Dismiss Notice
We would like to remind you that we’re updating our login process for all 3CX forums whereby you will be able to login with the same credentials you use for the Partner or Customer Portal. Click here to read more.

Firewall Ports need for outside Phone Connection

Discussion in '3CX Phone System - General' started by WINWARE, Apr 24, 2008.

Thread Status:
Not open for further replies.
  1. WINWARE

    Joined:
    Nov 30, 2007
    Messages:
    29
    Likes Received:
    0
    We have several employees that work outside of our company that we would like to setup them up a CISCO 7940 phone for their home office. The phones work perfect in the office, and yes the phone has been converted to use SIP. Does anyone know how to setup these Phones to work in this way? We have a SonicWall as our firewall in the office running the Enhanced OS, and I have opened all UDP Ports stated in the 3CX Console General Settings area. However it just will not work.
     
  2. Nebula

    Nebula New Member

    Joined:
    Apr 6, 2008
    Messages:
    116
    Likes Received:
    1
    Hate to state the obvious but has the default gateway and IP address been changed on the phones? Also what about the firewall settings at the remote end?
     
  3. WINWARE

    Joined:
    Nov 30, 2007
    Messages:
    29
    Likes Received:
    0
    The IP Address and gateway are set by DHCP at the remote location, and as for the firewall at the remote end everything is allowed out. What other setting should be on the remote firewall. The remote end is able to connect to a VOIP Provider, but we would like to disconnect that and replace their service of VOIP with our 3CX solution.
     
  4. Nebula

    Nebula New Member

    Joined:
    Apr 6, 2008
    Messages:
    116
    Likes Received:
    1
    Again I am probably asking the obvious but is the 3CX server/SIP domain set in the phone?
     
  5. WINWARE

    Joined:
    Nov 30, 2007
    Messages:
    29
    Likes Received:
    0
    The phone is configured for the public IP address of the server.
     
  6. kevin

    kevin Member

    Joined:
    Nov 23, 2006
    Messages:
    316
    Likes Received:
    1
    Hi there

    What does the Firewall Checker utility tell you? Do the phones register at all?

    Regards

    Kevin
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. WINWARE

    Joined:
    Nov 30, 2007
    Messages:
    29
    Likes Received:
    0
    The Firewall checker say everything is OK with a Information (9) status on both the Ports to use for external calls and Firewall Options.
     
  8. Discovery Technology

    Joined:
    Apr 19, 2008
    Messages:
    278
    Likes Received:
    0
    In the SonicWALL you will need to select "support SIP transformations" in the VoIP settings area and make sure that nothing else is selected. This appears to make a big difference on sonicwall firewalls - it is important to leave the remaining settings as default otherwise (I spent a bit of time on the phone with an advanced tech at their support centre one night as it was driving me nuts).

    Are you using the UDP 9000 range for your external handsets inbound? Have you tried this via a VPN tunnel to see if there is any difference?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. WINWARE

    Joined:
    Nov 30, 2007
    Messages:
    29
    Likes Received:
    0
    As for the "Support SIP Transformation" being selected, as am Assuming that is on our internal SonicWall; is that correct?

    As for the phones working through a VPN, it works perfect. However, I do not want this to be how these phones work due to not all of our external employees that need these phones have the ability to setup a VPN on a firewall. I need to just be able to configure a phone to work on the outside, send it to our external employee who has high speed internet, and have them to just plug it in.

    David Moore
     
  10. BJReplay

    BJReplay New Member

    Joined:
    Oct 31, 2007
    Messages:
    133
    Likes Received:
    0
    I know this doesn't answer your question directly, but I've got a bunch of SPA941/2s all working.

    Aside from opening the SIP & RTP ports as set up in the general settings (Ports to use for External Calls), I specified the DNS Name of our 3CX server (but you could use IP address) for both Proxy & Outbound Proxy in the SPAs.

    For my N82, I also had to specify the Proxy and also the Realm as 3CXPhoneSystem

    We have no phones inside our firewall - 3CX is running on a hosted server in a data centre, and we run a distributed virtual office with everyone external.

    Hope this helps.
     
  11. Discovery Technology

    Joined:
    Apr 19, 2008
    Messages:
    278
    Likes Received:
    0
    Hi,

    I have done this setup a couple of times now and can help.

    As long as you setup port forwarding for the STUN server, SIP and RTP (9000 - 9015) to your internal 3CX Server and have enabled "SIP transformations" in the VOIP section on the sonicwall you should be good to go. the enhanced OS also enables you to set the UDP timeout on your SIP traffic so that you don't disconnected between re-registrations of your VOIP trunks.

    I have posted some other articles regarding the Cisco 7940 phones in some of the foruams already so I should have that side of the setup covered for you as well.

    Let me know if this all works for you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Thread Status:
Not open for further replies.