Mikrotik router issue

[rc15]

Hi,
Is there someone familiar with Mikrotik routers that could help.

The firewall checker passes the test for 5060, 5090 and 9000-900x.
But either windows phone or 3Cx for iphone won't register, I don't know what I missed.

iphone 6 /3CXPhone 14.0.3
3CX V14 sp2, internal/external FQDN

 

[TCF]

Is the iPhone and Windows Computer on the same network as the PBX? Have you created a DNS entry for your FQDN of the PBX? Is PUSH enabled in 3CX?

 

[lneblett]

Did you go to the other tab for the extensions and check the setting that allow use of phone outside the LAN?

 

[rc15]

Windows Phone is on same network as the pbx
Iphone is on cellular net, tunnel is activated on port 5090
Both have the same registering issue

DNS entry are created for the FQDN
PUSH is enabled

It worked perfectly until I replaced the router (old one was a netgear fvs318). It seems to be a firewall filter-rules and NAT issue.

 

[rc15]

Ineblett, I verified after reading your reply, "disallow" was checked so I unchecked and reprovisioned. It did not changed anything. And even if "disallow use of extension outside of LAN" was checked, the iphones worked outside the LAN....

 

[lneblett]

If you have a SIP provider and the trunk is working, then not a forwarding issue assuming the same logic/setup used for 5090 and to a lesser degree, the checker passed.

If the Iphone is on the same LAN and not working, then would not seem to be a router issue.

When you re-provisioned, was it manually or with email from 3CX?

Is the tunneling service running?

 

[eagle2]

I can confirm MikroTik is working perfectly with 3CX, I have over 100 PBXs behind MikroTik routers plus large cloud implementations and multi-site installations.

Generally what you need is to configure is destination NAT from external address / interface to local IP address of the 3CX, for TCP ports: 80,443,5000,5001,5060,5061,5062,5090 and for UDP ports: 5060,5061,5090,9000-9499 into IP/firewall/NAT menu of the router

 

[rc15]

I have dst-nat configured for these port.
Would you mind to show me an example of working configuration for filter rules and NAT ?

 

[TCF]

I had the same problem as you are having and it turned out I didnt have ports 80 and 443 forwarded in the NAT ..

 

[rc15]

SOLVED. Thanks to everyone.

In my case it seems I don't need ports 80 and 443 (Abyss server). My firewall config was ok.
My problem was that I did not configured the DHCP option 66

I fixed my problem when I found this tutorial :
http://developers-club.com/posts/257643/

3CX also have documention here :
http://www.3cx.com/sip-phones/dhcp-option-66/