Ports Used by 3CX Phone System v15+
The following is a complete list of ports that 3CX Phone System uses in a default installation scenario:
PROTOCOL | PORT (DEFAULT) | DESCRIPTION | PORT FORWARDING REQUIRED |
TCP | 5001 or 443 | HTTPs port of Web Server. This port can be configured | Yes – if you intend on using a 3CX client, Bridge Presence, Remote IP Phones from outside your LAN and 3CX WebMeeting functionality |
TCP | 5015 | This port is used for the online Web-Based installer wizard (NOT 3CX config command line tool) only during the installation process | Optional - During the installation process when the Web-Based installer is used from external source |
UDP & TCP | 5060 | 3CX Phone System (SIP) | Yes – if you intend on using VoIP Providers and Remote Extensions that are NOT using the 3CX Tunnel Protocol / 3CX SBC |
TCP | 5061 | 3CX Phone System (SecureSIP) TLS | Yes – if you intend on using Secure SIP remote extensions |
UDP & TCP | 5090 | 3CX Tunnel Protocol Service Listener | Yes -if you intend on using remote extensions using the 3CX Tunnel Protocol (within the 3CX clients for Windows / Android / iOS) or when using the 3CX Session Border Controller |
UDP | 9000-10999 | 3CX Media Server (RTP) – WAN audio/video/t38 streams | Yes – if you intend on using remote extensions, WebRTC or a VoIP Provider |
TCP | 2528 | 3CX SMTP Server - Must allow PBX passthrough on the network for the PBX to send email notifications via the 3CX SMTP | No |
Phone System 
