Specifications
connections.IfthePBXhasonlyoneNIC,thentherewillbenoneedtosetthisfield.Inour
examplethisis192.168.9.213.
3. Set the Tunnel Listening Port to the port, which will be receiving tunnel connections. The
defaultvalueis5090.
4. Click“OK”.TheTunnelservicewillberestartedautomatically.
Step2–ConfiguretheFirewall
The Tunnel protocol is designed to eliminate NAT traversal problems and reduce Firewall
configuration work to a minimum. There is only one Firewallsetting that needs to be made – we
mustforwardtheTCPTunnelport(setbydefaultto5090)tothePBX.
ConfiguringaPortForwardRuleinpfSense
The above picture shows configuration for a pfSense firewall most firewalls will provide similar
functionality.Inyourfirewall:
1. EnablePortForwarding.
2. SpecifythePBX’sLocalIPAddress(whichwehadsetpreviouslyto192.168.9.213)
3. SettheTypeto“TCP”.
4. SetthePortRangetobefrom5090to5090(onlyoneport).
5. SettheCommentfieldto“3CXTunnel”.
6. Clickonthe “Add”buttonfollowedby the“Apply”button.Your firewallconfigurationisnow
done!
Step3–ConfiguringRemote3CXPhones,Bridgesand3CXSBC
Afteryouhaveconfiguredthelocaltunnelconnectionandthefirewall,thetunnelisnow“readyfor
use”.The3CXTunneltechnologycanbeusedinthefollowingscenarios:
ConnectRemote3CXPhoneUsers
3CXPhone for Windows, Mac and Android have a built in tunnel that will be used automatically
when3CXPhonedetectsitisnotontheLAN.Noconfigurationisnecessaryin3CXPhone.
Inthecaseof3CXPhoneforiPhone,theTunnelappmustbedownloadedasaseparateappfrom
theAppleAppStore,asit’snotallowedtointegratethefeaturedirectlyinto3CXPhoneforiPhone.
Inthiscasetheusermustswitchonthe3CXTunnelAppwhenplacingcalls.Forfurtherinformation
about3CX Tunnel options in3CXPhone, see the chapter“Configuring the 3CX PhoneSystem
Clients–3CXPhone”.
Connect3CXPhoneSystemsviaaBridge