X3S STUN Provision Error

[Usama Asgher]

I am trying to configure X3S phones with in the same network where our 3CX is installed. I want them to configure as STUN for later use outside the network. Now, When I try to configure it says Waiting for response from STUN and failed multiple times.

What can be the reason?
Can we configure phone as stun with in the same network?
All ports are open as I have tested through 3CX firewall but it says SIP ALG not detected. Does it make any difference in provisioning?

 

[cobaltit]

Can you open the management console via FQDN from inside the network but not on the same PC as 3CX?

 

[Usama Asgher]

No. I can't. What changes shall I make ?

 

[Saqqara]

You need to setup a dns entry that points your fqdn to the internal ip of the 3cx server

https://www.3cx.com/docs/creating-fqdn-split-dns/

 

[JohnS_3CX]

I am trying to configure X3S phones with in the same network where our 3CX is installed. I want them to configure as STUN for later use outside the network. Now, When I try to configure it says Waiting for response from STUN and failed multiple times.

What can be the reason?
Can we configure phone as stun with in the same network?
All ports are open as I have tested through 3CX firewall but it says SIP ALG not detected. Does it make any difference in provisioning?

Not a good idea, but I understand why you want to do it. The reason is that the phone is asking to connect to the same public IP from which it came from. Most firewalls will prevent this type of hairpin traffic (hence why it is not a good idea). You should not deploy phones in the office this way.

1. Please read this and ensure that the 3CX system has the right port forwards. Without those, STUN is an impossibility https://www.3cx.com/docs/ports/

2. Take the phone home and plug it into your ISP modem. You can test STUN this way (provisioning and calls). You will gain some valuable knowledge without affecting your normal calls.

 

[Usama Asgher]

thanks. its resolved now

 

[JohnS_3CX]

Good to know! Resolved using split DNS?