Yealink behind SBC to 3CXhosted

[danfw]

I'd try several times to assing Yealink T20P to SBC.

1. I can see it Bold in phones,
2. Assign to Ext.
3. click ok
4. nothing happens

I upgrade the phone to last firmware version in 3CX portal

but I'd find something weird

Yealink have 2 accound
1. is register to rps.yealink
2. is disable

I'd look for disable rps, but I didn't know if this is necessary or what can I do to aprovission this phone to ext

 

[JohnS_3CX]

Hello Dan,

This is not at at all a matter of RPS. Take a look at the limitations for this model in our guide:
https://www.3cx.com/sip-phones/yealink-t20p-t22p-t26p-t28p/

The SSL capabilities of this phone are too old and limited so it cannot establish a secure connection to your 3CX system to download its configuration - this is why it is failing.

You can try to disable the Security >> Antihacking >> SSL/SecureSIP Transport and Ciphers option in your management console and try again. It might still not be enough since V18 has higher-spec encryption than V16 but you can at least try.

Afterwards, remember to re-enable the above option otherwise your system will be susceptible to some well known SSL vulnerabilities.

 

[danfw]

Thanks for your help

SSL/SecureSIP Transport and Ciphers were disable, but we can't auto provisioning by the SBC method.

but auto provisioning by STUN method works fine.

thansk

 

[Saqqara]

Within the phone gui, under security disable ‘Enable Trusted Certificates'

 

[JohnS_3CX]

but auto provisioning by STUN method works fine.

thansk

How did you provision by STUN? ie. did you enter the extension + pin number on the phone using the buttons?

 

[danfw]

I paste link for auto-aprovissing in field for this

 

[JohnS_3CX]

Ok then clearly there is no issue with the phone reaching the PBX and provisioning itself.

This leaves the RPS being the suspect here, so you will have to contact Yealink and have the MAC of any phones you have removed from their RPS.

I would also imagine that if you test another phone which is not in the RPS, you will be able to provision it automatically via SBC without any problems..

 

[danfw]

after I'd disable ‘Enable Trusted Certificates'

I can autoaprovissioning via STUN

SBC doesn't works

 

[JohnS_3CX]

SBC might not work due to a different set of reasons. So far we have established the following:

1. You can provision STUN by pasting the URL (proving the phone can reach the server and download config)
2. SBC does not auto provision (pointing to another problem)

For SBC auto provisioning to work, you need both the phone and the SBC to be connected to the same network at the same site together, and they must also be on the same IP address range. And most importantly, you must allow multicast messages on the network. Can you confirm these requirements are met?

 

[danfw]

Hello Johns,

SBC and Phone are in the same LAN
LAN is flat, I mean, no VLAN, no any other feature enabled,

switch is L2, could be L1

SBC was installed on Windows OS, is need it to disable something on windows?

 

[JohnS_3CX]

There is a possibility yes, does Windows have more than one LAN card?

Is there a firewall / antivirus running?

Can you check if the machine is joined in to the multicast group?
https://www.3cx.com/docs/plug-and-play-ip-phone/