remote stun - newbie question

[robort]

Hi,

new to this so bear with me.

Company has cloud based 3cx. I am trying to get yeolink w60b w56h provisioned from home to test. am plugged into sky router.

have gone though this https://www.3cx.com/docs/manual/configuring-ip-phones/ and done what is needed for remote stun.

but does not provision.

what am i doing wrong?

does 3cx need to whitelist my ip?

thanks

 

[ChrisC_3CX]

I'd recommend that instead of configuring as STUN, you use the 3CX SBC which will make adding future devices to the same site a breeze as it requires no firewall configuration and also allows PnP for the models that support it.

Regarding configuring the W60B, please check this guide which is device specific: https://www.3cx.com/sip-phones/yealink-dect-w52p/#h.njk1rx5jow1p

 

[robort]

Thanks will have a look.
my boss reckons if 3cx whitelist my public ip i can use lan based provisioning is this true?

 

[ChrisC_3CX]

Well since the 3CX Instance is Cloud Based, then the Local Lan Provisioning method is out of the question, unless of course you have a site-to-site VPN setup.

You might also want to consider checking our training material regarding Remote Phone configuration: https://www.3cx.com/3cxacademy/videos/intermediate/configuring-remote-extensions/

 

[robort]

thats what i thought

video looks great thanks

 

[robort]

just to confirm - you cant just send out a phone to a user at home to plug in and work using stun - you would need to configure their firewalls etc?

separately we have a house of 4 phones not on our network just using home broadband and would like to connect them to our cloud 3cx. is the best way to install sbc?

thanks

 

[ChrisC_3CX]

Regarding your first question, the answer is yes, you would have to configure their firewall(remote site where IP Phone will reside) accordingly in order to ensure normal operation of the STUN configured IP Phone.

Using the 3CX SBC in conjunction with an IP Phone provisioned using the SBC method would be much easier in the sense that it will require no firewall configuration of the remote site, you will need however to configure the SBC and have a machine on the remote site running it. This of course could be a raspberry pi.

 

[Gingerr6]

Only phone side firewall configuration would be slg. Most FW allow all ports outbound, especially sky ( mine at home) for dect phone, provision in 3cx, you need to update FW to 3cx on dect 1st. Then login and use the provisioning url. Dect phones can't use the rps service. Any other sip phones should work without an sbc.