vlan issue

[muhanad3cx]

Hello
we make like


https://www.3cx.com/sip-phones/vlan-configuration/

We have an issue since month and it doesn’t work any solution

We make voice vlan to fanvil phone with 3cx phone system

The register fail when we do the vlan tag in the phone also the ping from pbx to phone is working without any problem

We don’t put the pbx in same vlan but the ping is working through t he network

 

[JohnS_3CX]

Does the phone have the IP 172.168.50.179? It looks like your network addressing scheme is not in the RFC1918 range and this will not work.

You have to change the phones VLAN to have an RFC1918 address range.

 

[muhanad3cx]

DEAR JOHN
the registration is work
when I uncheck Disallow use of extension outside the LAN (Remote extensions using Direct SIP or STUN will be blocked)
but the voice from VLAN phone to another phone not working
mean I can hear the other phone but they can't hear me
is that any help in that case or what the error
I attach the phone log also to see it

 

[JohnS_3CX]

Hi,

Yes, the log helps prove 100% that the problem is the phones have the IP range 172.168.x.x.

Now you must change the phones IP range to be between 172.16.x.x and 172.31.x.x otherwise this will not work.

You must also check "Disallow use of extension outside the LAN" to keep your extensions more secure.

 

[muhanad3cx]

i change the IP but it same problem no registration happen
FYI the 3cx out the VLAN but all phones routed to the IP of PBX
we make all routing and all port forwarding to do that

And the ping is all good

the PBX can ping the phone but the phone cant ping his getaway when we put it in VLAN
\we use MikroTik switch
what the case can be >??????????

 

[JohnS_3CX]

It sounds like you have more networking issues than just the IP range.

The method you route traffic might not be working for you, so I can suggest some options you might find useful or at least worthy of consideration:

1. Are VLANs really necessary? Consider this first because you may be introducing unnecessary complexity
2. If the VLANs are indeed necessary, then do not configure the phones to tag the packets. Instead what you can do is configure only the network switch ports to tag the packets for you, and just plug the phones into these VLAN-enabled network ports. The phones will not be aware of the VLAN and this will simplify your setup (remove VLAN setting from 3CX management console and reset/reprovision phones)
3. Why put the PBX and the phones in different VLANs? Put them both in the same VLAN to simplify your setup
4. Think of other ways you can simplify - the less complexity you have, the less problems you have to deal with
5. Get some help from MikroTik - I'm sure they have experience in the VLAN setup that can help you troubleshoot your current issues.
6. Do not use SIP-ALG, you can disable it on your mikrotik

So the general idea here is to make your network as simple as possible, to reduce the chances for communication issues between phones and PBX. And remember, if you made such changes, the phone needs to be factory reset and reprovisioned without VLAN enabled in your extension settings.