How to limit access to management console to LAN only

[Ton van Gaalen]

In order to access 3CX PBX from my mobile phone 3CX softphone I have opened up port 5001 (among other) on my router/firewall. However, this also opens up the management console to the evils of the internet (logon screen is displayed when accessing https://3cxFQDN:5001 from any device).

How can I limit access to the management console to LAN devices only (so 192.168.1.x)?

 

[eagle2]

No way, if you open ports 5000 & 5001 because of softphones (presence, etc,), you open also access to management console. The remedy is to use strong random password for management console or to close ports 5000 & 5001, but this will affect extra functionality of 3CX phones beyond calls themselves.