Register 3CX Trunk with 3CX Extension

[Spencer Bizzell]

Hi All,

Please can you help:

We have two 3CX systems one is being used as a intercom system for an Estate (Housing estate) and they are running on the Standard 4 Chanel system.
One of the home owners / users wanted to get their own 3CX system for their house.
Just like we have done with other home owners who are running Asterisk PBX's we assumed that we could register the extension of the Intercom system with the Home Owners own 3CX system.

We have installed 3CX for this home owner but we are unable to get the Trunk of this residents new 3CX system to register with the 3CX intercom system for the estate.

So the 3CX intercom system which services the whole estate has an extension which is available to be registered with, which is used for calling the guard at the entrance / gate house.
On the home owners side we want to register this extension so the Entrance gate can ring through to the home owners 3CX just like it was ringing through to the Yealink Cordless W52P.
We keep on getting Auth Failed but I am fairly sure we are putting in the right credentials.
We are using a Generic Trunk and connecting this to the extension with the credentials. All we need is for a single call to come through from the one extension at the on 3cx Site to the other 3CX site.They must not be able to make outbound calls or any other calls just make calls between the Guard house and the residents 3CX.
Is there another way to achieve this as a full bridge is not required and to have to buy a pro licence for this would not make sense, it is for 2 users as the home owners side.

Below is the error.
29 08 2019 15:35:59:639 | 8 | [CM102001]: Authentication failed for AuthFail Recv Req REGISTER from ??.??.??.??:5060 tid=04299464df28a86d Call-ID=r-1lUQF1Mli9-s3J2U6VHg..:
REGISTER sip:??.??.??.??:5060 SIP/2.0
Via: SIP/2.0/UDP ??.??.??.??:5060;branch=z9hG4bK-524287-1---04299464df28a86d;rport=5060
Max-Forwards: 70
Contact: <sip:CYiQsSdS2b@??.??.??.??:5060;rinstance=92561f9b0077ae0c>
To: <sip:CYiQsSdS2b@??.??.??.??:5060>
From: <sip:CYiQsSdS2b@??.??.??.??:5060>;tag=0d02c639
Call-ID: r-1lUQF1Mli9-s3J2U6VHg..
CSeq: 2 REGISTER
Expires: 600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE
Proxy-Authorization: Digest username="CYiQsSdS2b",realm="3CXPhoneSystem",nonce="414d53595d67d4bf16:18a9fe1c6fe9e3a71f35cdb2d751e9a1",uri="sip:??.??.??.??:5060",response="5529f8e3f8c6c90a135065ad2cbe2697",algorithm=MD5
Supported: replaces, timer
Content-Length: 0
; Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings

 

[Alphabetic]

Have you looked in to direct SIP dialling?

let me elaborate since i've just tested myself.

Enable SIP URL from Settings > Network > FQDN on both PBX

On each PBX have an EXT and set the SIP ID under the "Options" tab

then when you dial [email protected] it will send it and dial. **SIPURL specified as SIP ID in previous step

Then you can create speed dials on each EXT for these URLs

Update: I was testing URL calling from the 3CX iOS app. Couldnt get it to work on desk phone or Android app.

 

[Spencer Bizzell]

This doesn't sounds very secure, I would guess that there are security risks with doing this?
How do you block calls, so you only accept from certain IP's?

We need to make sure an outsider can't call the security guard entrance and then allow unauthorized people into the estate, so this doesn't sound like a very workable solution.
We have found a solution for now using the external numbers associated with each server, which works but it is not ideal. I am just confused why you can't register a 3CX trunk with another 3CX extension like we do with other SIP platforms? Is this something that is being blocked by 3CX to force people to buy the pro and to use a bridge? In this case we don't want a bridge as we don't want any more access than a normal extension to be given to the home owner, so a bridge is not the ideal solution. I understand we can put in restrictions on the bridge to block access but you would think that the original design would work?