Which ports to allow from LAN to VLAN for mobile app?

[mkono87]

I have 3cx installed on a VLAN that is only allowed by a few ips on LAN. The android apps used are just sitting on LAN. As expected, I cannot provision these devices due to LAN to VLAN being blocked. I can however provision over WAN. It just looses connection when on LAN again. As im new to this system and pretty much SIP in general, could someone let me know the ports I should be allowing between subsets? Im using Opnsense if that helps any.

 

[Alphabetic]

These are the ports required for your 3CX.

https://www.3cx.com/docs/manual/firewall-router-configuration/

I would also go through the training material to better your 3CX knowledge

https://www.3cx.com/3cxacademy/

 

[Saqqara]

If I was you I would put phones on the IOT network, phones should be classified as IOT devices and should not be on the same network as your main network.

 

[mkono87]

If I was you I would put phones on the IOT network, phones should be classified as IOT devices and should not be on the same network as your main network.

I did not mention anything about physical phones.When that time comes they will be on an iot network. Im speaking about desktop apps and smartphones (softphone) need to be able to access the vla but only for 3cx

 

[ChrisC_3CX]

To hopefully help clear this up.

The android apps will need the following to work:

1. Traffic to and from the PBX's https port (default: TCP 5001)
2. Traffic to and from the PBX's tunnel port (default: TCP and UDP 5090)
3. Traffic to and from Google's PUSH servers on TCP port 443. (This is to and from the internet though, not the PBX)

The Desktop app needs:

1. Traffic to and from the PBX's https port (default: TCP 5001)
2. Traffic to and from the PBX's WebRTC ports ( UDP: 10500-10999)