Beruflich Dokumente
Kultur Dokumente
3.
Once the Firewall Checker starts, networking tests will be performed and depending on the configuration of your firewall or border device, the results will be provided together with information on what you can do to fix/troubleshoot the problem.
Notes Important: Starting the Firewall Checker will stop the 3CX Services. The PBX will not be available for the duration of the tests. The tests last 1 second for each port checked if the tests are successful or anywhere between 5 and 10 seconds if the port fails the port check. By default, the firewall checker checks 52 ports. These include port 5060, 5090 and port range 9000 9049. If everything is configured correctly, the tests should be take less than a minute. If there are issues with all the ports, the test can
take between 4 and 9 minutes. You also have the option to cancel the tests. The Firewall Checker requests the STUN server configured in Settings > Network > STUN server tab, to make connections to it and on the ports being checked. Some firewalls might detect a port scan since the ports are checked sequentially. When this happens, the 3CX Firewall Checker will start reporting issues after the first few ports have been checked. If that happens you might want to disable the port scan check on your firewall while running the 3CX Firewall Checker.
This test checks that the 3CX PBX is able to communicate with the STUN server running on the internet from the port being checked. This test will also perform a DNS resolution check if the STUN servers hostname is specified. This test checks basic connectivity to the internet and that the STUN server is reachable. Check the following if you get a failure on test 1:
You might have a general problem connecting to the internet. To confirm that open a browser and check that you can connect to the internet by going to a website. You might need to configure your firewall to allow connections from the machine running 3CX Phone System to the internet on the port being checked. Check this blog post which documents the Ports
Your WAN to LAN device (firewall or router) has static, one to one port forwarding configured for the ports being checked. Some ports need static port mapping configured for both TCP and UDP. Once again, check this blog
STUN server has no second address. You will get this error message when you are using an incorrectly configured STUN server. The STUN Server must have 2 addresses. You will need to use a different STUN server for these tests. 1. 2. 3. Log in to the 3CX Management Console. Click on Settings > Network Find the STUN Server tab and configure one of the following stun servers stun.3cx.com,
stun2.3cx.com, stun3.3cx.com, stun4.3cx.com Failed No response received or port mapping is closed. Port forwarding not configured correctly. Port Forwarding is not configured correctly for the port being checked. In this case VoIP Providers and Remote extensions WILL NOT WORK. Log in to your router / firewall and configure port forwarding by entering the ports required by 3CX and forwarding them to the IP Address of the 3CX Phone System machine. Failed Firewall check failed. Some errors were detected. Please check your firewall configuration and try the test again. You will get this message if some ports pass the tests and others dont. You will need to investigate which ports failed the test and check port forwarding for those ports. Also make sure that the firewall/router is not forwarding connections on the specific port to another IP Address. The ports should be forwarded to the IP Address of 3CX Phone System. Failed Malformed response received (aka Symmetric NAT). Port forwarding not correctly implemented. The response we got from the STUN server indicates that you do not have a one to one NAT(Full cone NAT). 3CX Phone system requires a 1 to 1 port forwarding inbound and outbound, for VoIP Providers, Bridges and external extensions to work. STUN server did not answer or port forwarding is not configured on your firewall. The STUN server used for this test did not answer. Possible reasons could be: 1. STUN server is not reachable
2. STUN Server is down 3. Port forwarding is not configured correctly. STUN server address cannot be resolved. The DNS resolution used to resolve the STUN servers IP address failed. This could be a DNS issue, or the STUN server has ceased operations altogether. Failed Malformed or no response received from configured STUN servers. Check your internet connection, DNS settings, or change STUN servers from Settings > Network > STUN Server tab. If you get this message check that port forwarding is correctly implemented. Your firewall might be blocking packets. Check this article on how to configure static port forwarding. Failed Port is in use by another application on this computer. OR SIP port is in use by process {0}. The 3CX Firewall checker requires the SIP port to be free. The port needed for this test is currently in use by another application installed on the computer. To determine the process that is using on the specified port, run the following command in command prompt: ?