Solved New VPN - An IP has been blacklisted

[mikepa]

We have implemented a new VPN, which we want to roll out to our users, however as soon as the VPN is enabled it is blocking 3CX and the Windows client looses its connection. When attempting to login to the web portal, when connected to the VPN, the login loads fine, but the login fails giving the message An IP has been blacklisted.

It is possible to disable the VPN and then log into the web portal. I have cleared the IP Blacklist (although the VPN IP wasn't listed), so I can only assume that the IP must be globally blacklisted by 3CX. How can I get this cleared?

 

[NikosT_3CX]

@mikepa if an ip address range is blocked, this means that mutiple PBXs worldwide have reported an attach from
this range of ip addresses. Therefore the range was added to our Global Blacklist.
You may tell your VPN Provider to give you another IP, out of this range.

 

[RoryJ]

We have implemented a new VPN, which we want to roll out to our users, however as soon as the VPN is enabled it is blocking 3CX and the Windows client looses its connection. When attempting to login to the web portal, when connected to the VPN, the login loads fine, but the login fails giving the message An IP has been blacklisted.

It is possible to disable the VPN and then log into the web portal. I have cleared the IP Blacklist (although the VPN IP wasn't listed), so I can only assume that the IP must be globally blacklisted by 3CX. How can I get this cleared?

What happens if you make an "Allow" entry for the VPN IP on the 3CX? That should override the global blacklist entry.

 

[NikosT_3CX]

@RoryJ yes this is true but the security team makes the entries based on valid data and blocked the entire range for a reason. .
Also today you have this ip address, in 1 week this may change and someone else can get it and use it for a different reason.
For security reasons we can not make exceptions on this.

 

[consolemdv]

Did you check the Windows clients credentials? maybe the wrong credentials is the reason and if the VPN is configured to nat the inside network, 3cx will see only the public IP

 

[mikepa]

Did you check the Windows clients credentials? maybe the wrong credentials is the reason and if the VPN is configured to nat the inside network, 3cx will see only the public IP

The IP was confirmed to be on 3CX's global blacklist. We've since had the IP changed for the VPN and it is all working fine now.