Jump to content

auto provisioning in 3.3 from outside lan


shopcomputer

Recommended Posts

Has this provisioning method been completely disabled from outside the lan?

http://pbx.pbxnsip.com:9012/provisioning/s...0041324006D.htm

 

What is the correct method to provision from outside the LAN, and obtain all the phone settings.

 

I tried putting the MAC in the extension, and using http://pbx.pbxnsip.com:9012, the phone logs showed some redirects, time settings being applied however thats about it, it did not register.

 

3.3.0.3165 (Win32)

Link to comment
Share on other sites

Has this provisioning method been completely disabled from outside the lan?

http://pbx.pbxnsip.com:9012/provisioning/s...0041324006D.htm

 

What is the correct method to provision from outside the LAN, and obtain all the phone settings.

 

I tried putting the MAC in the extension, and using http://pbx.pbxnsip.com:9012, the phone logs showed some redirects, time settings being applied however thats about it, it did not register.

 

3.3.0.3165 (Win32)

 

In 3.3, there is a change in the way you need to provision snom phones. The new link must be in the form http://ip:port/provisioning/snom300.htm (where the snom300 needs to be replaced with the actual phone model). We'll update the Wiki as soon as 3.3 is publically available.

Link to comment
Share on other sites

In 3.3, there is a change in the way you need to provision snom phones. The new link must be in the form http://ip:port/provisioning/snom300.htm (where the snom300 needs to be replaced with the actual phone model). We'll update the Wiki as soon as 3.3 is publically available.

And on the phone I had to set the http client setting with the user name and password of the extension, then it worked.

 

On the server generated folder, it created a folder named localhost, iinstead of the MAC_ADDRESS.

Link to comment
Share on other sites

How does pbxnsip know the MAC of the phone if you use the above URL with the Provisioning admin login?

 

Good point. In the 3.3 build (3.3.1.3177) we had to change this. You must use the username that should be provisioned; but you may use the password of the provisioning settings for the domain. This has the benefit that the user may change his or her password and still reboot the phone and get the provisioning data.

 

Important: Make sure that you have the domain provisioning data setup. There were versions that generated a default password, which is easy to guess and with that an outside attacker can easily get the password of the domain's accounts.

Link to comment
Share on other sites

so, if remote phones do not authenticate based on MAC. does that mean for remote phones we no longer need to put the MAC into the provisioning tab? dont know why you would if you are now using http auth.

 

Right. If you do HTTP authentication then there is no more need for the MAC. The only point of the MAC is to group extensions, so that it is possible to provision multiple extensions on the same handset. Only if you want to do that you need to put the MAC into the extensions that should be provisoned together.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...