Phones over VPN

[DaveA66]

Hi

We are due to deploy a 3CX shortly where the customer wants an on-premise server with phones in the branch office working over his existing VPN.

Any advice please on the best way to deploy the branch phones?

If we use the provisioning URL it will try to go to company.3cx.com:5001 rather than just pointing to the IP address of the 3CX over the VPN?

We have always just used SBCs previously but this customer is adamant to use the VPN which is fair enough

Many thanks!

 

[JohnS_3CX]

Hi Dave,

If the VPN is setup correctly and multicast works too, the phones will appear on the "Phones" tab exactly as they would with a local installation. You just pick one and assign it your extension normally.

It will behave just like a local install for all intents.

 

[Saqqara]

If multicast does not work, setup dhcp option 66 if the phone supports it https://www.3cx.com/sip-phones/dhcp-option-66/

 

[eddv123]

multicast works too

Multicast traffic does not work over IPSec as standard, you will need IPSec over GRE tunnel for multicast.

 

[DaveA66]

many thanks for the advice guys!

 

[cobaltit]

So just because they have a VPN doesn't mean you can't use a SBC. You would still get the benefit of local audio for the remote extensions as well as some minor bandwidth savings. And it just may save your bacon if they didn't setup the VPN properly. There's more than one thread on here with folks claiming their VPN wasn't at fault and then it turned out they had some weird NAT setting (supported configuration is a routed VPN with no NAT between endpoints and 3CX) or UDP timeout.