TLS trunk between Patton and 3cx

[mbashar89]

I wish to post the thread in the right place. i need help in how to configure secure trunk connection between 3cx and patton gateway . all i know that 3cx have certificate and key and i will enable TLS/TCP on the trunk . but how to exchange certificate and keys between 3cx and patton ?


thanks in advanced

 

[YiannisH_3CX]

Hello @mbashar89

If you try to add the Patton as a gateway then there is no TLS option available in 3CX. Only SRTP is available for gateways. If you try to manually configure it as a trunk then the PBX will try to register to the Patton which will fail. If you use an IP based trunk then TLS is not supported by 3CX. And TLS is only supported from 3CX if you are trying to establish a TLS connection with an FQDN that has an issued certificate. It will not work with an IP.
Basically i would not recommend doing so.

 

[mbashar89]

thanks Yiannis for your quickly replay . Actually i add patton gateway as generic sip trunk and there no registration only i want to enable TLS for SIP message so if there is a way to configure that even if only by FQDN without IP based . Kindly advice.


thanks

 

[YiannisH_3CX]

As I mentioned in my first reply, TLS with an IP based trunk will not work with 3CX. This is because the TLS connection will depend on who initiates the call so the client and server will always be different.

 

[cobaltit]

So the only 3CX recommendation is to use this gateway locally, or at least over a routed (private) network. If you are looking to secure this, why don't you just put a 3CX interface and the Patton on their own network/VLAN and call it a day?