3CX v18 tcp/udp port usage

[PeterCheng]

Hello sir,

We set up a 3CX for a while and we upgraded it from v16 windows based server to v18 Debian based server.
But actually I'm not familiar with the exact tcp/udp port 3CX uses, I hope to get answer here.
I have also looked at the links below:
https://www.3cx.com/docs/ports/
https://www.3cx.com/docs/manual/firewall-router-configuration/
And I hope there's one document which mentions the necessary tcp/udp ports in detail for v18 we are using.
If I'm wrong below, please correct me
For 3CX server inbound ports, it needs to turn on tcp/udp port 5060/5061 for VoIP provider and physical IP phones, tcp/udp 5090 for mobile app, tcp 443 for Windows app.
During a phone call , I need to turned on udp port 9000-10999 for media stream.
Regarding outbound port, tcp 443 for android push; tcp 443/2197/5223 for iOS push
tcp/udp port 5060/5061 for VoIP provider and physical IP phones ?(not sure)

I'd like to know what about udp port 7000-8999 for inbound? It seems that in our environment I've never seen it.
And any other ports?
Thanks.

Peter

 

[ChrisC_3CX]

First off, to get outbound traffic out of the way, bear in mind that there are other destinations the PBX needs to reach too, such as our activation servers on tcp 443, our messaging proxy, our stun servers, etc. That said, I have to ask, are you planning on restricting outbound traffic too?

Regarding Inbound traffic, it's all that's mentioned in the guide you linked. Nothing else should be required for inbound.

For 3CX server inbound ports, it needs to turn on tcp/udp port 5060/5061 for VoIP provider and physical IP phones

This is correct but, 5061 only requires TCP as the transport protocol as this is for Secure SIP and needs a connection-oriented protocol.

Apart from the IP Phones and SIP Providers, Port 5060 is also used by the 3CX STUN servers and also for bridged 3CX PBXs that are not configured to use the 3CX Tunnel.

During a phone call , I need to turned on udp port 9000-10999 for media stream.

Correct.

I'd like to know what about udp port 7000-8999 for inbound?

This port range is used only for local connections meaning you should not need to configure your firewall for them. Unless of course you have a firewall in between the PBX and local devices that may for instance be on a different subnet, etc.

Regarding outbound port, tcp 443 for android push; tcp 443/2197/5223 for iOS push

Correct.