Web-meeting Servers

[shortcirciut]

Dear All,

I need to know the ip address ranges of the web-meeting servers. I need to exclude these ips from the corporate vpn tunnel.
Our firewall does not accept to use the fqdn for split tunnel rules.

Thanks in advance

 

[JohnS_3CX]

Hi @shortcirciut

You can follow this article to help you: https://www.3cx.com/user-manual/video-conferencing/

 

[shortcirciut]

Thanks John for the fast answer,

But we are a group of companies with presence in Europe and Africa.
Need to find ips than from each office ?

Thanks in advance

 

[JohnS_3CX]

The PBX is set by default to look for the best MCU automatically and connect to it. If MCUs are added or removed, the system will periodically be updated with these changes and can change to a different MCU.

On each 3CX system of each company, the firewall in front of it will need to know the IPs of the MCUs by resolving the fqdn in the guide I posted earlier.

So you will have to add them to each company's firewall. If you have a way of scripting it automatically then even better since the IPs will change from time to time as we perform maintenance, upgrades or introduce additional servers.

 

[shortcirciut]

Hi John,
I understand exactly what you are saying. But the issue I am try to go around is different, maybe I did not explained myself well.
So we currently are set by a full tunnel for remote vpns which means all traffic will pass through the corporate firewall. Same will do for web meeting traffic. First of all I don't want to inspect this traffic and secondly this traffic which may result a bit heavy does not need to traverse the firewall even to have a better experience.
So the only way is to do split tunnel, thus excluding the web meeting server ips , and so the traffic from the remote users will flow to their nearest web-meeting server as per their location. FQDNs in split tunnel rules are not supported as the firewall need to know exactly the ip ranges so they can be excluded from routing those ips from its routing engine.

Thanks to all

 

[JohnS_3CX]

Hi @shortcirciut

We can provide you with an updated list of IPs currently in use by the MCUs when you do an nslookup mcu.3cx.net but unfortunately we cannot help you with your network setup or firewall management.

For your own network setup, you will have to find a way to makes use of those IPs that is tailored specifically to your unique setup. This can be done in a number of ways, but hopefully you understand why I'm hesitant to suggest something specific as this has to do with your own network security and management.

 

[shortcirciut]

Well John,
That's only what I need.
Thanks in advance

 

[shortcirciut]

Dear John,

From where I can get this updated list ?

Thanks in advace

 

[JohnS_3CX]

Like I said in post #6 - do an nslookup mcu.3cx.net