SIP telephones do not register

[Dzoni_m]

Hello,

I have an in issue with SIP telephones, from network connected over site-to-site IPsec, which needs to register on our PBX server.

Description:

Hardware: pfSense XG-2758
Software: 2.3.4

Local lan: 10.255.28.0/22 NAT-ed to public IP of the router. 3cx server with public IP address.
At the beginning I had a problem to activate SIP Phones from local LAN to 3cx. Simply all registration was failing. Protocol is UDP port 5060. I tried to put "Static port" in NAT rules for that ports and protocol, but it didn't help. At the end I installed siproxd package, and enabled "Proxy Authentication" put IP of 3cx and phones started to register and work.

Problem is that I have IPsec tunnel with another office, in range 10.255.16.0/22 they are NAT-ed on same box into different public IP. Not same as public IP of the router.
Phones from that LAN subnet can't be registered on 3cx server.
Any suggestion?

[jca1981]

Try to enable "Disable Firewall Scrub" in SystemAdvancedFirewall & NAT