need Help in upgrade 3cx 18 to ver 20 in self hosted VM ware win 10 with Patton device

[prasad.narasimhan@hilton.]

Team im new to 3cx and teh current system runs on ver 18 build 19 and need to upgrade tge same to ver 20 .Already i hv downloaded the package 146 Mb and backup also taken

As i have gone through the website / videos says uninstall ver 18 and reboot and install ver 20 and then restore the backup

We are using patton device here for SIP truncks

Also in FW check i hve seen couple of errors ..But the system is running normal

So can someone help to upgrade so that the system will work smooth after all these new updates. The support is limited here
Also do i need to do some other upgrades before the new version installation??

 

[Guillaume Bourgeois]

What is the brand and model of the router installed on the network in front of the PBX?

 

[prasad.narasimhan@hilton.]

we are using fortigate firewall 100 E

 

[Guillaume Bourgeois]

Please follow the steps outlined.
Do not forget to restart Fortigate after completing the procedure or to kill all active sessions.
https://www.3cx.com/docs/fortigate-firewall-configuration/

 

[prasad.narasimhan@hilton.]

Hi thax for the reply.i have already made the changes for SIP and now only the below error

• testing port 5060... full cone test failed (How to resolve?)

 

[Guillaume Bourgeois]

Run the following commands in fortigate CLI

diagnose sys session filter port 5060
diagnose sys session list


Share return

 

[prasad.narasimhan@hilton.]

Hi

FG100ETK18010311_Koi # diagnose sys session filter sport 5060

FG100ETK18010311_Koi # diagnose sys session list

session info: proto=17 proto_state=00 duration=1847 expire=103 timeout=0 flags=00000000 sockflag=00000000 sockport=0 av_idx=0 use=4

origin-shaper=

reply-shaper=

per_ip_shaper=

class_id=0 ha_id=0 policy_dir=0 tunnel=/ vlan_cos=0/255

state=may_dirty npu src-vis netflow-origin netflow-reply

statistic(bytes/packets/allow_err): org=61246/113/1 reply=0/0/0 tuples=2

tx speed(Bps/kbps): 33/0 rx speed(Bps/kbps): 0/0

orgin->sink: org pre->post, reply pre->post dev=43->25/25->43 gwy=204.16.8.105/0.0.0.0

hook=post dir=org act=snat 10.70.50.10:5060->38.100.128.10:5060(204.16.8.106:5060)

hook=pre dir=reply act=dnat 38.100.128.10:5060->204.16.8.106:5060(10.70.50.10:5060)

src_mac=00:0c:29:31:d3:10

misc=0 policy_id=9 auth_info=0 chk_client_info=0 vd=0

serial=00001c82 tos=ff/ff app_list=0 app=0 url_cat=0

rpdb_link_id = 00000000

dd_type=0 dd_mode=0

npu_state=00000000

npu info: flag=0x00/0x00, offload=0/0, ips_offload=0/0, epid=0/0, ipid=0/0, vlan=0x0000/0x0000

vlifid=0/0, vtag_in=0x0000/0x0000 in_npu=0/0, out_npu=0/0, fwd_en=0/0, qid=0/0

no_ofld_reason: mac-host-check

session info: proto=17 proto_state=01 duration=1264 expire=165 timeout=0 flags=00000000 sockflag=00000000 sockport=0 av_idx=0 use=4

origin-shaper=

reply-shaper=

per_ip_shaper=

class_id=0 ha_id=0 policy_dir=0 tunnel=/ vlan_cos=0/255

state=may_dirty npu netflow-origin netflow-reply

statistic(bytes/packets/allow_err): org=20382/31/1 reply=19827/31/1 tuples=2

tx speed(Bps/kbps): 16/0 rx speed(Bps/kbps): 15/0

orgin->sink: org pre->post, reply pre->post dev=43->25/25->43 gwy=204.16.8.105/10.70.50.10

hook=post dir=org act=snat 10.70.50.10:5060->208.81.163.2:5060(204.16.8.106:5060)

hook=pre dir=reply act=dnat 208.81.163.2:5060->204.16.8.106:5060(10.70.50.10:5060)

src_mac=00:0c:29:31:d3:10

misc=0 policy_id=9 auth_info=0 chk_client_info=0 vd=0

serial=00008a54 tos=ff/ff app_list=0 app=0 url_cat=0

rpdb_link_id = 00000000

dd_type=0 dd_mode=0

npu_state=0x000c00

npu info: flag=0x81/0x81, offload=8/8, ips_offload=0/0, epid=84/88, ipid=88/84, vlan=0x01f4/0x0000

vlifid=88/84, vtag_in=0x01f4/0x0000 in_npu=1/1, out_npu=1/1, fwd_en=0/0, qid=2/1

session info: proto=17 proto_state=01 duration=1864 expire=174 timeout=0 flags=00000000 sockflag=00000000 sockport=0 av_idx=0 use=4

origin-shaper=

reply-shaper=

per_ip_shaper=

class_id=0 ha_id=0 policy_dir=0 tunnel=/ vlan_cos=0/255

state=may_dirty npu

statistic(bytes/packets/allow_err): org=5575/12/1 reply=3973/8/1 tuples=2

tx speed(Bps/kbps): 2/0 rx speed(Bps/kbps): 2/0

orgin->sink: org pre->post, reply pre->post dev=35->43/43->35 gwy=10.70.50.10/192.168.1.6

hook=pre dir=org act=noop 192.168.1.6:5060->10.70.50.10:5060(0.0.0.0:0)

hook=post dir=reply act=noop 10.70.50.10:5060->192.168.1.6:5060(0.0.0.0:0)

src_mac=80:5e:c0:89:49:10

misc=0 policy_id=38 auth_info=0 chk_client_info=0 vd=0

serial=00000d16 tos=ff/ff app_list=0 app=0 url_cat=0

rpdb_link_id = 00000000

dd_type=0 dd_mode=0

npu_state=0x000c00

npu info: flag=0x81/0x81, offload=8/8, ips_offload=0/0, epid=88/88, ipid=88/88, vlan=0x0000/0x01f4

vlifid=88/88, vtag_in=0x0000/0x01f4 in_npu=1/1, out_npu=1/1, fwd_en=0/0, qid=2/2

total session 3

 

[Guillaume Bourgeois]

What is your local ip pbx ?

 

[prasad.narasimhan@hilton.]

it is 10.70.50.10 configured in win 10 VM

 

[Guillaume Bourgeois]

Are you restricting the countries that can access port 5060?

 

[prasad.narasimhan@hilton.]

no source is selected as all in FW

 

[Guillaume Bourgeois]

Reboot firewall and try again ( firewall checker )

 

[Guillaume Bourgeois]

Firewall on Windows 10 is disabled ? Do you have an antivirus ?

 

[prasad.narasimhan@hilton.]

i have done reboot 5 min back only after the changes made for set default-voip-alg-mode kernel-helper-based

 

[prasad.narasimhan@hilton.]

The windows defender FW was enabled and after that i hv run still the same..do i need to reboot 3cx?

 

[Guillaume Bourgeois]

Disabled Windows Defender.
Do you have softphone installed on this vm ?

 

[prasad.narasimhan@hilton.]

The same was disabled, restart . run test Agin but result same ..Also in SIP trunk one shows down may be it was not properly configured as al alternative is alredy with same na,e..so may be because of this it shows???

• esolving 'stun-us.3cx.com'... done
• resolving 'stun2.3cx.com'... done
• resolving 'stun3.3cx.com'... done
• resolving 'sip-alg-detector.3cx.com'... done
• testing 3CX PhoneSystem 01 SIP Server... failed (How to resolve?)
  
  • stopping service... done
  • detecting SIP ALG... not detected
  • testing port 5060... full cone test failed (How to resolve?)
  • starting service... done
• testing 3CX PhoneSystem Media Server... done

 

[Guillaume Bourgeois]

The Firewall checker is independent of your 3CX configurations.

If port 5060 is still not working properly, it means it is blocked somewhere, either due to a misconfiguration on the FortiGate or on Windows.

Is TCP as well as UDP properly configured for port 5060? Not just UDP 5060?

 

[Guillaume Bourgeois]

Share all configuration ( Screenshots )

 

[prasad.narasimhan@hilton.]

Hi PFA