Problem with remote extensions

[gary2seven]

We have had ongoing issues with trying to get remote extensions working.

We recently upgraded our router to a Cisco Small Business Pro so that we could guarantee ports correctly configured. I have now set up 3 remote extensions using the 3CX VOIP phone to avoid any hardware issues.

I can get all three working "in the office" both with and without the 3CX tunnel.

On remote sites I can get all 3 working WITH the 3CX Tunnel, but none working without it. This is 3 different laptops at 3 different remote sites with 3 different ISP's and 3 different routers.

I don't want to use 3CX tunnel as my eventual aim is to use 3CX iPhone and Android apps. I have tried the iPhone app and it works in the office but not at remore locations.

I have used the firewall checker on the 3CX phone system and everything passes, I have disabled (temporarily) the Cisco Router firewall to eliminate firewall issues.

I have ports 5060, 5080, 5090 and 9000-9049 forwarded on the Cisco router to the PBX device.

The debug window on the 3CX VoipPhone, just says

Sending STUN request
Connection to Server failed.

What else can I check, or how can I trace the issue further?

Gary.

 

[mfm]

Hi,

First off what is the exit code of the firewall checker?

Also its is complex to say why it is not getting trough as expected. This is why tunnel is used. You said you rmeoved the firewall to see if that helped.. did it ?

If you are really stuck, you could create a VPN connection to your server from your phone and connect as if using the tunnel.

 

[gary2seven]

Firewall checker results are;

3CX Firewall Checker, v1.0. Copyright (C) 3CX Ltd. All rights reserved.

<15:39:59>: Phase 1, checking servers connection, please wait...
<15:39:59>: Stun Checker service is reachable. Phase 1 check passed.
<15:39:59>: Phase 2a, Check Port Forwarding to UDP SIP port, please wait...
<15:40:00>: UDP SIP Port is set to 5060. Response received WITH TRANSLATION 1039::5060. Phase 2a check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/

<15:40:00>: Phase 2b. Check Port Forwarding to TCP SIP port, please wait...
<15:40:00>: TCP SIP Port is set to 5060. Response received WITH TRANSLATION 1039::5060. Phase 2b check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/

<15:40:00>: Phase 3. Check Port Forwarding to TCP Tunnel port, please wait...
<15:40:00>: TCP TUNNEL Port is set to 5090. Response received correctly with no translation. Phase 3 check passed.

<15:40:00>: Phase 4. Check Port Forwarding to RTP external port range, please wait...
<15:40:06>: UDP RTP Port 9000. Response received correctly with no translation. Phase 4-01 check passed.
<15:40:06>: UDP RTP Port 9001. Response received correctly with no translation. Phase 4-02 check passed.
<15:40:06>: UDP RTP Port 9002. Response received correctly with no translation. Phase 4-03 check passed.
<15:40:06>: UDP RTP Port 9003. Response received correctly with no translation. Phase 4-04 check passed.
<15:40:06>: UDP RTP Port 9004. Response received correctly with no translation. Phase 4-05 check passed.
<15:40:06>: UDP RTP Port 9005. Response received correctly with no translation. Phase 4-06 check passed.
<15:40:06>: UDP RTP Port 9006. Response received correctly with no translation. Phase 4-07 check passed.
<15:40:06>: UDP RTP Port 9007. Response received correctly with no translation. Phase 4-08 check passed.
<15:40:06>: UDP RTP Port 9008. Response received correctly with no translation. Phase 4-09 check passed.
<15:40:06>: UDP RTP Port 9009. Response received correctly with no translation. Phase 4-10 check passed.
<15:40:06>: UDP RTP Port 9010. Response received correctly with no translation. Phase 4-11 check passed.
<15:40:06>: UDP RTP Port 9011. Response received correctly with no translation. Phase 4-12 check passed.
<15:40:07>: UDP RTP Port 9012. Response received correctly with no translation. Phase 4-13 check passed.
<15:40:07>: UDP RTP Port 9013. Response received correctly with no translation. Phase 4-14 check passed.
<15:40:07>: UDP RTP Port 9014. Response received correctly with no translation. Phase 4-15 check passed.
<15:40:07>: UDP RTP Port 9015. Response received correctly with no translation. Phase 4-16 check passed.
<15:40:07>: UDP RTP Port 9016. Response received correctly with no translation. Phase 4-17 check passed.
<15:40:07>: UDP RTP Port 9017. Response received correctly with no translation. Phase 4-18 check passed.
<15:40:07>: UDP RTP Port 9018. Response received correctly with no translation. Phase 4-19 check passed.
<15:40:07>: UDP RTP Port 9019. Response received correctly with no translation. Phase 4-20 check passed.
<15:40:07>: UDP RTP Port 9020. Response received correctly with no translation. Phase 4-21 check passed.
<15:40:07>: UDP RTP Port 9021. Response received correctly with no translation. Phase 4-22 check passed.
<15:40:07>: UDP RTP Port 9022. Response received correctly with no translation. Phase 4-23 check passed.
<15:40:07>: UDP RTP Port 9023. Response received correctly with no translation. Phase 4-24 check passed.
<15:40:07>: UDP RTP Port 9024. Response received correctly with no translation. Phase 4-25 check passed.
<15:40:07>: UDP RTP Port 9025. Response received correctly with no translation. Phase 4-26 check passed.
<15:40:07>: UDP RTP Port 9026. Response received correctly with no translation. Phase 4-27 check passed.
<15:40:07>: UDP RTP Port 9027. Response received correctly with no translation. Phase 4-28 check passed.
<15:40:07>: UDP RTP Port 9028. Response received correctly with no translation. Phase 4-29 check passed.
<15:40:07>: UDP RTP Port 9029. Response received correctly with no translation. Phase 4-30 check passed.
<15:40:07>: UDP RTP Port 9030. Response received correctly with no translation. Phase 4-31 check passed.
<15:40:08>: UDP RTP Port 9031. Response received correctly with no translation. Phase 4-32 check passed.
<15:40:08>: UDP RTP Port 9032. Response received correctly with no translation. Phase 4-33 check passed.
<15:40:08>: UDP RTP Port 9033. Response received correctly with no translation. Phase 4-34 check passed.
<15:40:08>: UDP RTP Port 9034. Response received correctly with no translation. Phase 4-35 check passed.
<15:40:08>: UDP RTP Port 9035. Response received correctly with no translation. Phase 4-36 check passed.
<15:40:08>: UDP RTP Port 9036. Response received correctly with no translation. Phase 4-37 check passed.
<15:40:08>: UDP RTP Port 9037. Response received correctly with no translation. Phase 4-38 check passed.
<15:40:08>: UDP RTP Port 9038. Response received correctly with no translation. Phase 4-39 check passed.
<15:40:08>: UDP RTP Port 9039. Response received correctly with no translation. Phase 4-40 check passed.
<15:40:08>: UDP RTP Port 9040. Response received correctly with no translation. Phase 4-41 check passed.
<15:40:08>: UDP RTP Port 9041. Response received correctly with no translation. Phase 4-42 check passed.
<15:40:08>: UDP RTP Port 9042. Response received correctly with no translation. Phase 4-43 check passed.
<15:40:08>: UDP RTP Port 9043. Response received correctly with no translation. Phase 4-44 check passed.
<15:40:08>: UDP RTP Port 9044. Response received correctly with no translation. Phase 4-45 check passed.
<15:40:08>: UDP RTP Port 9045. Response received correctly with no translation. Phase 4-46 check passed.
<15:40:08>: UDP RTP Port 9046. Response received correctly with no translation. Phase 4-47 check passed.
<15:40:09>: UDP RTP Port 9047. Response received correctly with no translation. Phase 4-48 check passed.
<15:40:09>: UDP RTP Port 9048. Response received correctly with no translation. Phase 4-49 check passed.
<15:40:09>: UDP RTP Port 9049. Response received correctly with no translation. Phase 4-50 check passed.

Application exit code is 2

Disabling the firewall did not help.

I know you can configure VPN from router to router and pc to router, can you configure VPN from an iPhone or Android phone to router?


Gary.

 

[mfm]

Hi,

Yes you can configure the iphone and the android over VPN it works quite nicely actually.

Your firewall checker is failing, it seems like you did not do your port forwarding correctly. Please ensure you do not have windows firewall running on the machine.

 

[gary2seven]

Your firewall checker is failing, it seems like you did not do your port forwarding correctly. Please ensure you do not have windows firewall running on the machine.

Can you tell from the checker which port is the issue? The Cisco router notes on 3CX.Com are out of date and don't match my interface.

Regards

Gary.

 

[KerryG]

Did you disable the Windows firewall on the 3CX system? The ports do not always open correctly. If you have wireshark, also watch to see if packets are making it to the box and are not getting stopped at the firewall. Generally it is a firewall issue though and hopefully the Andoid and iPhone 3CXPhone versions will have the Tunnel included which will solve a lot of these issues.

 

[gary2seven]

Did you disable the Windows firewall on the 3CX system? The ports do not always open correctly. If you have wireshark, also watch to see if packets are making it to the box and are not getting stopped at the firewall. Generally it is a firewall issue though and hopefully the Andoid and iPhone 3CXPhone versions will have the Tunnel included which will solve a lot of these issues.

I have firewall disabled, I don't have wireshark on there at the moment, but I will install it now.

The last I heard 3CX Tunnel was "planned" for Android app, but "might not even work" and not planned yet for iPhone. Do you know different? Hate to kill myself sorting out only for update with 3CX tunnel to arrive as a Christmas prezzie


Gary.

 

[gary2seven]

I have been working with the network guys all day and firewall checker now passes all ok (see below) exit code 0.

But my 3CX Phone for Windows and my 3CX iPhone app still can't connect.

The 3CX phone debug windows just says "STUN check failed"

What can I do now?

Gary.

3CX Firewall Checker, v1.0. Copyright (C) 3CX Ltd. All rights reserved.

<15:45:59>: Phase 1, checking servers connection, please wait...
<15:45:59>: Stun Checker service is reachable. Phase 1 check passed.
<15:45:59>: Phase 2a, Check Port Forwarding to UDP SIP port, please wait...
<15:45:59>: UDP SIP Port is set to 5060. Response received correctly with no translation. Phase 2a check passed.

<15:45:59>: Phase 2b. Check Port Forwarding to TCP SIP port, please wait...
<15:45:59>: TCP SIP Port is set to 5060. Response received correctly with no translation. Phase 2b check passed.

<15:45:59>: Phase 3. Check Port Forwarding to TCP Tunnel port, please wait...
<15:45:59>: TCP TUNNEL Port is set to 5090. Response received correctly with no translation. Phase 3 check passed.

<15:45:59>: Phase 4. Check Port Forwarding to RTP external port range, please wait...
<15:46:05>: UDP RTP Port 9000. Response received correctly with no translation. Phase 4-01 check passed.
<15:46:05>: UDP RTP Port 9001. Response received correctly with no translation. Phase 4-02 check passed.
<15:46:05>: UDP RTP Port 9002. Response received correctly with no translation. Phase 4-03 check passed.
<15:46:05>: UDP RTP Port 9003. Response received correctly with no translation. Phase 4-04 check passed.
<15:46:05>: UDP RTP Port 9004. Response received correctly with no translation. Phase 4-05 check passed.
<15:46:05>: UDP RTP Port 9005. Response received correctly with no translation. Phase 4-06 check passed.
<15:46:05>: UDP RTP Port 9006. Response received correctly with no translation. Phase 4-07 check passed.
<15:46:05>: UDP RTP Port 9007. Response received correctly with no translation. Phase 4-08 check passed.
<15:46:05>: UDP RTP Port 9008. Response received correctly with no translation. Phase 4-09 check passed.
<15:46:05>: UDP RTP Port 9009. Response received correctly with no translation. Phase 4-10 check passed.
<15:46:05>: UDP RTP Port 9010. Response received correctly with no translation. Phase 4-11 check passed.
<15:46:05>: UDP RTP Port 9011. Response received correctly with no translation. Phase 4-12 check passed.
<15:46:05>: UDP RTP Port 9012. Response received correctly with no translation. Phase 4-13 check passed.
<15:46:05>: UDP RTP Port 9013. Response received correctly with no translation. Phase 4-14 check passed.
<15:46:05>: UDP RTP Port 9014. Response received correctly with no translation. Phase 4-15 check passed.
<15:46:05>: UDP RTP Port 9015. Response received correctly with no translation. Phase 4-16 check passed.
<15:46:05>: UDP RTP Port 9016. Response received correctly with no translation. Phase 4-17 check passed.
<15:46:05>: UDP RTP Port 9017. Response received correctly with no translation. Phase 4-18 check passed.
<15:46:05>: UDP RTP Port 9018. Response received correctly with no translation. Phase 4-19 check passed.
<15:46:05>: UDP RTP Port 9019. Response received correctly with no translation. Phase 4-20 check passed.
<15:46:05>: UDP RTP Port 9020. Response received correctly with no translation. Phase 4-21 check passed.
<15:46:05>: UDP RTP Port 9021. Response received correctly with no translation. Phase 4-22 check passed.
<15:46:05>: UDP RTP Port 9022. Response received correctly with no translation. Phase 4-23 check passed.
<15:46:05>: UDP RTP Port 9023. Response received correctly with no translation. Phase 4-24 check passed.
<15:46:06>: UDP RTP Port 9024. Response received correctly with no translation. Phase 4-25 check passed.
<15:46:06>: UDP RTP Port 9025. Response received correctly with no translation. Phase 4-26 check passed.
<15:46:06>: UDP RTP Port 9026. Response received correctly with no translation. Phase 4-27 check passed.
<15:46:06>: UDP RTP Port 9027. Response received correctly with no translation. Phase 4-28 check passed.
<15:46:06>: UDP RTP Port 9028. Response received correctly with no translation. Phase 4-29 check passed.
<15:46:06>: UDP RTP Port 9029. Response received correctly with no translation. Phase 4-30 check passed.
<15:46:06>: UDP RTP Port 9030. Response received correctly with no translation. Phase 4-31 check passed.
<15:46:06>: UDP RTP Port 9031. Response received correctly with no translation. Phase 4-32 check passed.
<15:46:06>: UDP RTP Port 9032. Response received correctly with no translation. Phase 4-33 check passed.
<15:46:06>: UDP RTP Port 9033. Response received correctly with no translation. Phase 4-34 check passed.
<15:46:06>: UDP RTP Port 9034. Response received correctly with no translation. Phase 4-35 check passed.
<15:46:06>: UDP RTP Port 9035. Response received correctly with no translation. Phase 4-36 check passed.
<15:46:06>: UDP RTP Port 9036. Response received correctly with no translation. Phase 4-37 check passed.
<15:46:06>: UDP RTP Port 9037. Response received correctly with no translation. Phase 4-38 check passed.
<15:46:06>: UDP RTP Port 9038. Response received correctly with no translation. Phase 4-39 check passed.
<15:46:06>: UDP RTP Port 9039. Response received correctly with no translation. Phase 4-40 check passed.
<15:46:06>: UDP RTP Port 9040. Response received correctly with no translation. Phase 4-41 check passed.
<15:46:06>: UDP RTP Port 9041. Response received correctly with no translation. Phase 4-42 check passed.
<15:46:06>: UDP RTP Port 9042. Response received correctly with no translation. Phase 4-43 check passed.
<15:46:06>: UDP RTP Port 9043. Response received correctly with no translation. Phase 4-44 check passed.
<15:46:06>: UDP RTP Port 9044. Response received correctly with no translation. Phase 4-45 check passed.
<15:46:07>: UDP RTP Port 9045. Response received correctly with no translation. Phase 4-46 check passed.
<15:46:07>: UDP RTP Port 9046. Response received correctly with no translation. Phase 4-47 check passed.
<15:46:07>: UDP RTP Port 9047. Response received correctly with no translation. Phase 4-48 check passed.
<15:46:07>: UDP RTP Port 9048. Response received correctly with no translation. Phase 4-49 check passed.
<15:46:07>: UDP RTP Port 9049. Response received correctly with no translation. Phase 4-50 check passed.


Application exit code is 0

 

[henington]

was there any resolution to this issue? I also am trying to get a remote extension setup without the 3cx tunnel.

 

[sigma1]

It is usually a firewall issue and full cone NAT seems to work best. There si NO NEED to FWD any port on the router at the remote site. Depending on the phone there are changes needed in the config of the phone itself but make sure that STUN is enabled to start. If you tell us what type of phones you will be using we can help you further.