port forwarding multiple 3cx's

[jdflyer]

OK, so complete noob so please be gentle. I found out about 3cx through a friend who has his 3cx server running in our house (he lives out of the country) and I have decided to do a little experimenting with the system myself, but can't seem to connect to my server from the outside. Here is how it is set up

________________actiontec 1000 (LAN 192.168.0.1)
________________________|
_____________-----------------------------------
_____________|_______________________________________|
WAN_____192.168.0.39_________________________192.168.0.15
________ddwrt (192.168.101.1)____________________netgear
_____________|_______________________________________|
_____________|________________________________friends 3cx server
________my 3cx server
________192.168.1.20

I betting that everything on my friends server is set to defaults for port forwarding etc.

In the actiontec I have the following ports forwarded:
5060 -> 192.168.0.15
3479 -> 192.168.0.15
5090 -> 192.168.0.15
I don't know what is going on after his router.

5061 -> 192.168.0.39
5091 -> 192.168.0.39

inside the ddwrt the ports are forwarded to 192.168.101.20 on the same ports.

in 3cx on networking tab I have:
Ports:
SIP Port = 5061
Internal Leg
First Port = 7000
Last Port = 7499
External Leg
First Port = 9000
Last Port = 9049

3CX Tunnel
Local IP = 192.168.101.20
Tunnel Listening = 5091

When my iphone is on the local wireless network it works fine. I can call from extension to extension (haven't tried a VOIP provider yet). However when I try to connect from the outside it just hangs and goes back and forth between trying to connect both in the office and out of the office.

The 3CX tunneling app just states timeout pending.

Any thoughts????

 

[leejor]

I'm not all that clear on your diagram, but get the impression that there is some "double NATing " going on here, given the IP addresses. Does you router have a public IP on the WAN side, or is it behind another router? If so, then you are probably going to run into a few issues. You show the Actiontec, but then show DD-WRT. What router is that working on?

You show...

in the actiontec I have the following ports forwarded:
5060 -> 192.168.0.15
3479 -> 192.168.0.15
5090 -> 192.168.0.15

But what device has that IP address?

 

[craigreilly]

in the actiontec I have the following ports forwarded:
5060 -> 192.168.0.15
3479 -> 192.168.0.15
5090 -> 192.168.0.15

But what device has that IP address?

Looks like the friends Netgear router has that address???

 

[leejor]

Looks like the friends Netgear router has that address???

Which doesn't make a lot of sense....

Having another looks at it i see that you do have two routers connected to the "main" router ('m not sure why), however, that is double NAT and can cause major headaches. It's not just the "control" ports , 5060, 5061,that have to be forwarded (when not using the tunnel option). Voice ports also have to make it through both routers, and normally they are not forwarded, the router takes care of getting them through to the correct destination. I'm really not sure that you will get everything to work, but the first step, if you haven't already done so, is to give every device a subnet of 255.255.0.0 .

in 3cx on networking tab I have:
Ports:
SIP Port = 5061
Internal Leg
First Port = 7000
Last Port = 7499
External Leg
First Port = 9000
Last Port = 9049

In this case ports 9000 to 9049 will probably be used by the other PBX and should be forwarded in the Actiontec, to it. They would also have to be forwarded in the other router. that still isn't necessarily going to cover all of the ports used for voice.

You show IP 192.168.101.20 twice, do you mean 192.168.1.20?

If you haven't already looked over this, here are the ports used by 3CX.

http://www.3cx.com/blog/docs/ports-used/

You may also think about making use of a DMZ function (if supported) on both routers behind the Actiontec, with the 3CX server in the DMZ, Not having access to the other router may make troubleshooting this a bit difficult.