Hello,

I am currently in a bit of a jam. I have taken over IT responsibilities and we've been using Mikrotiks at our business.

The issue we are having is, this one place has a end to end bridge, and the router is setup to make a IPSEC tunnel to another location which then its able to talk to the other LAN's in our business.

I have checked with the ISP and there is no funny business of them blocking the connection to Skype and our 3CX PBX for phones.

The skype issue has been a issue for a while and I gave up on it, it will just stay at "connecting to service" when trying to login.

But we just got a new hosted PBX with Amazon, and the phone is now unable to make a connection the PBX box, The phone was working a week ago.

Each and every time i go to the 3cx admin page I am getting a screen "ERR_CONNECTION"

The funny thing is, the other 4 locations do not have this problem at all and everything works.

and also another kicker is, we have a VPN connection to a location which is running a virtual mikrotik host that allows us to connect and be able to access all other LAN locations.

The Skype and phone connection will work.

The problematic place is using a mikrotik hex

I been trying to diagnose the problem with tracert and pings and wireshark, but coming to a blank, I even disabled all firewall rules just to see if its a blocking connection..

in the tracert from the router I can see if getting to Amazon service and then it timeout.

Its been hard for me to get this going again because there isn't really a support specialist in the area that deals with it, and our ISP and the guy who setup the mikrotik won't make a trip down to fix it and he is also coming up blank on the issue.

Anyways....

The place right now is able to make a connection to the other branch and look at the servers we host and applications we run and all but just Skype for business and Phone connection to 3CX hosted by AWS are not working.

Hoping this community can help guide me in a direction.

Thank you

Any ideas?

Appok I would recommend you use wireshark and inspect packets going to destination this will help you understand where the problem is?
Compare wireshark traffic on the sites which has problem and which does not has and you will have your problem narrowed down.

I am also having almost same kind of problem where we try to access one website and the it times out and after struggling for days we came to know that from our side we send hello packets TLS 1.2 but do not get response from the server ip is not blocked all configurations are good so wireshark helped us .