forwards will need to be done per phone in this case so the screenshot above would indicate wrong settings and should be ignored. You may have an easier time with a 3CX SBC if the above is accurate

How many phones are there and do all the extensions currently have "PBX Delivers Audio" enabled?

Hello JohnS_3cx

can i install the 3cx SBC on the same server as my 3cx server?

 

[JohnS_3CX]

No please do not do that, it will probably break BOTH the pbx and the SBC.

Are you planning on using an SBC instead of STUN? It should be either one or the other.

 

[netsystems]

PBX Delivers Audio is necessary for STUN phones. You can enable it on their extensions and try again.

Then you must open the individual ports for each extension on the microtik. note that STUN extensions need unique ports per extension device configured in the management console

View attachment 13305
Ext 1: SIP Port 5065, RTP Ports 14000-14019
Ext 2: SIP Port 5066, RTP Ports 14020-14039
Ext 3: SIP Port 5067, RTP Ports 14040-14059
(and open all these on mikrotik per phone IP, each their own)

Hello JohnS_3cx

First IP phone now working using instrution above, working on the other right now

 

[netsystems]

Hello JohnS_3cx

First IP phone now working using instrution above, working on the other right now

Thank you, JohnS_3cx, both IP Phone now working and voice okay