Toggle sidebar Toggle sidebar

Fanvil X3S - no Hotdesking possible anymore

Status
Not open for further replies.

weimerd

Bronze Partner
Advanced Certified
Joined
Feb 27, 2020
Messages
147
Reaction score
67
Hi,

Since today Fanvil X3S are starting to trouble us in hotdesking setups. It can't login anymore. One user is still logged in and can't log off anymore.

All phones are behind an SBC.

3CX latest beta v18 running on Azure
SBC latest available v18 version
all fanvil phones running latest 3CX Firmware 2.14.0.7387

All worked great for months. Somewhen last week (1st of October?) problems started, ending up in todays total crash with no hotdesk fanvil X3S working in any office anymore.

What I already tried:

- resetted a phone and added it again. no success.
- deleted a hotdesk setup comletely, added a new one, added a new phone to it running on fanvil original firmware. no success.

If a hotdesk phone tries to login the whole process works without issue but the phone does not switch to the user account. In 3cx management console I can see that the hot desk is registered to the user.

3CX - we need help here!
 
OlivierD said:
See this thread, i think the solution is the same.
https://www.3cx.com/community/threads/certificate-error-yealink.84628/
Click to expand...
does not help here. And it is also not possible to change it on all local phones as this would take ages...

EDIT: I tested it on one phone. Deactivating certificate check enabled the function to logon / logoff again. BUT logon/logoff process takes much longer (about 20 seconds). And deactivating certification check may not be a good practice. We would need to manually change that on all phones. This takes a lot of time. Plus we open up a security risk here that needs to be manually fixed on each phone later on again.

so 3CX: We need a working solution here.
 
Last edited:
We removed the LE ISRG Root X1 certificate in both the instance and the GUI under Security Settings -> Secure SIP and restarted the Nginx service.
 
We're seeing exactly the same issue since Friday with Fanvil X4. Going to try the cert removal now and will report back.
 
OlivierD said:
We removed the LE ISRG Root X1 certificate in both the instance and the GUI under Security Settings -> Secure SIP and restarted the Nginx service.
Click to expand...
could you help me here? How to identify the certificate that needs to be removed?
In GUI I at least see a bunch of certificates written in textual form, but no identification possible for me which to remove.

And how to remove from instance?

EDIT: I found your instructions in forum for identification help. It was the last certificate in list for me as well.
 
OlivierD said:
We removed the LE ISRG Root X1 certificate in both the instance and the GUI under Security Settings -> Secure SIP and restarted the Nginx service.
Click to expand...
It doesn't appear to have worked for us using a Fanvil X4.

I'm wondering if there is a command where we can force it to re-request new certificates from LE.

Tried this, /usr/lib/3cxpbx/PbxConfigTool -renew-certificates

But according to the log, it is seeing the certs as within date so not being updated.
 
You can renew the certificates but it will not solve the issue. It would be an easy fix if it would but I am afraid it is a bit more complicated. Make sure that you have the latest supported firmware for your devices and wait for our update as we are working on this.
 
YiannisH_3CX said:
You can renew the certificates but it will not solve the issue. It would be an easy fix if it would but I am afraid it is a bit more complicated. Make sure that you have the latest supported firmware for your devices and wait for our update as we are working on this.
Click to expand...
Understood, we are all just trying to get our systems working of course while we wait for you.
 
  • Like
Reactions: YiannisH_3CX
Just to keep you updated, our X4 is now on 2.14.0.7387 but hotdesking is not functioning.

3CX shows the extension signed in (under hotdesking) but the phone does not reboot and provision as the extension.
 
The only way I found to get the Fanvil X3S to run behind an SBC again in hotdesking mode is to deactivate CA certificates in phone settings (web page of the phone, phone settings, trusted certificates, CA certificates switch to disabled.

Login and logoff will work afterwards even if the process will take longer than usual (about 20-30 seconds)
 
We are currently testing a solution to this. We will have an update shortly.
 
Last edited by a moderator:
Thx, everything worked. All Fanvil X3S can logon and logoff again.

Nevertheless we still experience hughe lags when login on or off with hotdesking phones. It takes about 30 seconds for the phones to logon or logoff succesfully. Within that time employees thinking the process was not succesful.

any idea here?
 
weimerd said:
Thx, everything worked. All Fanvil X3S can logon and logoff again.
Click to expand...
Glad to see everything works now.

weimerd said:
Nevertheless we still experience hughe lags when login on or off with hotdesking phones. It takes about 30 seconds for the phones to logon or logoff succesfully. Within that time employees thinking the process was not succesful.
Click to expand...
That is how long most phones take to login/logoff for hotdesking as far as I am aware so not a lot we can do here.
 
YiannisH_3CX said:
Glad to see everything works now.


That is how long most phones take to login/logoff for hotdesking as far as I am aware so not a lot we can do here.
Click to expand...
Well, before 1st of October Logon / Logoff process was a matter of about 5 seconds...
 
weimerd said:
Well, before 1st of October Logon / Logoff process was a matter of about 5 seconds...
Click to expand...
The certificate fix should not affect the speed the phones reprovision but we can test on our side and see if we have any issues.
 
Status
Not open for further replies.

Latest Posts

Forum statistics

Threads
112,156
Messages
591,013
Members
165,188
Latest member
Teemal
3CX Logo Footer Copyright © Sitemap Privacy
Top Bottom