Port opening and dynamic IP address

[leejor]

Do i make my ip address back to dynamic using the portforwarder tool?


Port forwarding, within the router doesn't affect your external IP. A dynamic or static, public IP, is determined by your provider.You can change the router settings for the WAN (externals side), but with incorrect setting, it probably won

I'm not certain that you have a clear understanding of what port forwarding actually does.

When an external "party" wishes to communicate with a device behind your router it doesn't (usually) know what the private IP of the internal device is, even if it did, it would not be possible to use that (private) IP alone to reach a device behind your router. All it knows is PUBLICIPORT. With the public IP, it reaches your router. The port forwarding information that you have input, allows the router to determine that, say, port 5060 should be sent to a specific internal, private IP/device.

If, on the No_IP site, you filled in a local IP, then that is the one that will be used until the router updates the No-IP site. At that point the local Ip should be over-written by your actual Public IP. Should you IP change, then it should update.
Hopefully all of the settings you have put into the DDNS setting of the router are correct. Some routers will show the status of a DDNS update, in a log upon a reboot of the router. You could have left the local IP in the No-IP site, re-booted the router then checked to see if the local IP changed to your Public IP. That would confirm the the DDNS update took place.

 

[jaberc]

ok i have rebooted the router and the ip address has changed to 92.1.53.141. this ip also shows up on no-ip

where can i find on the router that the local ip has been changed to public ip

 

[craigreilly]

The local ip (LAN) is not the Public IP (WAN).
The routers LAN address should never change unless you change it specifically.
The NOIP DYNDNS is only going to change the Public IP.

 

[jaberc]

still ports 5060 and 5090 seems to be used up by something else. how can i ensure these ports are open.

 

[craigreilly]

IMPORTANT: Never post your entire Public IP Address - even if it is Dynamic. Mask it.

You have 50 call paths open... and using a dynamic address. If your volume is that high, I would recommend a static Ip and a commercial grade router.
If that is simply by accident, I would reduce the number of open call paths (9000-9099)

To figure out 5060 and 5090 -
Does your router block any outbound traffic? Does your ISP block any ports?
What else is loaded on this computer?
you can not just "open the port". generally you need to direct the open port to the correct private/static internal ip address of 3cx. also, if it is not a server grade OS (windows 7, Windows 8) is the local firewall turned off or opened for the correct ports?

 

[jaberc]

IMPORTANT: Never post your entire Public IP Address - even if it is Dynamic. Mask it.

You have 50 call paths open... and using a dynamic address. If your volume is that high, I would recommend a static Ip and a commercial grade router. "i have upgraded to business broadband where they will provide me with static ip address which will take upto 10days. I just want to set this up now using dynamic for temporary purpopses"
If that is simply by accident, I would reduce the number of open call paths (9000-9099). ok how do i reduce it to your suggestion.

To figure out 5060 and 5090 -
Does your router block any outbound traffic? not sure! Does your ISP block any ports? not sure!!
What else is loaded on this computer? skype, ms office, tuneup utilities,
you can not just "open the port". generally you need to direct the open port to the correct private/static internal ip address of 3cx. also, if it is not a server grade OS (windows 7, Windows 8) is the local firewall turned off or opened for the correct ports?

the windows firewall is turned on, using a windows 7 OS

 

[jaberc]

sip trunks are now showing as not registered

 

[leejor]

sip trunks are now showing as not registered

Were they registering previously?

And what have you changed?

A DDNS service is not required, to use SIP trunking. It can be required for remote SIP extensions, amongst other things.

As far as DDNS, you should only be concerned that a DNS query of ewebtechs.no-ip.org returns your public IP. that can be checked from a number of sites that provide URL to IP resolution. At this time, it returns 80.43.207.170

What is the 3CX Server log showing when the trunks attempt to register?

If "something else" is using port 5060, then 3CX is probably not going to work properly. You should be running minimal "other" programmes on the PC/server you are running 3CX on, until you are sure that none are interfering with the PBX operation. If you have installed any SIP applications, in the past, they may be causing issues.

 

[jaberc]

sip trunks are now showing as not registered

Were they registering previously? yes

And what have you changed? port forwarding, static ip

A DDNS service is not required, to use SIP trunking. It can be required for remote SIP extensions, amongst other things.

As far as DDNS, you should only be concerned that a DNS query of ewebtechs.no-ip.org returns your public IP. that can be checked from a number of sites that provide URL to IP resolution. At this time, it returns 80.43.207.170

What is the 3CX Server log showing when the trunks attempt to register? server activity or server event log? im not sure what it is showing or where to look?

If "something else" is using port 5060, then 3CX is probably not going to work properly. You should be running minimal "other" programmes on the PC/server you are running 3CX on, until you are sure that none are interfering with the PBX operation. If you have installed any SIP applications, in the past, they may be causing issues.

I have installed Zoiper and skype. maybe that is using the 5060 and 5090 ports.

 

[craigreilly]

Server Event Log and Server Activity Log are menu items in the 3cx Webconsole.
Looking in here should show why registration is failing.

As far as the 9000 ports go - rule of thumb for me at max:
(Number of license x 2) + (number of remote users * 2)

So if you have a 32 call license, and want to support 10 external users:
(32*2) + (10*2) = 84. Open ports 9000-9083.

 

[jaberc]

Server Event Log and Server Activity Log are menu items in the 3cx Webconsole.
Looking in here should show why registration is failing.

As far as the 9000 ports go - rule of thumb for me at max:
(Number of license x 2) + (number of remote users * 2)

So if you have a 32 call license, and want to support 10 external users:
(32*2) + (10*2) = 84. Open ports 9000-9083.

how will i change the ports as to this example?

 

[jaberc]

Server Event Log and Server Activity Log are menu items in the 3cx Webconsole.
Looking in here should show why registration is failing.

As far as the 9000 ports go - rule of thumb for me at max:
(Number of license x 2) + (number of remote users * 2)

So if you have a 32 call license, and want to support 10 external users:
(32*2) + (10*2) = 84. Open ports 9000-9083.

port 5060 and 5090 is now open after uninstalling zoiper.

 

[craigreilly]

how did you open the 9k range in the first place?
remove the rule and add a new one with the correct ports.

 

[jaberc]

how did you open the 9k range in the first place? i think i did this configuration in the router.
remove the rule and add a new one with the correct ports.

please check the attachment i have edit it for ports 9000 - 9083. Also if you can check the internal ip address that is used as you can see in the attachment. should internal ip be my router address? thank you

 

[leejor]

That IP would be the fixed IP of the PC/Server running 3CX, as that is where you want to forward those ports.

 

[jaberc]

That IP would be the fixed IP of the PC/Server running 3CX, as that is where you want to forward those ports.

ok that all seems to be set, but my sip trunks are still showing as unregistered.

 

[leejor]

Then you may have to undo any changes that you made since they were last working. (it won't be anything to do with setting up DDNS). Preferably one at a time to see what "broke" things. You can also look in the 3CX logs to see what issue they show. That may give you a clue as to why it is not working.

 

[jaberc]

Then you may have to undo any changes that you made since they were last working. (it won't be anything to do with setting up DDNS). Preferably one at a time to see what "broke" things. You can also look in the 3CX logs to see what issue they show. That may give you a clue as to why it is not working.

ok when i use the port checker software, it shows that 5060 and 5090 are open. but then when using the 3cx firewall checker, it is showing that 5060 and 5090 are unreachable. what to do?

 

[craigreilly]

1) Hire a subcontractor familiar with the workings of network routers/firewalls
2) Get a real router

 

[jaberc]

1) Hire a subcontractor familiar with the workings of network routers/firewalls
2) Get a real router

what about a tp link TD-W8960N router. i have my static internet line will be active in a couple of days.