Mikrotik 3cx configuration

[3cxetadmin]

Hi everyone, I am having problem with configruation please can somone advise or help me

I am having problem with 3cx firewall,




How to fix them

Current configuration on nat

 

[Saqqara]

Do you follow this guide - https://www.3cx.com/docs/mikrotik-firewall-configuration/

The guide is old, some of the ports are incorrect - for example rtp ports are now 9000-10900

 

[3cxetadmin]

Do you follow this guide - https://www.3cx.com/docs/mikrotik-firewall-configuration/

The guide is old, some of the ports are incorrect - for example rtp ports are now 9000-10900

Yes Done it but not working

 

[Marconi]

You also need to adjust your firewall filter rules to allow traffic on the required ports. Have you put those rules in yet?

 

[nub]

Hi everyone, I am having problem with configruation please can somone advise or help me

I am having problem with 3cx firewall,

View attachment 31445


How to fix them

Current configuration on nat

View attachment 31446

Looks like nothing is hitting the 5060 tcp/udp rules as the counter to the right is zero. Telnet to the dst address on port 5060 and the counter should go up at least 1 packet on the tcp rule.

 

[complex1]

If you use the default firewall filter rules you are good. You don't have to change anything.

Besides the default NAT rules, add 2 NAT rules for forwarding to your 3CX:
/ip firewall nat
add action=dst-nat chain=dstnat comment="3CX Phone System" dst-port=5060,5061,5090,5001 in-interface-list=WAN protocol=tcp to-addresses=<ip-address pbx>
add action=dst-nat chain=dstnat dst-port=5060,5090,9000-10999 in-interface-list=WAN protocol=udp to-addresses=<ip-address pbx>

Do not forget to disable SIP ports:
/ip firewall service-port
set sip disabled=yes