Provisioning Snom PA1 troubles

[dandenson]

I'm trying to provision a Snom PA1 with the SBC. I've updated the firmware to 8.7.5.75 per the instructions here https://www.3cx.com/sip-phones/snom-pa1/#h.7ls0w5vyhlnd

I've put my provisioning URL in at adv>update>settings URL https://fqdn/provisioning/*/cfgPHONEMAC and https://fqdn/provisioning/*/cfg{mac}, but the phone never pulls in the config. I can hit the URL directly and get the config.

The instructions show putting in http instead of https, but 3CX wont give me a config hitting the URL without SSL. (here https://www.3cx.com/sip-phones/manually-provision-snom-300-320-360-370/)

Thoughts?

 

[dandenson]

I should add that I've downloaded the config and manually put it on the device and it works this way, but this means effort anytime I make a change and extra documentation so I really want to get provisioning working 'the right way'

 

[giwm]

@dandenson Are you having issues with just a PA1 or with any phone? You state you're using the SBC, are you able to provision another phone across the SBC?

 

[dandenson]

I am using the SBC with polycom phones, that works fine.

I believe the problem is the secure https being required for provisioning and the PA1 apparently not working with it. All guides show it using http or ftp, but I can't hit the 3CX (google cloud hosted) with insecure http to get a config.

 

[giwm]

I'm shooting in the dark here, but what if you install the cert from your Google Cloud onto the phone? I'm wondering if the phone has no other way to authenticate that cert for some reason.

 

[giwm]

Actually, that may be it... there's no cert installed for Google's root authority (Globalsign Root CA-R2). Assuming that's the same root authority as your Cloud cert uses.

 

[YiannisH_3CX]

Hello @dandenson

If you factory reset the phone does it show up as a new device in the management console under the phones tab? If so have you tried provisioning the device using PnP?

 

[cobaltit]

Just to clarify you don't provision a phone over the SBC. The SBC tunnels the SIP and RTP traffic but the provisioning traffic (HTTPS) is direct. Also, the cert used would not be the Google cert but the LE cert since that's what 3CX uses.

 

[giwm]

Thank you for the clarification. I've not had to deal with the SBC tunnel nor the cloud.