This guide can be applied to all hardware certified by us of the 3CX line that you can find here:: https://www.miniserver.it/appliance/3cx-appliance.html
In this case we used an APU 2 NIC which you can find at this address: https://www.miniserver.it/appliance/3cx-appliance/3cx-apu2-2nic.html
3cx Standard ver.16.0.XXX
PBX setup wizard:
Once 3CX is installed, the PBX 3CX Web Configuration Tool guides you through important network and security settings. To run it, open the IP of the machine on which 3CX is installed followed by port 5015 in a browser, e.g. http://10.172.1.88:5015. Alternatively, you can run the configuration tool from the command line by selecting option (2). We do not recommend this mode.
The PBX 3CX web configuration tool, very intuitive and user friendly, will guide you through the configuration steps: Within a few minutes the PBX will be up and running.
Step 1 – New installation or recovery, Admin user and IP type
1. Select your installation type and click “Next“:
- “New installation”: if you are new to 3CX and do not have a license key, click on the link provided and fill in the form. The license key will be sent to you by email.
- “Restore existing backup”: select and click “Upload” to search for a backup file to restore. If the 3CX license key is not included in the backup, you must specify it.
- “Load a configuration file”: select and click “Load” to search for a configuration file to be used.
In our we will see: new installation
2. Choose a strong and case-sensitive username and password to access the management console and prevent unauthorized access to your PBX. Click on “Next”.
3. Confirm your public IP address. Select “Yes” to confirm or “No” to manually enter the public IP (In case the HTTP traffic is routed through a different network, be sure to enter the correct one!). Select “Next” to proceed.
4. Static or dynamic public IP: a static IP is required for professional use. For residential use or evaluation purposes, a dynamic IP can be used. Although 3CX detects the IP changes and updates the FQDN accordingly, calls are not routed until it does. Select your public IP type and then select “Next”.
Step 2 – Choosing an FQDN
1. 3CX requires a Fully Qualified Domain Name (FQDN) and a corresponding SSL certificate for security. This allows 3CX to run smoothly in and out of the office. IMPORTANT: the chosen FQDN / subdomain is linked to the license key.
- I need a 3CX FQDN: for easy configuration, you can choose an FQDN provided by 3CX and the Let’s Encrypt certificate. This is provided automatically and free of charge.
We recommend creating a FQDN with this format: NOMEAZIENDA.my3cx.it
We recommend choosing this mode as it is much more intuitive and easier to activate.
- I have my FQDN: (Available only with Pro and Enterprise license). You will need to create an FQDN and configure your DNS accordingly and upload your SSL certificate. If you are not familiar with this procedure, do not choose this option! You will be asked for a pfx, cer or crt file and optional passwords.
Note: Signed self certificates are not supported.
1. Step 3 – Select DNS type and ports
Specify if you have a DNS server that you can manage (eg Microsoft DNS):
- I manage my DNS, I use a single FQDN – In this case it is recommended to use a single FQDN, for example: “NOMEAZIENDA.my3cx.it”. The FQDN must be resolved in its LAN, on the machine where the 3CX Phone System is installed, and from the internet it must be resolved towards your public IP. You will need to use “Split DNS” on your router / DNS server.
- I don’t manage my DNS, I use a separate external FQDN / local IP or FQDN, e.g. pbx.companyname.com / 192.168.0.1 or pbx.companyname.local. If you do not have access to the DNS server, specify a separate external FQDN for devices that connect from outside the LAN and a local IP or a local / internal FQDN for internal devices.
2. Select the ports you want to use for the HTTP and HTTPS access of the Web Management console and for VoIP services (SIP and Tunnel ports). 3CX detects if you are using NAT or not based on your IP. If you are behind a NAT, you need to configure your firewall / router accordingly.
To perform this operation at best, we have created a dedicated guide that you can find here https://www.firewallhardware.it/en/3cx-pfsense-configuration-with-port-forwarding/
ATTENTION: the ports configured in this step will NOT be changed later. We recommend leaving the default ports.
3. Select the network interface connected to the public Internet / IP that you have specified and configured with the default gateway. If you have multiple interfaces make sure that this interface is the one with the configured default gateway. If the 3CX host has a private and direct WAN interface and users need to connect to this installation locally and remotely, select the internal interface, which is not configured with the default gateway and change the setting in “Settings” > “Network”> “Public IP” tab> “Network card interface” section, after installation on the public interface IP address. The FQDN and SSL certificates are generated, downloaded from Let’s Encrypt and installed on the machine hosting 3CX. Click on “Next“.
Step 4 – Final configuration options
1. Internal Lenght: choose the number of digits that the extension numbers should have. This can no longer be changed later. Click on “Next”.
2. Administrator Email: Enter the administrator’s email address to receive notifications. Click on “Next”.
3. Select “3CX SMTP Server”: provided by 3CX, this is the fastest option! This is the option that does not precede further configurations! Choose this option if you have no particular needs.
If you have your own SMTP server or are using one of the email providers listed in the SMTP Provider drop-down list, select SMTP and configure it accordingly. Click on “Next”.
4. Country and time zone: select the country and time zone and click “Next”.
5. Operator extension and Voicemail: This section configures the first operator of our 3CX. Remember that in 3CX it is always good to indicate an email address valid for the operator, so that configuration is easy integration with devices and softphones. Name and email address for the operator extension, i.e. the default destination for incoming calls. Then specify the number of “Operator extension and voicemail” to allow users to recover their voicemail and click on “Next”.
6. Countries authorized to make calls: only calls to selected countries are allowed, to reduce the risk of fraud. Click on “Next”. Remember that this setting can be changed later.
7. Select language: 3CX comes with default audio commands in American English. You can select a different set of prompts from the drop-down menu. The Italian language is among those present.
8. The configuration tool needs about twenty seconds to configure 3CX and start the services. Once finished, a confirmation page with login information is displayed. This information will also be sent to the administrator’s email address. Now you can access the management console.