Toggle sidebar Toggle sidebar

Solved DNS problem with 3CX

Status
Not open for further replies.

user57659

Premier Customer
Joined
Aug 14, 2019
Messages
20
Reaction score
1
Hello,

We have some problems with DNS on 3CX. When trying to connect to the 3CX activation server it's returning this message: "Unable to reach 3CX License Activation Server. Confirm that your Primary DNS Server is able to resolve activation.3cx.com"

Also, it is not renewing its SSL cert as we are also getting this email:
The SSL Certificate renewal for (address) failed - Network problem
SSL certificate failed due to network conditions. Unable to reach Certificate Issuing Servers. We'll try again in a couple of hours.

I have been on to the server and checked the DNS is set to 8.8.8.8 and I am able to ping it with no problems as well as pinging Google.com. The public IP address of the server also is reachable for another machine. However, it is not pinging activation.3cx.com from the 3cx server or from any other machine on our domain.

Is the 3CX DNS server down or does something need to be changed for our end?

Thanks.
 
Hi @user57659,

Please ensure that you allow outbound TCP traffic over port 443 to activate.3cx.com. Previously we were using activation.3cx.com. More here: https://www.3cx.com/blog/releases/fqdn-endpoint-change/

Also just to confirm, what version of the PBX are you using? If you could check the exact version from the Dashboard, that would be helpful.
 
Last edited:
  • 3CX Version, Version 18.1.0.237
  • Server OS, Debiun 10 Buster
  • Is the 3CX Server Hosted and where? e.g. On-premises
  • IP Phone Make/Model/Firmware version, Cisco Mixture
  • Provisioning Method: Local
  • Trunk Provider or VoIP Gateway Make/Model, Voip U / Sipalto
  • Has the Firewall Checker passed: YES /
  • Are custom Phone Templates being used: YES /
 
When was the last time you ran the firewall test?
 
Hi @user57659,

Are you able to update to the latest version of v18? That would be version 18.0.3.461.

To Update click the Upgrades Button at top right of the Management Console:

Untitled.png
 
I can, but not in working times. It will have to be scheduled.
 
  • Like
Reactions: VasilisV_3CX
Sure thing @user57659,

Upgrade and let me know if it's still an issue.
 
  • resolving 'stun.3cx.com'... done
  • resolving 'stun2.3cx.com'... done
  • resolving 'stun3.3cx.com'... done
  • resolving 'sip-alg-detector.3cx.com'... done
  • testing 3CX PhoneSystem 01 SIP Server... failed (How to resolve?)
    • stopping service... done
    • detecting SIP ALG... detected (received 63132d44 ≠ c88e970d) (How to resolve?)
    • testing port 5060... full cone test failed (How to resolve?)
    • starting service... done
  • testing 3CX PhoneSystem Media Server... failed (How to resolve?)
 
Looks like mos of it is failing, but I am not sure if its relevant to the issue.
 
Firewall has these port forward settings:

InterfaceProtocolSource AddressSource PortsDest. AddressDest. PortsNAT IPNAT PortsDescriptionActions
WANTCP/UDP**WAN address509010.6.0.45090Forward 3CX tunnel traffic to PBX
WANUDP**WAN address9000 - 950010.6.0.49000 - 9500Forward 3CX tunnel traffic to PBX
WANTCP/UDP**WAN address5060 (SIP)10.6.0.45060 (SIP)Forward 3CX tunnel traffic to PBX
WANUDP**WAN address506110.6.0.45061Forward 3CX tunnel traffic to PBX
 
You should correct your firewall rules before troubleshooting any further. the 3CX should pass.
 
  • Like
Reactions: Evolute IT and VasilisV_3CX
Https port and the most of the RTP ports are missing. Are there anything blocked going from the pbx? Also SIP ALG has to be deactivated on your firewall.
 
  • Like
Reactions: Evolute IT
kieferschild said:
You should correct your firewall rules before troubleshooting any further. the 3CX should pass.
Click to expand...
The firewall rules have not changed and they have been working up to now.
 
user57659 said:
The firewall rules have not changed and they have been working up to now.
Click to expand...
There are missing a lot of rules... They for sure didnt work on v16 as well!
 
user57659 said:
Hello,

We have some problems with DNS on 3CX. When trying to connect to the 3CX activation server it's returning this message: "Unable to reach 3CX License Activation Server. Confirm that your Primary DNS Server is able to resolve activation.3cx.com"

Also, it is not renewing its SSL cert as we are also getting this email:
The SSL Certificate renewal for (address) failed - Network problem
SSL certificate failed due to network conditions. Unable to reach Certificate Issuing Servers. We'll try again in a couple of hours.

I have been on to the server and checked the DNS is set to 8.8.8.8 and I am able to ping it with no problems as well as pinging Google.com. The public IP address of the server also is reachable for another machine. However, it is not pinging activation.3cx.com from the 3cx server or from any other machine on our domain.

Is the 3CX DNS server down or does something need to be changed for our end?

Thanks.
Click to expand...
Had the same issue and was on the same version. 3CX appears to have replaced activation.3cx.com with activate.3cx.com as confirmed with nslookup. This was likely done in one of the versions past 18.1.0.237. Updating to current version fixed the activation issue for us.
 
Glad you got it sorted out!
You need to be on V18 U2 minimum to be able to activate from now on.

I'll flag this one as 'Solved'.
 
Status
Not open for further replies.

Latest Posts

Forum statistics

Threads
111,974
Messages
590,081
Members
164,899
Latest member
mazet
3CX Logo Footer Copyright © Sitemap Privacy
Top Bottom