Turn provisioning off once provisioned

[JohnnyD]

Hi

I have some phones behind an SBC that work OK, so i only had the tunnel and RTP ports open on my firewall, someone rebooted the snoms behind the SBC this morning for some reason, so the phones were trying to reprovision again but couldnt because port 5001 is firewalled, how best to get round this? Can i disable provisioning once provisioned, or change provisioning port to the tunnel port? I cant just make a rule to accept 5001 from a specified WAN IP as its a dynamic one

Thanks

JD

 

[ChrisC_3CX]

so the phones were trying to reprovision again but couldnt because port 5001 is firewalled, how best to get round this? Can i disable provisioning once provisioned,

If the phones were just rebooted it means that they should already be provisioned, meaning that even if re-provisioning fails they should still continue to stay registered and work.

Can i disable provisioning once provisioned, or change provisioning port to the tunnel port?

If you still want to disable provisioning for any reason you can just remove the provisioning link from the IP Phones by accessing their UI. I see no reason to do this for this case though so I wouldn't recommend it. Also, you cannot change the provisioning port to be the same as the tunnel port, no.

 

[Saqqara]

FYI - Port 5001 is also used for address book and user presence info,

If this port is disabled, you will not get the above.

This applies to any remote device - SBC phones, 3CX applications.

 

[JohnnyD]

If the phones were just rebooted it means that they should already be provisioned, meaning that even if re-provisioning fails they should still continue to stay registered and work.

Ah my bad, they snom 300 just took a while to fail provisioning and return to last config

So something else went on then, there was a notification that the SBC wsas up and down a few times this morning, dont know if it was an ISP issue at the SBC end or an issue on site at the SBC end, but all 4 phones dropped off and needed rebooting, is that expected behaviour if the SBC loses its conncection to the maim server?

 

[JohnnyD]

FYI - Port 5001 is also used for address book and user presence info,

If this port is disabled, you will not get the above.

This applies to any remote device - SBC phones, 3CX applications.

So is the best thing to do always leave 5001 open?

 

[ChrisC_3CX]

So is the best thing to do always leave 5001 open?

We do indeed recommend leaving all 3CX require ports open as to ensure normal 3CX functionality.

 

[JohnnyD]

Ah my bad, they snom 300 just took a while to fail provisioning and return to last config

So something else went on then, there was a notification that the SBC wsas up and down a few times this morning, dont know if it was an ISP issue at the SBC end or an issue on site at the SBC end, but all 4 phones dropped off and needed rebooting, is that expected behaviour if the SBC loses its conncection to the maim server?

It happened again last night, the SBC dropped off for a minute or so at 02:40, and this morning one extension was saying not registered, is it expected if the SBC drops off for any reason, the phones get upset?

 

[JohnS_3CX]

Hello,

- It is expected that they should become unregistered if the SBC disconnects.
- It is also expected that they will reconnect after the SBC comes back online.

I think you should read this and start from here before we go any further, we need to know more about your deployment
https://www.3cx.com/community/threads/information-to-provide-when-requesting-help.67558/


PS: For SBCs to work, it is absolutely necessary that you keep your HTTPS and Tunnel ports forwarded at the PBX-side firewall. The remote firewalls where the SBCs are installed do not require any type of port forwarding at all. You just have to not purposely block traffic and the SBC will take care of the rest.