3CX SIP Server Outsite Access Problem

[mueddib]

Hello all,

we bought and started to use 3CX Server and SIP Server working in local networks, not problem.
so we are having a problem from the outside 3CX client (iphone, android softphone).

I have read this web site:

http://www.3cx.com/blog/docs/ports-used/

I install create rules Cisco ASA, Why does not connect WAN users SIP server?

Help me plase, Regards.

Access-List:

object-group service 3CX
service-object tcp destination eq 5000
service-object tcp destination eq 5001
service-object tcp destination eq 5060
service-object udp destination eq 5060
service-object tcp destination eq 5061
service-object tcp destination eq 5090
service-object udp destination eq 5090
service-object udp destination range 9000 9049
service-object tcp destination eq 4156

access-list outside-in extended permit object-group 3CX any object sipserver
access-group outside-in in interface outside

NAT:

object network sipserver
host 10.0.4.2

object service 3CX_Management
service tcp destination eq 5000

object service 3CX_Management_HTTPS
service tcp destination eq 5001

object service 3CX_SIP_TCP
service tcp destination eq 5060

object service 3CX_SIP_UDP
service udp destination eq 5060

object service 3CX_Secure_SIP
service tcp destination eq 5061

object service 3CX_Tunnel_Protocol_TCP
service tcp destination eq 5090

object service 3CX_Tunnel_Protocol_UDP
service udp destination eq 5090

object service 3CX_Media_Server
service udp destination range 9000 9049

object service 3CX_Data_Communication
service tcp destination eq 4156

nat (inside,outside) source static sipserver interface service 3CX_Management 3CX_Management
nat (inside,outside) source static sipserver interface service 3CX_Management_HTTPS 3CX_Management_HTTPS
nat (inside,outside) source static sipserver interface service 3CX_SIP_TCP 3CX_SIP_TCP
nat (inside,outside) source static sipserver interface service 3CX_SIP_UDP 3CX_SIP_UDP
nat (inside,outside) source static sipserver interface service 3CX_Secure_SIP 3CX_Secure_SIP
nat (inside,outside) source static sipserver interface service 3CX_Tunnel_Protocol_TCP 3CX_Tunnel_Protocol_TCP
nat (inside,outside) source static sipserver interface service 3CX_Tunnel_Protocol_UDP 3CX_Tunnel_Protocol_UDP
nat (inside,outside) source static sipserver interface service 3CX_Media_Server 3CX_Media_Server
nat (inside,outside) source static sipserver interface service 3CX_Data_Communication 3CX_Data_Communication

 

[leejor]

Do you see any (outside) registration attempts in the 3CX server log?

Have you run the 3CX Firewall Checker? that should tell you if ports are not open (forwarded), that way they should be, or there is (possibly) a firewall issue.

 

[mueddib]

Hello,

where is the 3CX logs? hmm, I use firewall-checker and result:

Start test, v.1.0.4
Extension '1009' has been unregistered 408
3CX Phone System Server is unreachable using UDP transport. (408 Request timeout)
Trying to use TCP transport.
Extension '1009' has been unregistered 503
Unable to reach 3CX Phone System Server.
Possible causes:
1. Firewall(NAT) modifies/blocks SIP packets sent to (or received from) PBX sending this network traffic to a completely different IP/destination
2. Port forwarding is not configured on the 3CX Phone System border firewall or router
3. SIP is being blocked
4. The public IP Address of the network where this tool is sending packets from is blocked for security reasons