Autoprovision and manage phone devices from outside LAN

[pcmis]

What is the best way to auto provision and manage from outside LAN? I have a static IP so I don't use STUN.

I have both 5000 and 5001 ports open for TCP. I was able to auto-provision using https://myDomainName.3cx.us:5001/provisioning/xxxxxxxxxxx even though I have provisioning method set to LOCAL LAN.I have not been able to manage any phone settings from the pbx since provisioning.

Is it required to use SBC or STUN for auto provision from outside LAN?

 

[Saqqara]

What make / model of phones,

All the guides for supported phones are here https://www.3cx.com/sip-phones/

 

[pitrickzul]

yes you need SBC/STUN to provision outside LAN. Or you can setup a VPN to essentially be in the LAN.

You need supported devices to use SBC and STUN though

 

[pcmis]

Thanks for the response...I'm using yealink T46S phones.

Which is easier to setup...STUN or SBC? I find whenever I make any changes, they have unintended consequences. Trying to limit the possible issues setting this up!

 

[Phill.]

Stun is easier - as its just configuration placed on each phone (under the phone provisioning on the extension).

If you run into issues using STUN in an office location, i would recommend setting up a SBC, which is super easy and performs incredibly. If you do choose to setup a SBC, go for a Raspberry Pi to install it on rather than a windows machine.
Keep in mind there are limitations to the number of extensions recommended for a Raspberry Pi solution

 

[Allen_Miller]

For STUN you have additional work at remote site - static IP addresses for the phones and firewall rules for each phone. Much easier with SBC.

 

[Rhys Haskell]

An SBC is much easier unless its only 2 or 3 phones when the cost may become prohibitive.