3CX Firewall Rules and Smoothwall

[mdrabble]

Can someone who is using 3CX and smoothwall mind sharing their firewall rules please -

 

I can get wired handsets working fine, but the mobile soft app dials and receives calls but no I cannot get any audio working

 

Cheers

[DGardiner]

Can someone who is using 3CX and smoothwall mind sharing their firewall rules please -

 

I can get wired handsets working fine, but the mobile soft app dials and receives calls but no I cannot get any audio working

 

Cheers

 

could try allowing any traffic with a destination of your 3cx platform and see if that fixes it - then just hunt for the ports on 3cx website and lock it down

[mdrabble]

I changed the IP address and VLAN'd the phone system since the first test installation, plus the external IP kept resolving to my gateway address and not my 3CX external IP for some reason which I think I entered when I first set it up.

 

As this was only a test install, I am currently spinning up a new VM and will setup using the correct IP range/VLAN from the start and also the correct external IP address.

 

I've found 3CX guides for most firewall platforms, so I've taken the port settings and will adapt to my smoothwall box - so fingers crossed.

[mdrabble]

Managed to sort it - it was a combination of firewall rules and ticking allow PBX to deliver audio on the ext.

[TTG_Rich]

Hey mdrabble, just a quick tip also, make sure that SIP ALG is disabled on the smoothwall, as well as any managed switches you might have in your environment, as that can cause issues also.

[Frazzle]

@mdrabble - I hope you can help me. I am trying to install 3CX on a VM in a VLAN using Hyper-V (I am hoping you are using Hyper-V). Have never used VMs with any other VLAN except our main Data VLAN. How did you set the Server up as a VM to sit in a particular VLAN please?

[mdrabble]

@Frazzle, The ports on the switch my HyperV Hosts connect to are set as Trunk Ports and then I use the VLAN Tagging on the VM to set the VLAN - this then allows you to set any VM to the required VLAN quickly and easily.

 

At the moment, 3CX server sits within my Server VLAN and the phones sit within the Phone VLAN.

 

 

DHCP is handled by my Windows DHCP hand I have setup DHCP Option 66 and a TFTP server to boot the phones.

 

I should really change it so the server sits within the Phone VLAN but this will have to wait until Half term or Christmas Break.

Edited September 27, 2018 by mdrabble

[Frazzle]

@Frazzle, The ports on the switch my HyperV Hosts connect to are set as Trunk Ports and then I use the VLAN Tagging on the VM to set the VLAN - this then allows you to set any VM to the required VLAN quickly and easily.

 

At the moment, 3CX server sits within my Server VLAN and the phones sit within the Phone VLAN.

 

 

DHCP is handled by my Windows DHCP hand I have setup DHCP Option 66 and a TFTP server to boot the phones.

 

I should really change it so the server sits within the Phone VLAN but this will have to wait until Half term or Christmas Break.

 

 

I had it working when the phones and the server were in the same VLAN. I now have the phones moved over to a voice VLAN but they wont see the server which is still on the main VLAN. I can ping the phones from the server but they wont connect. This is why I wanted to move the server over into the same VLAN.

 

In your case the server and phones are in different VLANS but still work. Not sure where I have gone wrong.

[mdrabble]

if you has a laptop on the phone vlan, can you ping the server?

 

I also set this up on mine - https://www.3cx.com/sip-phones/tftp-server/

 

So all I have to do it add the phone on 3cx with the mac address, plugin the phone and it pickup everything automatically. - I think I did this because I had a similar issue to you.