Dismiss Notice
We would like to remind you that we’re updating our login process for all 3CX forums whereby you will be able to login with the same credentials you use for the Partner or Customer Portal. Click here to read more.

3CX SIP Server Outsite Access Problem

Discussion in '3CX Phone System - General' started by mueddib, Aug 20, 2014.

Thread Status:
Not open for further replies.
  1. mueddib

    Joined:
    Aug 20, 2014
    Messages:
    2
    Likes Received:
    0
    Hello all,

    we bought and started to use 3CX Server and SIP Server working in local networks, not problem.
    so we are having a problem from the outside 3CX client (iphone, android softphone).

    I have read this web site:

    http://www.3cx.com/blog/docs/ports-used/

    I install create rules Cisco ASA, Why does not connect WAN users SIP server?

    Help me plase, Regards.

    Access-List:

    object-group service 3CX
    service-object tcp destination eq 5000
    service-object tcp destination eq 5001
    service-object tcp destination eq 5060
    service-object udp destination eq 5060
    service-object tcp destination eq 5061
    service-object tcp destination eq 5090
    service-object udp destination eq 5090
    service-object udp destination range 9000 9049
    service-object tcp destination eq 4156

    access-list outside-in extended permit object-group 3CX any object sipserver
    access-group outside-in in interface outside

    NAT:

    object network sipserver
    host 10.0.4.2

    object service 3CX_Management
    service tcp destination eq 5000

    object service 3CX_Management_HTTPS
    service tcp destination eq 5001

    object service 3CX_SIP_TCP
    service tcp destination eq 5060

    object service 3CX_SIP_UDP
    service udp destination eq 5060

    object service 3CX_Secure_SIP
    service tcp destination eq 5061

    object service 3CX_Tunnel_Protocol_TCP
    service tcp destination eq 5090

    object service 3CX_Tunnel_Protocol_UDP
    service udp destination eq 5090

    object service 3CX_Media_Server
    service udp destination range 9000 9049

    object service 3CX_Data_Communication
    service tcp destination eq 4156

    nat (inside,outside) source static sipserver interface service 3CX_Management 3CX_Management
    nat (inside,outside) source static sipserver interface service 3CX_Management_HTTPS 3CX_Management_HTTPS
    nat (inside,outside) source static sipserver interface service 3CX_SIP_TCP 3CX_SIP_TCP
    nat (inside,outside) source static sipserver interface service 3CX_SIP_UDP 3CX_SIP_UDP
    nat (inside,outside) source static sipserver interface service 3CX_Secure_SIP 3CX_Secure_SIP
    nat (inside,outside) source static sipserver interface service 3CX_Tunnel_Protocol_TCP 3CX_Tunnel_Protocol_TCP
    nat (inside,outside) source static sipserver interface service 3CX_Tunnel_Protocol_UDP 3CX_Tunnel_Protocol_UDP
    nat (inside,outside) source static sipserver interface service 3CX_Media_Server 3CX_Media_Server
    nat (inside,outside) source static sipserver interface service 3CX_Data_Communication 3CX_Data_Communication
     
  2. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    11,123
    Likes Received:
    330
    Do you see any (outside) registration attempts in the 3CX server log?

    Have you run the 3CX Firewall Checker? that should tell you if ports are not open (forwarded), that way they should be, or there is (possibly) a firewall issue.
     
  3. mueddib

    Joined:
    Aug 20, 2014
    Messages:
    2
    Likes Received:
    0
    Hello,

    where is the 3CX logs? hmm, I use firewall-checker and result:

    Start test, v.1.0.4
    Extension '1009' has been unregistered 408
    3CX Phone System Server is unreachable using UDP transport. (408 Request timeout)
    Trying to use TCP transport.
    Extension '1009' has been unregistered 503
    Unable to reach 3CX Phone System Server.
    Possible causes:
    1. Firewall(NAT) modifies/blocks SIP packets sent to (or received from) PBX sending this network traffic to a completely different IP/destination
    2. Port forwarding is not configured on the 3CX Phone System border firewall or router
    3. SIP is being blocked
    4. The public IP Address of the network where this tool is sending packets from is blocked for security reasons
     
Thread Status:
Not open for further replies.