Specifications

ConfigurationforRemoteExtensions
Forremoteextensions,youhavethechoiceofusingDirectSIPorusingthe3CXSBC(Tunnel).The
3CXSBCservicewillbundleallVoIPtrafficoverasingleportandvastlysimplifyfirewall
configurationandimprovereliability.3CXPhoneforAndroid,WindowsandMachavetheinbuilt
tunnel,whilstusingthe3CXSBCserviceonaremotenetworkyoucanalsoconnectIPPhonesvia
thetunnel.MoreinformationonSBCcanbefoundinnextchapter.
Remoteextensionsvia3CXTunnel
Toconnectremoteextensionsviathe3CXTunnel,youmustopenthefollowingports:
● Port5090(UDPandTCP).
● Port80HTTP/443HTTPSfor3CXPhonePresence.Note:HTTPandHTTPSportscanbe
configuredduringinstallation.Ifyouhavechosentouseportsotherthan80/443makesure
toforwardthose.
RemoteextensionsviadirectSIP
IfyouwishtoconnecttheremoteextensionviadirectSIP,inthecaseof3CXPhoneforiOSorfor
singleIPPhones,thenyoumustconfigurethesameportsasrequiredforaVoIPProvideroraSIP
Trunk:
● Port5060.
● Port5061ifusingsecureSIP.
● Port90009199forRTP.
● Port80HTTP/443HTTPSfor3CXPhonePresenceandHTTPprovisioning.Note:HTTP
andHTTPSportscanbeconfiguredduringinstallation.Ifyouhavechosentouseportsother
than80/443makesuretoforwardthose.
Firewallchecker
Afterconfiguringyourfirewall,runthe3CXfirewallcheckertoensurethatconfigurationiscorrect.
Moreinformationcanbefoundhere:http://www.3cx.com/blog/docs/firewallchecker/
ExampleFirewallConfigurations
Thefollowingarelinkstoexampleconfigurationsforpopularfirewalls:
● ConfiguringaSonicwallFirewallfor3CXPhoneSystem
● ConfiguringaDraytek2820Routerfor3CXwithQoSconfiguration