I can access the management console on the physical server and remotely but not on the local lan?

[RichardJF7]

Strange one, everything is working ok and phones are provisioned locally, the chrome plugin works.

However, I can access the management console on the server and remotely but not on the local lan. It i go to 192.168.1.XXX:5000 or :5001 on another machine it just gives me a blank page This site can’t be reached. One the windows server itself its fine. All my users are using the chrome app on the local network also?

Any ideas anyone?

 

[RichardJF7]

BTW it is the latest release on a windows 2016 standard box.

 

[Saqqara]

For a test, disable any firewall on the server to see if any rules need to be added.

Can you Remote Desktop or ping to the server, this will prove this is not a networking issue

 

[RichardJF7]

Yep, that worked.

Is there a list of ports to allow from your server, not your router, I've just googled but didn't come up with much? It also looks like our internal clients don't have an SSL when external connections do.

Thanks for your help!

 

[Saqqara]

I would add the same ports as the router into the server firewall https://www.3cx.com/docs/manual/firewall-router-configuration/

In order to access the server using ssl you have to use https;//fqdn:5001 , using IP address will give you ssl warnings. You need to setup spilt dns on your internal network - https://www.3cx.com/docs/creating-fqdn-split-dns/ Setup your fqdn to point to the internal IP address of the server

Internal devices will use the http port to access the server, this is normal and nothing to worry about. For extra security on external devices it use https

 

[cobaltit]

As far as the firewall goes you shouldn't have any firewall product on there but Windows Firewall and installing 3CX should configure the Windows Firewall correctly. The fact that you can access the page from outside/remotely leads one to believe that the IP of the internal machine you are using is blacklisted.