Block remote non-tunnel connections - firmware update fail

[bdpbxer]

Upgraded to V20. Then tried to update the firmware on Fanvil V65 phones. Found the IP address of the phones on the IP blacklist. Permitted the IP address. Still having problems updating phones. Finally, I noticed "Reason: Block WAN requests is ON". Should "Block remote non-tunnel connections" be enabled or disabled when using a SBC? I never set that option for the users. I have two sites with phones each with their own SBC. Some of the users have a phone in each location provisioned to the correct SBC with the same extension. For example: extension 106 will have a phone on the same network as SBC01 and a phone on the same network as SBC02. The PBX is in the cloud.

Update: Disabled "Block remote non-tunnel connections" then tried updating the firmware again. A new log entry saying block wan requests is on". The IP address is set to allow.

 

[JohnS_3CX]

Should "Block remote non-tunnel connections" be enabled or disabled when using a SBC?

It should always be enabled for security reasons.


Most importantly I'd suggest deleting the phone, upgrading the firmware manually, then once done you can assign it on your extension, selecting the correct SBC. The SBC needs to be online (green) before you assign any phones to it.



Alternatively, you could make the V65 a router phone (with its own build in SBC) when using our latest firmware.

 

[bdpbxer]

It turns out the error had nothing to do with the firmware upgrades. The error was referring to a phone that was provisioned without the SBC. Once corrected, that phone registered and firmware upgraded.

The firmware upgrade troubles are a bit of a mystery. After several tries all but two of the phones upgraded. We have determined the last two phones are connected to an IP range different than the SBC. We are still working on getting that corrected.