STUN Provisioning

[tikom]

I always have a problem with a stun and I want to know the right configuration, please

I have 3 Yealink phones at the customer place and my 3cx hosted on AWS

in 3cx configuration, i use the following


1st Phone
Local SIP Port 5065
Local RTP Audio Ports Start at 14000
Local RTP Audio Ports End 14019
------
2nd Phone
Local SIP Port 5066
Local RTP Audio Ports Start 14020
Local RTP Audio Ports End 14039
--------------
3rd Phone
Local SIP Port 5067
Local RTP Audio Ports Start 14040
Local RTP Audio Ports End 14059
----------

Now on AWS side I add the following protocols with the following ports.

Custom TCP

TCP

5065

the static ip address of the PBX

Custom UDP

UDP

5065

the static ip address of the PBX

Custom TCP

TCP

5066

the static ip address of the PBX

Custom UDP

UDP

5066

the static ip address of the PBX

Custom TCP

TCP

5067

the static ip address of the PBX

Custom UDP

UDP

5067

the static ip address of the PBX

is this the write configuration for stun
Thanks in advance

 

[JohnS_3CX]

Hello,

Those AWS changes can be removed as they serve no purpose.
On the AWS side you already have these ports open: https://www.3cx.com/docs/ports/
You can run the 3CX Firewall Checker to confirm all is green.

The main change actually needs to be done at the customer's site, edit their firewall and add those port forwards for all the phones.
- You must also disable SIP ALG on their firewall as this can cause issues even if you have ports forwards set correctly.
- You must forward each phone's SIP port, and their RTP range.
- The phones must have static IPs so that you don't lose their forwards in case their IP changes.

These are requirements when using STUN, but it is not guaranteed to always be 100% successful because it still depends on other factors... Are you sure you want to still use STUN and do all that work though? You do not have to perform any port forwards at all if you use an SBC at the customer's location: https://www.3cx.com/docs/3cx-tunnel-session-border-controller/

 

[Lee Cramman]

+1 (million) for using an SBC

Simplifies even small deployments and can even be run on some phones now.