D305 / D315 / D785 lost webui access after firmware update

[spod]

Hello

It's been months i have big issue acessing web ui on all my phone since i updated firmware.
There was a similar topic few months ago, does anyone have a clue about it?

It seems all ports are closed, i don't even get a chance to put login / password.

Regards

 

[JohnS_3CX]

Hi @spod

That should not be the case normally, they should be fully accessible on the latest 3CX firmware.

But we have no information on what your setup is like currently to draw any conclusions, kindly read the below article, and share all the basic info stated there so we can get a better idea of your setup:
https://www.3cx.com/community/threads/information-to-provide-when-requesting-help.67558/

 

[spod]

Thanks
My setup :

• 3CX Version,18.0 (Build 314)
• Server OS, e.g. Debian 10
• Is the 3CX Server Hosted and where? On-premises (virtualized on nutanix)
• IP Phone Make/Model/Firmware version, Snom D315 10.1.84.15
• Provisioning Method: Local
• Trunk Provider or VoIP Gateway Make/Model, SFR
• Has the Firewall Checker passed: Yes
• Are custom Phone Templates being used: Both

I already had the issue before upgrading to v18

As i said i had phones on older firmwares all was fine, right away i upgraded the firmware web ui access was refused.

I checked on the phones the ports 80 / 443 they are all closed.

 

[JohnS_3CX]

I would recommend to factory reset 1 of the phones, and provision it on a new extension, using our default templates (not the custom one). The factory reset is mandatory - you need to start with a clean device.

Once the phone provisions, select it from the "Phones" page and try the "Phone UI" button from your management console.

Let me know if this one phone will begin to work.

 

[spod]

We already tried that
I just tried again, a factory reset doesn't change anything.
The only way to make it work is to downgrade to 10.1.57.14.
Newer versions web ui is down.

I really think there is a major issue on firmware versions but i don't get why we are the only one to get this issue

 

[JohnS_3CX]

I have to disagree with that, because I just tested a D785 for example and it opened the web interface normally as expected (PBX on same LAN as phone, latest firmware and 3CX system). So clearly there is something more than just the firmware being different in your case.

At this stage I think you should really update your PBX because there have been many changes on the templates that came after the version you are running now. There have also been some critical security updates that come with it which we highly recommend you install as soon as possible. Changelog

Note by the way, custom templates have been known to cause issues in the past (both on the phones and with 3CX updates), and I suspect that these, plus the fact they are out of date may possibly be behind this (and also since my unmodified system here behaves correctly).

Would it be possible to delete the custom templates (for now at least so we can troubleshoot), then factory reset the snoms and provision them on the official templates, and when all this is done run your 3CX updates to bring you up to date?

 

[spod]

Hello,

I got the reason, but not the solution (yet) :
As i thought, it's not a 3CX issue because without provisioning, with factory reset and latest firmware on a local network i can't access web ui.
After multiple tries i found out that Snom phones require Internet access after firmware 10.1.57.14.
No internet access = no web ui i think it tries to validate some certificate.

My problem is my voice vlan doesn't have internet access, it doesn't need. I don't want my 500 extensions go through my firewall.

There must be a rule to disable this requirement.

Hope it will help some others.

 

[JohnS_3CX]

Hi spod,

I've tested Snom phones (D735, D785) on a network without internet or NTP, and they are still accessible normally.

They were both factory reset, running V10.1.84.15

 

[spod]

Hi
Here is what i tried :
- I reset D315 & D785 (latest firmware downloaded from snom website) while i'am in a vlan (dhcp) without internet, they reboot : no web ui access.
- I plug them to another vlan with internet (they reboot of course) i get access.
- I leave them in same vlan but i turn off internet (no phone reboot) i still get access
- I reboot the phone in the same vlan with intenet turned off : i still get access
- i move back the phone to my voice vlan and make the provisionning with 3cx : i lose access.

I think the phone download certificates at first time.
We try to analyze internet logs.

Regards

 

[JohnS_3CX]

Hi spod,

That's a good test, but you should also have connected them to the internet VLAN, with the internet turned off first to see if they work, and then turn on the internet in case they didn't. And remember that mine were connected to a network with zero internet access and worked just fine.

What if the problem is the voice VLAN? Can you check to see whether you are blocking traffic on that VLAN that isn't SIP/RTP?

Have you tried connecting a laptop to the Snom's PC port to see if you can access the UI?
If this works then you pretty much proved that your VLAN is blocking the traffic, and 100% not the phone blocking you.

 

[spod]

Nothing is blocked on this vlan, (and if i downgrade firmware it works anyway..), and few days ago i took an unmanaged switch, no internet, just the phone and my computer on it, and no access.

I use to connect my computer to Snom's PC port, but it was different vlans, i will try again with same vlan.

 

[JohnS_3CX]

few days ago i took an unmanaged switch, no internet, just the phone and my computer on it, and no access.

By the way If the phone had VLAN settings at the time, you would not be able to access it. Perhaps repeat this experiment with a reset phone if you want to be sure.

Please make sure that the computer is on the same VLAN, to see if it works this way.
- Remember to factory reset the phone and allow it to start up fully until it asks for language.
- Press the settings button and see the IP address
- Enter it on your PC using a private browser window