Cannot Provision or update firmware on Yealink T29G IP Phones behind a local Sky Router

[steve.davidson]

I have 3CX version 18 running on an Azure dedicated server. It's all been working very well up until recently when I needed to upgrade the firmware on my Yealink T29G phones. All my phones connect to my 3CX server fine and all the telephony stuff works fine (i.e. the phones connect, calls work as expected etc.).

The problem appears to be with provisioning. I tried to update the firmware and the phones do not upgrade. I cannot see any errors. I also tried to provision one of them as I changed the name of the phone in 3CX. This change has not been applied to the phone. The strange thing is that I can get my phones to reboot using the function in 3CX.

The phones I'm struggling with sit behind my home router (Sky). As I state above, I'm not having any telephony related problems. It's only provisioning and firmware updates. Are there any firewall settings that may be blocking the incoming requests for these two activities? If yes, why would the firewall allow the command to reboot the phones to pass through?

Any help would be appreciated.

 

[CentrexJ]

Update firmware manually on the phone.

 

[steve.davidson]

Since the phone were provisioned originally on 3CX, I have been unable to access the phones via the IP address web interface. Wen you enter the IP address, it just times out.

 

[Evolute IT]

Since the phone were provisioned originally on 3CX, I have been unable to access the phones via the IP address web interface. Wen you enter the IP address, it just times out.

Https.

 

[JohnS_3CX]

I have 3CX version 18 running on an Azure dedicated server. It's all been working very well up until recently when I needed to upgrade the firmware on my Yealink T29G phones. All my phones connect to my 3CX server fine and all the telephony stuff works fine (i.e. the phones connect, calls work as expected etc.).

The problem appears to be with provisioning. I tried to update the firmware and the phones do not upgrade. I cannot see any errors. I also tried to provision one of them as I changed the name of the phone in 3CX. This change has not been applied to the phone. The strange thing is that I can get my phones to reboot using the function in 3CX.

The phones I'm struggling with sit behind my home router (Sky). As I state above, I'm not having any telephony related problems. It's only provisioning and firmware updates. Are there any firewall settings that may be blocking the incoming requests for these two activities? If yes, why would the firewall allow the command to reboot the phones to pass through?

Any help would be appreciated.

Hi Steve,

It's a bit of a tough situation: 3CX has dropped support for older security ciphers that are now considered vulnerable to attacks (industry wide, not just by 3CX).

The old firmware on the phones currently doesn't meet the minimum TLS standards to be able to make a secure connection with 3CX (using HTTPS, the method needed for stuff like downloading the provisioning file, firmware upgrades, and phonebook file).

Hence, the phone will fail every time it tries to download files from 3CX. The calls will still keep working though since they go over a different protocol.

What can you do now? Download the firmware file and put in on the phones manually. Once done, this upgrade will bring them back to modern TLS standards and will be able to continue working. You might need to get help from Yealink support articles if you cannot access their web UI. That's unfortunately out of our control.