Solved V16 U1 not showing in Updates

[jakthree]

I have three sites with 3CX v16.0.0.1581 Pro Annual. All sites are on-premise Linux ISO on dedicated hardware. One of the sites shows v16.0.1.273 in Updates. The other two do not show U1 even when clicking Settings-Updates. I would like to update all three sites at same time.
Why would U1 not show up on 2 of 3 sites?
Thank you,

 

[craigreilly]

All in the same region of the globe?

 

[cobaltit]

Wait till tomorrow? Or even better a week from now unless you are just super eager to be a guinea pig.

 

[jakthree]

Status update. A week has passed. All three sites have shown updates for SIP trunks and Phones but site 2 and 3 still don't show U1 update available.

All in the same region of the globe?

Site 2,3 are 20 miles apart in same town and use same internet provider. Site 1 is in different state. All three sites are in Central time zone.

I don't need the enhanced web chat, don't use Call Flow Designer (yet) and not eager to be guinea pig. I will wait until a bug fix(es) is released or a feature added that effects my installation. But the question still remains, why does site 2,3 not show U1 update available.

Thank you,

 

[AWS2P]

Perhaps something stuck with licence, did you try to refresh licence informations on CM?

 

[YiannisH_3CX]

Hello @jakthree

Try to SSH onto the machines and type: apt-cache policy 3cxpbx
Do you get the version 16.0.1.273 in the available packages? If not you may have a wrong repository somewhere that needs updating.

 

[jakthree]

YiannisH_3CX,
'apt-cache policy 3cxpbx' does not show 16.0.1.273 as available package. I tried 'apt-get update' but it hangs at '0% [Working]'.
What command do I type to see what repository(s) are being checked?
I am also checking my LAN's firewall settings to see if file download is being blocked.
Thank you,

 

[YiannisH_3CX]

Try to access the file: nano /etc/apt/sources.list.d/3cxpbx.list

You should see" deb http://downloads-global.3cx.com/downloads/debian stretch main

If not then add it and save the file. The try to perform an "apt-get update" again.

Please note that you must be running Debian 9.

 

[jakthree]

YiannisH-3CX,
3CX V16.0.0.1581 Linux ISO on-site. SSH, Logged in as root.
I confirmed that .../debian stretch main is in the 3cxpbx list file. I can ping downloads-global.3cx.com.

** my interfaces file **
nano /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug enp2s0
iface enp2s0 inet static
address 192.168.43.254
netmask 255.255.252.0
gateway 192.168.40.1

** type ip addr **
root@3cx:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: enp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether ec:8e:b5:74:50:71 brd ff:ff:ff:ff:ff:ff
inet 192.168.43.254/22 brd 192.168.43.255 scope global enp2s0
valid_lft forever preferred_lft forever
inet6 fe80::ee8e:b5ff:fe74:5071/64 scope link
valid_lft forever preferred_lft forever

** type ip route **
root@3cx:~# ip route
default via 192.168.40.1 dev enp2s0 onlink
192.168.40.0/22 dev enp2s0 proto kernel scope link src 192.168.43.254

Is my routing correct?

** my Kerio firewall (gateway) address is 192.168.40.1 **
I only have UDP-5001, UDP-5090, TCP-5090 traffic rules setup.
I have one external android client and one iOS client. I do not have any external SIP phones.
What ports on my firewall must be open for 'apt-get update' to retrieve files from downloads-global.3cx.com?

Thank you,

 

[YiannisH_3CX]

The PBX will try to contact the download server using port 443 so that should be allowed through the IP tables and the firewall.

 

[jakthree]

More: Site1, which showed the U1 was available, was successfully updated via the CM Settings-Update page.
Site2 was successfully updated during backup and re-installation of 3CX onto new hardware.
Site3 is last site that needs updated and is the site we have been discussing.

I have confirmed that port 443 is open on my firewall. Before asking about IP tables, I noticed today that (2) SIP trunks showed up as needing updated.
Does updating SIP trunks and updating 3CX both use port 443 in the same way?
If yes, then there is nothing wrong with port 443 because SIP trunks will download and install.
If no, then what is the difference between updating SIP trunks (and other things like phone templates) and 3CX?

 

[JohnS_3CX]

Hi @jakthree

For testing purposes create a rule in your firewall that allows all traffic on all ports for the PBX IP and test again. If it works then clearly it's a firewall issue that you must then check.

You said that it hangs when you run apt-get update which is not a good sign, it means that the system cannot access the online repo-resources and the above test should provide an answer to this. This is what mine looks like for comparison:

root@js-debian:~# apt-get update
Hit:1 http://downloads-global.3cx.com/downloads/debian stretch InRelease
Hit:2 http://repo.saltstack.com/apt/debian/9/amd64/latest stretch InRelease
Ign:3 http://ftp.gr.debian.org/debian stretch InRelease
Hit:4 http://ftp.gr.debian.org/debian stretch-updates InRelease
Hit:5 http://security.debian.org/debian-security stretch/updates InRelease
Hit:6 http://ftp.gr.debian.org/debian stretch Release
Reading package lists... Done
root@js-debian:~#

 

[jakthree]

Finally, successful update at site-3! The update was failing at the firewall because the firewall (Kerio) requires a user account for access to the internet. After I setup a user account and associated it with the 3CX server's IP address and gave the account permission to connect to .3cx.com, then downloads and updates are successful.
Thank you for your help and guidance,

 

[JohnS_3CX]

Glad to hear it was resolved!