Central firmware update to Yealink phone not working

[Keith Beeby]

Hi

Under the Phone section in the admin console, it shows that some of our Yealink Phones (T21P E2) need firmware updates, I select the phone(s) and choose the Firmware upgrade, but the phone never get the firmware update?

Any ideas why its not working ?

Thanks

Keith

 

[Michael Groom]

Are these phones remote or local? I have had this issue before and sometimes you will just have to do a manual firmware update as seen here https://www.3cx.com/sip-phones/yealink-t20p-t22p-t26p-t28p/

 

[Keith Beeby]

Are these phones remote or local? I have had this issue before and sometimes you will just have to do a manual firmware update as seen here https://www.3cx.com/sip-phones/yealink-t20p-t22p-t26p-t28p/

Hi All phones are remote, (cloud based hosting of 3cx)

 

[Michael Groom]

You will need to manually update them, My system is setup the same way and will not push the firmware update across the stun server from what i have found.

 

[Keith Beeby]

Any options to get this to work, deploying firmware centrally where the all the phone are remote is essential, is this just a limitation of the 3CX solution?

I can provision the phones remotely so wonder why it can just get the command to get the lastest firmware from the 3CX servers? Also strangely enough the option to reboot the phone also doesn’t work?

 

[YiannisH_3CX]

Hello @Keith Beeby

As long as the phones are provisioned correctly with unique sip ports and the port forwarding was done correctly to the remote firewall you should be able to reboot and upgrade the firmware of the phones through the manager console.
https://www.3cx.com/3cxacademy/videos/intermediate/configuring-remote-extensions/

 

[CCAdmin]

We are having this issue as well.
We are now using Google Cloud for our PBX host (through the 3CX wizard process).
All the firewall rules are in place in Google Cloud that the 3CX wizard built and there
are rules on our remote firewalls that accept traffic from the PBX internet IP.
The phones/extensions are working fine and per your video link they are all set to "PBX delivers audio" since more than one phone is located remotely. The phones are set with separate/unique SIP/RTP ports just like your video mentions.

However, we are also unable to remotely update our firmware centrally from the PBX.

Maybe there's a firewall rule that the 3CX wizard doesn't create when it builds the Google Cloud PBX?

 

[YiannisH_3CX]

@CCAdmin

Are the unique sip ports correctly forwarded on the remote sites firewall? Are you able to reboot the phones through the management console?
Firmware updates are done through https so no additional configuration is required on the PBX firewall.

 

[CCAdmin]

Yes, the sip ports are FWD'd on the remote firewall.
Yes, I'm able to reboot the phone.
The firmware will not apply though.
Can't get the firmware to work remotely.

 

[CCAdmin]

YiannisH_3CX - any update on this? I have setup everything you claim is needed and yet the firmware still will not update centrally from the 3CX server. We have to manually go to each phone.

This is a 3CX (Linux) server on Google cloud, created by your wizard process.

 

[YiannisH_3CX]

In that case we will need to further investigate the issue further. Please check your inbox as i have sent you a p.m. with details on what we will need to troubleshoot the issue.

 

[TeleTech]

Curious if there has been any update on this?

 

[craigreilly]

is it an older firmware? sometimes you can not jump too far between firmwares and need an intermediate update.

 

[CCAdmin]

is it an older firmware? sometimes you can not jump too far between firmwares and need an intermediate update.

I updated a T23G to a firmware one step down from the server suggested and that phone actually rebooted and updated itself to the newest one without my intervention. I'll have to test more of those to see if that was a fluke or not.

However, I did the same with a T22P (loaded 7.73.0.50 vs server suggested 7.73.0.60). After rebooting the phone and seeing it on the server, it still did nothing when attempting to upgrade it via the server "phones" page.

 

[CCAdmin]

I've been working with 3CX on this and found the issue/resolution:

Issue:
PBXExpress 3CX v15 uses a new "Let's Encrypt X3" SSL cert that isn't supported on older FW.
x.73.0.60 is the first firmware that supports the new "Let's Encrypt X3" SSL that v15 uses.
Also, Yealink doesn't support jumping several firmware versions.

Resolution:
If you haven't upgraded to v15 yet, update all your phones to the latest approved 3CX FW, then upgrade.
If you have already updated your server to v15... If your phones are too far back, manually update them to x.73.0.60 and you should be good with any future FW updates centrally from the PBX. If your phones are close to the FW version, you must manually "disable" the "Only Accept Trusted Certificates" setting, then you can use the PBX to centrally update the phone. Or, since you're already in the phone manually, you can just update to the latest FW.