SBC Install Issue

[big.LITTLE]

We have 3CX Enterprise Annual 16.0.8.9 hosted on the cloud and want to add an SBC on our LAN side.

Installed using 3CX Debian 9 ISO, selected SBC on the first reboot after install, added SBC on the 3CX Management Console and got the Auth ID key, entered on the SBC installation and it says:

Unable to read the 3CX Server at https://xxx.3cx.co.uk:5001
Please double check "3CX Provisioning URL" value and confirm that the SBC Trunk is created properly from within your 3CX Management Console.

Also 3CX must have a valid secure SSL Certificate so if you have a custom certificate which has expired or not renewed, the installation will fail.

<Retry> <Abort>

I tested the SBC host can ping the 3CX server, and the certificate is obviously valid since this is a 3CX-provided FQDN.

Anyone experiencing a similar issue like us?

 

[IT Planungsgruppe]

Bitte überprüfen Sie ob auf der Seite der 3CX Anlage das Zwischenzertifikat vorhanden ist.

-----BEGIN CERTIFICATE-----
Ihr Zertifikat
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Ihr Zwischenzertifikat
- ----ENDE ZERTIFIKAT--- --
-----BEGINN ZERTIFIKAT-----
Ihr Stammzertifikat
-----ENDE ZERTIFIKAT-----

 

[big.LITTLE]

Bitte überprüfen Sie ob auf der Seite der 3CX Anlage das Zwischenzertifikat vorhanden ist.

-----BEGIN CERTIFICATE-----
Ihr Zertifikat
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Ihr Zwischenzertifikat
- ----ENDE ZERTIFIKAT--- --
-----BEGINN ZERTIFIKAT-----
Ihr Stammzertifikat
-----ENDE ZERTIFIKAT-----

Das Zertifikat ist gültig.

 

[IT Planungsgruppe]

Ich denke auch dass das Zertifikat selber natürlich gültig ist aber der SBC ist noch auf einen Zwischenzertifikat angewiesen.

 

[IT Planungsgruppe]

Am besten via SSH sich auf die PBX Anlage verbinden und das Zertifikat analysieren, ob das Zwischenzertifikat vorhanden ist.

 

[Alphabetic]

Does your hosted 3CX pass a firewall test? (Run a new test)
Are you using Google's DNS on your SBC? If not, can you?

 

[ChrisC_3CX]

@big.LITTLE
You could try first running an "nslookup FQDN" from the 3CX SBC host and if it does resolve to the correct IP try a "wget "FQDN":"PORT", if it is a certificate issue you should get an error message confirming it.

 

[big.LITTLE]

Does your hosted 3CX pass a firewall test? (Run a new test)
Are you using Google's DNS on your SBC? If not, can you?

Yes, firewall test passed. No issue and all appears green.

@big.LITTLE
You could try first running an "nslookup FQDN" from the 3CX SBC host and if it does resolve to the correct IP try a "wget "FQDN":"PORT", if it is a certificate issue you should get an error message confirming it.

From the SBC host can ping (and talk with) the 3CX server FQDN.

 

[AWS2P]

Probably unrelated to your problem but , are SBCs install always using Debian 9 today?

 

[IT Planungsgruppe]

Zwischenzertifikat Zwischenzertifikat Zwischenzertifikat

 

[big.LITTLE]

Probably unrelated to your problem but , are SBCs install always using Debian 9 today?

Yep, the ISO still based on Debian 9.

 

[ChrisC_3CX]

@big.LITTLE

From the SBC host can ping (and talk with) the 3CX server FQDN.

have you specifically tried the wget command as well? What did you get?

 

[big.LITTLE]

All working fine, I ran a portscan against the server and can see all the ports.

 

[NickD_3CX]

All working fine

You mean, not it's working, or that you can reach the server fine, but you are still having the problem installing the SBC?

 

[big.LITTLE]

Yes.