Locked out with Console Restriction but still have access with ssh

[ITSmartwork]

Hello,

i have on-prem 3CX and i got locked out from the web ui because did not included my ip address.
Is there any way to reset the console restrictions from SSH which i have still access? Any other way to reset the console restriction?
The pbx is isetup with public ip address. I also have access to the hypervisor where the 3CX is running on.

thank you

 

[Rick-Arcus-IT]

You can't change the console restriction using SSH. If you have access to the hypervisor, you could spin up an Linux bootable image like ubuntu, use the same network as the 3CX pbx, and access it locally through that VM. That way you can add your IP to the console restrictions list.

 

[ITSmartwork]

found it simple in my case to do the following:
Added another interface on the 3CX VM from the hypervisor, than connect the new interface to the virtual network where are other machines. DHCP gave an ip to this new interface.
From bash(ssh on 3CX) i restarted nginx with systemctl restart nginx so it was listening also on the new local ip address. Than from another machine on the same subnet got access and removed the restriction.

 

[Rick-Arcus-IT]

found it simple in my case to do the following:
Added another interface on the 3CX VM from the hypervisor, than connect the new interface to the virtual network where are other machines. DHCP gave an ip to this new interface.
From bash(ssh on 3CX) i restarted nginx with systemctl restart nginx so it was listening also on the new local ip address. Than from another machine on the same subnet got access and removed the restriction.

Good solution

 

[Lee Cramman]

For anyone finding this thread in the future, another fast and dirty solution is to use an SSH socks proxy (via something like Putty).

If you have remote SSH access it takes seconds to do and no config changes are necessary on the server / VM side. Using this method your http requests will appear to be coming from your PBX itself (therefore not blacklisted).

Howto: https://www.pwndefend.com/2022/06/25/how-to-use-putty-as-a-socks-proxy/

I've not tested this with 3cx but I regularly use it to access web admin portals on remote debian servers.

 

[ITSmartwork]

Ssh socks proxy is smary solution too