port forwarding multiple 3cx's

Discussion in '3CX Phone System - General' started by jdflyer, Jan 8, 2015.

Thread Status:
Not open for further replies.
  1. jdflyer

    Joined:
    Jan 8, 2015
    Messages:
    5
    Likes Received:
    0
    OK, so complete noob so please be gentle. I found out about 3cx through a friend who has his 3cx server running in our house (he lives out of the country) and I have decided to do a little experimenting with the system myself, but can't seem to connect to my server from the outside. Here is how it is set up

    ________________actiontec 1000 (LAN 192.168.0.1)
    ________________________|
    _____________-----------------------------------
    _____________|_______________________________________|
    WAN_____192.168.0.39_________________________192.168.0.15
    ________ddwrt (192.168.101.1)____________________netgear
    _____________|_______________________________________|
    _____________|________________________________friends 3cx server
    ________my 3cx server
    ________192.168.1.20

    I betting that everything on my friends server is set to defaults for port forwarding etc.

    In the actiontec I have the following ports forwarded:
    5060 -> 192.168.0.15
    3479 -> 192.168.0.15
    5090 -> 192.168.0.15
    I don't know what is going on after his router.

    5061 -> 192.168.0.39
    5091 -> 192.168.0.39

    inside the ddwrt the ports are forwarded to 192.168.101.20 on the same ports.

    in 3cx on networking tab I have:
    Ports:
    SIP Port = 5061
    Internal Leg
    First Port = 7000
    Last Port = 7499
    External Leg
    First Port = 9000
    Last Port = 9049

    3CX Tunnel
    Local IP = 192.168.101.20
    Tunnel Listening = 5091

    When my iphone is on the local wireless network it works fine. I can call from extension to extension (haven't tried a VOIP provider yet). However when I try to connect from the outside it just hangs and goes back and forth between trying to connect both in the office and out of the office.

    The 3CX tunneling app just states timeout pending.

    Any thoughts????
     
  2. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    10,851
    Likes Received:
    299
    I'm not all that clear on your diagram, but get the impression that there is some "double NATing " going on here, given the IP addresses. Does you router have a public IP on the WAN side, or is it behind another router? If so, then you are probably going to run into a few issues. You show the Actiontec, but then show DD-WRT. What router is that working on?

    You show...

    in the actiontec I have the following ports forwarded:
    5060 -> 192.168.0.15
    3479 -> 192.168.0.15
    5090 -> 192.168.0.15

    But what device has that IP address?
     
  3. craigreilly

    craigreilly Well-Known Member

    Joined:
    Feb 1, 2012
    Messages:
    3,403
    Likes Received:
    274
    Looks like the friends Netgear router has that address???
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    10,851
    Likes Received:
    299
    Which doesn't make a lot of sense....

    Having another looks at it i see that you do have two routers connected to the "main" router ('m not sure why), however, that is double NAT and can cause major headaches. It's not just the "control" ports , 5060, 5061,that have to be forwarded (when not using the tunnel option). Voice ports also have to make it through both routers, and normally they are not forwarded, the router takes care of getting them through to the correct destination. I'm really not sure that you will get everything to work, but the first step, if you haven't already done so, is to give every device a subnet of 255.255.0.0 .

    in 3cx on networking tab I have:
    Ports:
    SIP Port = 5061
    Internal Leg
    First Port = 7000
    Last Port = 7499
    External Leg
    First Port = 9000
    Last Port = 9049

    In this case ports 9000 to 9049 will probably be used by the other PBX and should be forwarded in the Actiontec, to it. They would also have to be forwarded in the other router. that still isn't necessarily going to cover all of the ports used for voice.

    You show IP 192.168.101.20 twice, do you mean 192.168.1.20?

    If you haven't already looked over this, here are the ports used by 3CX.

    http://www.3cx.com/blog/docs/ports-used/

    You may also think about making use of a DMZ function (if supported) on both routers behind the Actiontec, with the 3CX server in the DMZ, Not having access to the other router may make troubleshooting this a bit difficult.
     
Thread Status:
Not open for further replies.