HT802 - Autoprovisioning doesn't seem to work

[b.ebner]

I'm currently testing a HT802 in regards to some analog faxes that a customer would like to use on different locations.
Everything seems to be currently up and running but I do have the impression that the HT802 doesn't get new settings like Time Zones and Extensions through the Provisioning.

I manually provisioned the HT802 through the XML-File I got from the 3CX.

Firmware Server Path is: [IP]:5000/provisioning/sscnr5ju5yowx/firmware/grandstream
Config Server Path is: [IP]:5000/provisioning/sscnr5ju5yowx

I changed the time zone for example. After restarting the HT802 nothing happens and the time zone doesn't change.

The Status for Provisioning states: "Not running, Last status : Downloading file from url."
I'm in the same network as the HT802 and can reach the 3CX on HTTP and can download the config file.

Firmware on the HT802 is 1.0.15.4

Is the Provisioning URL really correct as it is? Provisioning through the XML-File works well but after that if something is changed in the settings in the 3CX the HT802 won't get those settings which is not good at all because settings between those 2 will differ.

 

[eddv123]

The provisioning link is fine if you are provisioning the device within the same subnet as 3CX (Locally or by VPN connection to a remote 3CX system).

This is the only "supported" way of setting up remote ATA's or gateways with 3CX.

 

[b.ebner]

Yes, I already saw that connections to ATAs through SBC are not supported, which is rather stupid, because 3CX is also menat to be run in a cloud.

And not any cloud can connect a VPN.

First i tested it through a SBC which worked quite well even unsupported. But than I changed to the supported method through a VPN.

The HT802 is connected through VPN and my Windows PC is in the same net with the same rights on the firewall.

From my PC it is possible to reach the provisioning link. (as mentioned before)

But it seems that the HT802 has some issues but i can't see more details on it than what I posted before.

 

[eddv123]

Yes, I already saw that connections to ATAs through SBC are not supported, which is rather stupid, because 3CX is also menat to be run in a cloud.

And not any cloud can connect a VPN.

Although not supported I have had success with altering the template to make gateways and ATA's work with 3CX, but would definately not agree that using STUN or SBC for FAXing to be a good idea.

The traffic needs as little conversion as possible (conversion adds delay to FAX traffic which is very sensitive, this conversion adds packet loss and increases the chances of a failed FAX) keeping the traffic local or via locally routed subnet helps stop this.

With regards to the VPN connection from cloud, this is why you need to select your provider carefully.
As long as you can deploy a secondary software firewall within your project in the cloud it should be possible, some are easier than others to deploy this way (we have used Google and Virtual 1 with success).

 

[b.ebner]

I agree.
It's just strange that other vendors do this and it seems to work.
If there would be an option to send outgoing faxes like they are received through the fax server by mail that would also be an option for me. But unfortunatelly this isn't possible without 3rd Party Software.

Back to topic:

I had a look in the firewall log of both firewall participating in the VPN.

Both firewalls allow the traffic from my HT 802 to the 3CX on Port 5000 (HTTP) and I can see traffic when the HT 802 reboots.

But somehow the provisioning through the link is unsuccessfull.

Is there any way to get more information out of the HT 802 why it can't provision with this link and what it tries to open?

 

[eddv123]

I use Patton gateways mostly but have a little experience with Grandstream so know they have a syslog server feature (albeit they are not as detailed at troubleshooting than Patton). You could output this to something like Kiwi syslog server

 

[JohnS_3CX]

Hi,

So to clarify, the issue is not that you cannot provision, but rather that changes are not propagated to the device after initial provisioning?

 

[b.ebner]

That's correct.
So the device can't somehow get the settings from the provisioning link.

 

[JohnS_3CX]

I just saw your firmware version is 1.0.15.4 and there is an issue on this version which Grandstream will fix.

For now you can downgrade (they have previous versions on their site) and you can work normally until they release the next version.

 

[b.ebner]

That was what I expected.
Thanks for your confirmation.

I'll try it with a lower firmware version once I get back to the device.