Spa 504G not reprovisioning

[techdummy]

No worries, I had a check on the screenshots I had taken during the Upgrade. It shows that I had used Port 5001 for Https,5000 for Http, 5060 for SIP Server and 5090 for tunneling.

So, we are good there.

 

[NickD_3CX]

Yes, but there is another problem. If you check the supported devices page for the SPA, and specifically in the Limitations section, you will see that this phone is listed as not supporting any kind of remote provisioning...
I though at some point that you mentioned that you were provisioning the phone Locally to the 3CX Server. Anyhow, you shouldn't even be getting the options for Remote STUN or SBC in the drop-down.

Cisco SPA phones don't "like" HTTPS provision, and 3CX >V15 doesn't "like" HTTP requests from public IPs that aren't HTTPS, that is the conflict.

So, taking a step back here, the questions is, who is the phone trying to connect to the 3CX Server:

• Over the internet (STUN or SBC)?
• On the same physical LAN as the 3CX Server?
• Over a site-to-site VPN that connects the remote site where the phone is to the 3CX Server?

 

[techdummy]

Yes, but there is another problem. If you check the supported devices page for the SPA, and specifically in the Limitations section, you will see that this phone is listed as not supporting any kind of remote provisioning...

Yes.. I did have a check on that before going for the upgrade, never really thought that there will be an issue with Provisioning.

I though at some point that you mentioned that you were provisioning the phone Locally to the 3CX Server. Anyhow, you shouldn't even be getting the options for Remote STUN or SBC in the drop-down.

If it is the drop-down menu for "provisioning method" under IP Phone, yes. I don't have the options for STUN or SBC.

Cisco SPA phones don't "like" HTTPS provision, and 3CX >V15 doesn't "like" HTTP requests from public IPs that aren't HTTPS, that is the conflict.

So, taking a step back here, the questions is, who is the phone trying to connect to the 3CX Server:

• Over the internet (STUN or SBC)?
• On the same physical LAN as the 3CX Server?
• Over a site-to-site VPN that connects the remote site where the phone is to the 3CX Server?

The only method I can select is "Local Lan(in the office)".
We have a site to site VPN through which the phones are connected to 3CX server.

 

[NickD_3CX]

By the time you have a site to site VPN then that's fine, so back to the problem you confirmed in your reply: "...provisioning request not hitting the 3cx server..."

You should at least see the requests from the phone trying to "hit" the server if capturing on the server itself. This is what you need to figure out. I'd check the settings on your FW devices that have the site to site VPN and that they allow traffic on HTTP/S ports (5000/5001) correctly...