Cannot activate new license, ISO linux install v16

[mkrecek]

Hi everyone,

I installed a fresh install as a VM using the original 3CX Linux ISO image.
3CX works perfect, firewall test fully passed.

However, I get error message that the activation.3cx.com server cannot be reached.
The firewall is properly set-up, no DPI, no filtering, no nothing, both for activation.3cx.com and the corresponding IP.

In fact, a 3CX service technician tells me he can see that the PBX reaches his activation servers, but the server does not get all info ?!? And it would be a firewall issue.
I would love to buy a proper 3CX license, but only if this works - the PBX itself works flawlessly.

Please help,
Thanks a lot,

Michael

 

[Evolute IT]

Hi everyone,

I installed a fresh install as a VM using the original 3CX Linux ISO image.
3CX works perfect, firewall test fully passed.

However, I get error message that the activation.3cx.com server cannot be reached.
The firewall is properly set-up, no DPI, no filtering, no nothing, both for activation.3cx.com and the corresponding IP.

In fact, a 3CX service technician tells me he can see that the PBX reaches his activation servers, but the server does not get all info ?!? And it would be a firewall issue.
I would love to buy a proper 3CX license, but only if this works - the PBX itself works flawlessly.

Please help,
Thanks a lot,

Michael

Where did you host the PBX? That seem strange if 3CX sees the connection. That might be a VM-provider issue.

 

[mkrecek]

We are hosting it on our own local VMWare.

 

[Saqqara]

Change the DNS servers to google 8.8.8.8 or 8.8.4.4

This link may help - https://www.3cx.com/community/threa...-license-activation-server.67412/#post-291806

 

[Evolute IT]

We are hosting it on our own local VMWare.

What specs did you give it?

How is your network configured? 1 NIC/2 NICs?

 

[Evolute IT]

Change the DNS servers to google 8.8.8.8 or 8.8.4.4

This link may help - https://www.3cx.com/community/threa...-license-activation-server.67412/#post-291806

DNS are not an issue if the initial connection work. Sounds more like dynamic ports issue when doing the activation. Data cannot get back for some reason.

 

[mkrecek]

I tried this, but the 3CX-provided Debian ISO already has DNS 8.8.8.8 in resolv.conf (plus there is one nameserver 192.168.1.254 entry) > if I type in nslookup it properly resolves via DNS 8.8.8.8 to the 3CX activation server. So this does not help unfortunately.

 

[mkrecek]

DNS are not an issue if the initial connection work. Sounds more like dynamic ports issue when doing the activation. Data cannot get back for some reason.

1 NIC as a DMZ towards the network - the SonicWall has all outgoing ports open for the 3CX PBX

 

[Evolute IT]

1 NIC as a DMZ towards the network - the SonicWall has all outgoing ports open for the 3CX PBX

Have you configured your SonicWall as described in the docs here? https://www.3cx.com/docs/sonicwall-firewall-configuration/

Also, why not create it in the Cloud with one of the supported providers? Or simply where you want.

 

[mkrecek]

Have you configured your SonicWall as described in the docs here? https://www.3cx.com/docs/sonicwall-firewall-configuration/

Also, why not create it in the Cloud with one of the supported providers? Or simply where you want.

Sonicwall fully set-up according to the docs, yes. This is why the firewall check now worked.
We have a VM here anyway, so I don't see why we put it as to cloud provider... The PBX works perfect, it's just the activation does not work, so I cannot buy a license.

Hope someone can help

 

[Evolute IT]

Sonicwall fully set-up according to the docs, yes. This is why the firewall check now worked.
We have a VM here anyway, so I don't see why we put it as to cloud provider... The PBX works perfect, it's just the activation does not work, so I cannot buy a license.

Hope someone can help

Please run a packet capture on all interface when trying to activate 3CX. If the PBX is in a DMZ, does it have a 1:1 NAT with a public IP?

Also, check the logs for any indication of issues.

 

[cobaltit]

In fact, a 3CX service technician tells me he can see that the PBX reaches his activation servers, but the server does not get all info ?!? And it would be a firewall issue.
I would love to buy a proper 3CX license, but only if this works - the PBX itself works flawlessly.

A 3CX service technician? You bought a support ticket?

Anyways, try disabling IPv6.

 

[JohnS_3CX]

Hi Michael,

Also ensure nothing is messing with TLS packets in your firewall, see if there are any failed TLS handshakes by running a capture in one tab, and editing your license key in another tab. Just click edit and then OK to cause a new handshake between your PBX and the activation server.