Solved Can't reach 3CX from outside the LAN

[Frank86]

I set up a new 3CX server and opened up firewall ports like for all my other installs.

I can access the PBX internally via web browser at LAN IP:5000 and via FQDN:5001. The PRI-based phone system works (can make and receive calls).

However, when I try from outside the LAN, by entering the 3CX-assigned FQDN that points to my static public IP (which points to my LAN IP via firewall 1:1 NAT config), the PBX can't be reached.

Also, the firewall test fails everything (SIP ALG, tunneling proxy, media server test), even though the firewall is configured like all my other ones, and all those ports are open, and there is no SIP ALG.

What am I doing wrong?

 

[Saqqara]

You can only access the 3CX management console externally on the https port (5001)

Guessing everything works internally fine.

I would double check all your firewall settings, have you rebooted the firewall ?

Any log files on the firewall to indicate what is happening to incoming traffic

 

[JohnS_3CX]

Hi Frank,

Regardless of whether its a 3CX system or any other web server, if you can't reach it from the outside then odds are there is something misconfigured/going wrong with the firewall, or the machine you are using to access it.

I would recommend to try accessing the external FQDN via your mobile using LTE only. If the FQDN DNS entry has already propagated, and it is still not accessible then you are probably looking at a firewall issue.

Also try https://yourpublicIP:5001 to eliminate the FQDN from the test entirely

 

[Alphabetic]

If youre running a Windows instance you can check your firewall port forwarding with this:

https://www.canyouseeme.org/

 

[Frank86]

Once I switched 3CX to using to our primary public IP, that fixed the problem. Thank you.

 

[JohnS_3CX]

Glad to hear!