Ports and audio and provisioning.

[GrahamBell1!]

Hi - haven't been on here for a while. I have setup a new PBX on a Data centre Linux server - have opened the ports and tested them. All works well on mobiles and can call on the pc app but cant hear anyone who calls from the windows app. They can hear a call from a mobile device but they cant talk back. Also for the life of me I cant provision a Yealink phone. Yes there are port errors when I test but the "click here to fix" option takes me to the same page which says nothing really. https://www.3cx.com/docs/firewall-checker/

The error is
testing 3CX PhoneSystem 01 SIP Server... failed (How to resolve?)

• stopping service... done
• detecting SIP ALG... failed (How to resolve?)
• testing port 5060... Mapping does not match 5060. Mapping is 65476. (How to resolve?)

What am I looking for here - told my boss 3cx is great but now I look totally stupid.

 

[Naveen | Cal4care]

Hi GrahamBell1!,

Seems to be the required ports are not open on the Data center firewall.

Please refer the manual and make sure all the ports are allowed on the 3CX server side network and client side network.
https://www.3cx.com/docs/manual/firewall-router-configuration/

 

[GrahamBell1!]

I have tried but still getting errors - Have been told that the SIP - ALG is disabled by the original Network guy. But I get this

• detecting SIP ALG... failed (How to resolve?)
• Does this mean it is not?
• Also port 5060 checks alright on open port checker but gets this on 3cx port checker.
• testing port 5060... Mapping does not match 5060. Mapping is 65476. (How to resolve?)
• And... Do I enable NAT?

 

[leejor]

What type of router are you using? I suspect that it is set to do port re-mapping. Also, don't trust that someone has previously done anything, confirm for yourself.

 

[ChrisC_3CX]

• detecting SIP ALG... failed (How to resolve?)
• Does this mean it is not?

Not necessarily, but SIP ALG failed means the test failed so you essentially don't know if it's on or not.

• Also port 5060 checks alright on open port checker but gets this on 3cx port checker.
• testing port 5060... Mapping does not match 5060. Mapping is 65476. (How to resolve?)

The port might be forwarded but it seems your firewall is not doing any port preservation meaning it might be running features such as port remapping, etc. I suggest looking into the firewall config again and disable any such settings.

Yes there are port errors when I test but the "click here to fix" option takes me to the same page which says nothing really. https://www.3cx.com/docs/firewall-checker/

The guide here actually explains exactly how the firewall checker works, what it expects and hence what it means when something went wrong. Understanding how it works should help you understand what configuration on your firewall might be causing issues.

What firewall are you using? Have you checked the guide @Naveen | Cal4care linked to to see if we have a guide for it you could maybe take a look at?

Also, when you say you have no audio from the windows app, do you mean the Legacy Windows App or the new Desktop app?

 

[GrahamBell1!]

A bit over my head some of the stuff - have got the original guy to look at it. Said no network no 3cx.

 

[GrahamBell1!]

Fortinet with a million vlans.

 

[ChrisC_3CX]

Fortinet with a million vlans.

Well we do have a guide for the FortiGate 80C in which you might find some useful information: https://www.3cx.com/docs/fortigate-firewall-configuration/