Solved v16 Pro Bridges not connecting

[jakthree]

I have site-1, site-2 and site-3. All three sites where running v15.5 with bridges up and running.
site-1 <-> site-2
site-2 <> site-3
site-2 is the master.
(No need for site-1 and site-3 to talk to between them)

I upgraded site-1 to v16, which broke the bridge between site-2 <-> site-1 (as expected site-1 bridge screen was removed).
I upgraded site-3 to v16, which broke the bridge between site-2 <-> site-3 (as expected site-3 bridge screen was removed).
I upgraded site-1, site-2 and site-3 to v16 PRO version.
The bridge screen came back with the original bridges configured but they do not connect.
I have tried delete/re-add all the bridges (static IP:5090 tunnel, not using FQDN) on all sites and they still will not connect. I can ping form one site the the other. Firewall at all three sites are green. All sites are connected via a VPN tunnel and 5090 traffic is allowed thru the VPN tunnel. Nothing network related has changed since bridge was working with v15.5. Only change was upgrade to v16 PRO.

Event log on site-3 shows this message
Call or Registration to Bridge to Site-1 has failed. sip:[email protected]:5090 replied: 404 User unknown.; from IP:127.0.0.1:5080
Activity log shows

04/24/2019 5:05:10 PM - [CM504005]: Registration failed for: Lc:10100(@bridge to Site-1[<sip:[email protected]:5090>]); Cause: Cause: 404 User unknown./REGISTER from 127.0.0.1:5080

04/24/2019 5:03:24 PM - [CM504005]: Registration failed for: Lc:10100(@bridge to Site-1[<sip:[email protected]:5090>]); Cause: Cause: 503 Remote end of tunnel is not connected/REGISTER from 127.0.0.1:5080

More: medium activity log on site-2 shows
Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings

I have double checked that the bridge virtual extension number and the password are the same on site-2 and site-1.
What/Where authorization-ID and password is site-2 (master) complaining about?

 

[JohnS_3CX]

Hi @jakthree

Can try again from scratch by deleting the bridges and using the following method?

If site 2 is the Master of both sites 1 and 3 and also you have a VPN that connects all 3 sites together via your firewalls then on your management console you should have the following:

Site 2 = Build Two Master Bridges named A and B lets say, each one has its own unique password and Virtual extension number

Site 1 = Build one Slave bridge, using the password of the of the Master Bridge A, with the LAN IP address and port of Site 2

Site 3 = Build one Slave bridge, using the password of the of the Master Bridge B, with the LAN IP address and port of Site 2

If all is good and they register (might take a minute or two) then proceed with the relevant outgoing rules and prefixes as needed



Notes:

• Don't use Remote Tunnel mode at first and remember to allow a couple of minutes for the connections to establish (refresh Bridges page)
• We are just ensuring here that each Slave site has their own 1-to-1 Master listener and password

 

[jakthree]

JohnS_3CX,
I deleted and re-added
Site 2 = added two master bridges,
Virtual extension number 10100 (for site-1), 90101 (for site-3), without tunnel.
Site 1,3 = added slave bridges, without tunnel, with IP address of Site 2.
Waited 30 minutes. No registration
Site 2 activity log reports

(site-3 90101 trying to register with site-2)
****
04/25/2019 12:16:51 PM - [CM102001]: Authentication failed for AuthFail Recv Req REGISTER from 192.168.200.66:5060 tid=bc92eb0a10acdc47 Call-ID=-AfQfJi22O0Kifw7B_3Abw..:
REGISTER sip:192.168.103.132:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.200.66:5060;branch=z9hG4bK-524287-1---bc92eb0a10acdc47;rport=5060
Max-Forwards: 70
Contact: <sip:[email protected]:5060;rinstance=7edca58a7f68a391>
To: <sip:[email protected]:5060>
From: <sip:[email protected]:5060>;tag=358e4675
Call-ID: -AfQfJi22O0Kifw7B_3Abw..
CSeq: 2 REGISTER
Expires: 60
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE
Proxy-Authorization: Digest username="90101",realm="3CXPhoneSystem",nonce="414d535c12d27c8358:697334e2d15b4a2a00a9c3092799a224",uri="sip:192.168.103.132:5060",response="b36ae7a932bdbeca576d669ee7e92754",algorithm=MD5
Supported: replaces, timer
Content-Length: 0

; Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings

04/25/2019 12:16:51 PM - [CM101008]: The '' feature is disabled in currently activated licenseBLF
*
site-3 activity log
*
04/25/2019 12:16:51 PM - [CM504007]: Next attempt to register Lc:90101(@bridge site-3 to site-2[<sip:[email protected]:5060>]) is scheduled in 5 minute
04/25/2019 12:16:51 PM - [CM504005]: Registration failed for: Lc:90101(@bridge site-3 to site-2[<sip:[email protected]:5060>]); Cause: Cause: 404 User unknown./REGISTER from 192.168.103.132:5060
04/25/2019 12:16:51 PM - [CM504003]: Sent registration request for Lc:90101(@bridge site-3 to site-2[<sip:[email protected]:5060>])
*
The register request traffic must be traveling between site-2,3 (and site2,1) or there would be nothing showing up in site-2 log. I have triple checked the password and even created my own simple password 'AaBbCcDdEf1234' but site-2 continues to rejects site1,3 registration request.
Does "The '' feature is disabled in currently activated license BLF" have anything to do with broken bridges?

Site-1 (linux vm)

Site-2 (windows vm)

Site-3 (linux ISO)


All three sites have been rebooted after upgrade to v16 and license applied.

Thank you,

 

[jakthree]

JohnS_3CX,
more
I did this
rebooted site-1, 2 and 3
I setup this
Site-1 (linux ISO) = master from site-3
Site-3 (linux VM) = slave to site-1
Site-3 bridge will register with site-1

Site-3 (linux WM) = master from site-1
Site-1 (linux ISO) = slave to site-3
Site-1 bridge will register with site-1

Site-1 (linux ISO) = master from site-2
Site-2 (windows VM) = slave to site-1
During creation of the new slave bridge on site-2, when I try to click the [OK] button I get a ballon above the [OK] that say "Feature available in Professional and Enterprise Editions.' and I cannot click OK. After reboot I found that I cannot add a master or slave bridges to site-2. Prior to rebooting site-2 I could add/edit/delete bridges.

The linux versions bridges work. the windows version does not.
How to proceed?

Thank you,

 

[jakthree]

JohnS_3CX,
I am happy to report that all the bridges suddenly came up. Also I can again add/delete/edit bridges on site-2. I did nothing but wait for about 30 minutes and checked back with site-2.
The bridges are using port 5060 right now. Is there any advantage using 5090 instead of 5060 over a VPN connection between sites?
Thank you,

 

[JohnS_3CX]

Hi @jakthree

I'm glad it was resolved and that the bridges now register

Since you are using a VPN the tunnel mode should not be necessary. It would be more advantageous in cases where for example, there is no VPN and you wish to encapsulate the traffic for better NAT traversal (like an SBC)

 

[jakthree]

JohnS_3CX,
I will leave tunnel mode off.
Thank you for your help. You can close this thread.

 

[JohnS_3CX]

You're welcome, I'm glad things are up and running again