3cx win server 2019 firewall check issue

[mguan]

Has anyone has such an issue?
our 3cx works well in server 2012 for a long time, and today we upgraded to win server 2019, and the route doesn't change anything.
some of the media ports are failed, please see the attachment

I searched several posts but didn't figure out why, this post seems has the same issue as mine
https://www.3cx.com/community/threads/3cx-version-16-aws-windows-server-firewall-check.67830/

I don't know why it's the port of 9146 in every test, I wrote a udp server and client using 9146, the port work, so no program is using this port and no firewall issue. (of course, test after stopping the media service) ,

I'm testing through mstsc, does it use that port? I have no idea, please help!

by the way, the phone system seems works, I can call in and call out, but I'm afraid some of calls will fail due to the port issue.

 

[mguan]

FYI, Just changed back to server 2012, and took a firewall test too, it turned out to be the same issue in 2012.

 

[Evolute IT]

Sounds like a firewall issue. Have you tried rebooting the router/firewall?

 

[JohnS_3CX]

You need to revise your firewall settings, it seems that some ports are not working in full cone NAT.

Each firewall it different so it's a good idea to look up how to perform full cone NAT on your specific model.

Make sure the Windows firewall is disabled so it does not interfere.

 

[mguan]

Sounds like a firewall issue. Have you tried rebooting the router/firewall?

Thank you Frederick, yes, reboot twice, and once I saw Mapping does not match 5060. Mapping is 1024, but it did show again in later test.

 

[mguan]

You need to revise your firewall settings, it seems that some ports are not working in full cone NAT.

Each firewall it different so it's a good idea to look up how to perform full cone NAT on your specific model.

Make sure the Windows firewall is disabled so it does not interfere.

Thank you, John, I aslo think there is something wrong with our router, but I assign a dedicated ip to 3cx server in our router, which is called one to one mapping in the sever and no any other nat settings avaliable, ps, we have 5 ips on this line, and do other mappings for other ip and some port nat on the router.

and it's also strange that if I turn off the win server firewall of 2019, the 5060 port test get failed.

Later I will try using my udp test tool, put the server end on 3cx server and client end out of the office, to test 9146 udp port through the router, yesterday I just test from an internal client, which can only proof the 3cx server and win firewall works.

 

[mguan]

I installed 3cx on another 2019 server in idc rather than in our office, which has an internet ip, and the firewall test is successful, so it should be our router's issue, in the office we have a tplink router and then 2 cisco swiths, I don't know how to check the cisco swith, I'll check the port with my udp program and then ask IT's help.