I notice in my logs that any attempt to contact a stun server fails. I pinged the stun server by name and IP and it fails (including the server stun.3cx.com) Is there a big need for the stun server? Can I safely ignore this error?
You can safely ignore this error if all the SIP clients at LAN or under VPN. The STUN failed will cause one way audio when the SIP clients under NAT behind the broadband router or firewall.
so if all of my phones are on the same network, then it's a non-issue and I can ignore the error. What if I have a few phones that are not in the same office and don't connect via vpn?
That's mean those phones are under NAT via internet connection. Therefore, the STUN server setting indeed to be configured. And those extensions need to blind to Media server as well. Otherwise, those phones maybe cause one way audio even those can success registered to 3CX box.