Duplicate Grandstream Phones Showing

[mojanoski]

Hello guys,

I saw a few posts regarding this issue, my server is hosted on Amazon and we have two locations, one of the locations works perfectly with no issue, the other location duplicated almost all the phones. I saw that we need to change sip and RTP ports in order to fix the issue, so I made a table with the extensions and ports that I need to configure, can someone just confirm with me if this is correct?
Thank you for your help

Extension Number	SIP PORT	RTP Start	RTP End
101​	5065​	14000​	14012​
104​	5066​	14013​	14025​
106​	5067​	14026​	14038​
107​	5068​	14039​	14051​
109​	5069​	14052​	14064​
111​	5070​	14065​	14077​
114​	5071​	14078​	14090​
115​	5072​	14091​	14103​
118​	5073​	14104​	14116​
119​	5074​	14117​	14129​
120​	5075​	14130​	14142​
121​	5076​	14143​	14155​
122​	5077​	14156​	14168​
125​	5078​	14169​	14181​
126​	5079​	14182​	14194​
128​	5080​	14195​	14207​
130​	5081​	14208​	14220​
133​	5082​	14221​	14233​
134​	5083​	14234​	14246​
135​	5084​	14247​	14259​
136​	5085​	14260​	14272​
137​	5086​	14273​	14285​
141​	5087​	14286​	14298​
144​	5088​	14299​	14311​
146​	5089​	14312​	14324​
201​	5090​	14325​	14337​
202​	5091​	14338​	14350​
203​	5092​	14351​	14363​
204​	5093​	14364​	14376​
205​	5094​	14377​	14389​
301​	5095​	14390​	14402​
302​	5096​	14403​	14415​
305​	5097​	14416​	14428​
306​	5098​	14429​	14441​
401​	5099​	14442​	14454​
402​	5100​	14455​	14467​
403​	5101​	14468​	14480​
404​	5102​	14481​	14493​
501​	5103​	14494​	14506​
502​	5104​	14507​	14519​
503​	5105​	14520​	14532​

 

[Saqqara]

Looking at the list , save yourself alot of issues use a SBC server at each location instead of stun configuration.

You can install SBC on raspberry PI - https://www.3cx.com/docs/3cx-tunnel-session-border-controller/

Using SBC server, you do not have to do any sip ports / firewall configure that is required for stun

SBC just requires 3cx https and tunnel port 5090 out

If you want to continue with Stun, you need to portforwarding

 

[JohnS_3CX]

If it was just a couple of phones it would make more sense but since you have so many indeed an SBC will prevent the need to forward any ports, and will keep traffic from going over the internet when making extension to extension calls (between all phones on that SBC).

It also makes it easier to reprovision any phone in case you need to reset it.

 

[mojanoski]

Do I need to have a static Ip address for SBC?

 

[Charles_3CX]

You need to have static private Ip addresses assigned to the phones when using Stun so that the ports you have assigned to the phones are then NAT port forwarded to each phone they are assigned to, from the remote side firewall (phones side)

When using an SBC the SBC needs to be assigned a static Private IP and no ports need to be assigned or forwarded to phones or SBC, as long as you are not restricting traffic from the remote side where the SBC resides, and the ports are open on the PBX side as required.

 

[mojanoski]

I tried with SBC, the phone does the provision after a factory reset but stays offline. What could be an issue?
When I go to event's it looks ok.

RPS request for GrandStream GXP-2130 IP Phone of (106) delivered successfully
3CX Phone System Management Console ID: 10018 02/01/2022 3:05:15 PM

 

[cobaltit]

So just to make sure you are using the correct terms and understand how this works:

• The message you posted has nothing to do with provisioning or registration. The message you posted simply confirms that 3CX was able to contact the Grandstream RPS server to update the configuration. It doesn't even guarantee the phone will be able to reach the RPS server.
• You say you tried with the SBC, but there should be no RPS request if the phone is configured to use the SBC. RPS is for STUN. Please confirm you are following the steps outlined in the guide

 

[cobaltit]

Also, is duplicated phones the only issue? If so and it's only cosmetic, it's likely to resolve itself after a few days.

 

[JohnS_3CX]

Hi,

If I may add the following, try to ensure everything is in line before provisioning via SBC, just to get a fresh start:

1. Delete the phone from the extension
2. If you had any port forwards at the site where the phones are located, remove them (not needed for SBC)
3. If any phones appear in bold in the "Phones" page, select them and click Reject
4. Ensure the SBC is on the same LAN as the phones!
5. Check you Trunks page and confirm the SBC is online

6. Finally, factory reset the phone. It will ask for user/pass on the screen, but cancel it and allow the phone to go to its main idle screen. It should now appear on your "Phones" page in bold showing "New" next to the entry.

You can now select the phone and assign it to your desired extension. If any of the above steps did not work out, let us know exactly at which step you got stuck.

 

[mojanoski]

So just to make sure you are using the correct terms and understand how this works:

• The message you posted has nothing to do with provisioning or registration. The message you posted simply confirms that 3CX was able to contact the Grandstream RPS server to update the configuration. It doesn't even guarantee the phone will be able to reach the RPS server.
• You say you tried with the SBC, but there should be no RPS request if the phone is configured to use the SBC. RPS is for STUN. Please confirm you are following the steps outlined in the guide

That was the previous message when I was trying to do STUN and it was provisioning but somehow was blocked couldn't get online.

 

[mojanoski]

The other issue that I have at the moment with SBC is that some of the employees are taking their phones home, and they are configured for SBC, how can I resolve this issue so I don't need to reprovision every time.

 

[Evolute IT]

The other issue that I have at the moment with SBC is that some of the employees are taking their phones home, and they are configured for SBC, how can I resolve this issue so I don't need to reprovision every time.

You can't. There's no auto-switch of config. It's SBC until you select STUN.

The best for those home users: 3CX apps and Webclient.

 

[JohnS_3CX]

The other issue that I have at the moment with SBC is that some of the employees are taking their phones home, and they are configured for SBC, how can I resolve this issue so I don't need to reprovision every time.

You cannot, everytime the mode is changed between SBC/STUN/LAN you need to reset and reprovision the phone. There really is no way around that.

A nice and easier alternative would be for them to use our apps while they are working from home:

• Mobile apps for Android / iOS
• Windows app
• Webclient
• Mac app

They only need a headset.

As for the other issues you faced, please refer to reply #9

 

[mojanoski]

If we install the SBC on their laptop and they go home and get connected to the same network will it work like that or not?

 

[JohnS_3CX]

It could but there are some caveats:

- As soon as their laptop IP changes, the phone will stop working.
- Also if they have multiple LAN cards (which most laptops do: LAN / WiFi) the connection might fail
- Some random software/antivirus/firewall that they have may interfere with the SBC app

I would consider using the 3CX apps instead, they are designed to work fine for remote workers, and don't really face such limitations.