Provisioning Phones with PFSense Firewall

[tobi468]

Hi all,

we are using the lastest Version of 3cx on a Windows Server and a PFSense 2.4.4 Firewall.
I installed it like https://www.3cx.com/docs/pfsense-firewall/ and it works like a charm. I ve only one (big) problem left: new Phones does not show up in the 3cx Management Console. The Firewall check in 3cx says that all is ok.

I already checked the Firewall Logs on PFSense and there is nothing blocked there. Did I missed something or is there a other way to register my phones? I have to do this with about 50 Devices and I don't want to add them all by hand.
I am grateful for any information.

*edit*

Yealink t58v // t57w

 

[cobaltit]

Unless the phones are either on the other side of the firewall or on a different interface/VLAN from the PBX and pfsense is filtering there then it has nothing to do with pfsense. Most likely your switch is not allowing multicast.

https://www.3cx.com/docs/plug-and-play-ip-phone/

 

[tobi468]

Ok,thank you! i will check this.Also interessting that with a Fritzbox as Router provisioning works. Maybe its a switching problem with our pfsense hardware.

 

[cobaltit]

It's possible. If it's just local phones you can do DHCP Option 66.

 

[JohnS_3CX]

@tobi468 Where are the phones in relation to the pbx? Are you provisioning them as "Local" or SBC or Remote STUN devices?

 

[BrenttG]

When you swapped the firewall and the MAC Address of the default gateway changed, windows servers and desktops have tendancy to suddenly treat the network as public, rather than private/local, which means the windows firewall magically turns itself back on due to the network profile changing, and the windows firewall has been known to block the broadcasts of upnp.

ensure the windows firewall is disabled COMPLETELY, and see if they suddenly appear, give them 10 mins or so after you disable the windows firewall, and reboot the phones. If that works, then adjust firewall settings accordingly to allow upnp, or leave it off if you prefer.

 

[tobi468]

@tobi468 Where are the phones in relation to the pbx? Are you provisioning them as "Local" or SBC or Remote STUN devices?

- Local
- Windows Firewall is disabled

I tried to add Option 66 Boot on DHCP Server with the 3CX IP. Is that enough?

 

[JohnS_3CX]

It appears like your multicast is being blocked then. Normally local phones on the same network as the server should be able to send out multicast and announce their presence.

Check that you don't have any multicast filtering enabled, or that that your are not running separate private networks where multicast cannot pass. Are the server and phones on the same subnet?



PS: Windows firewall off means off on all network types - just in case

 

[tobi468]

Yes, Server and Phone are in the Same Subnet. I will check the firewall settings again later.