Yeah, you’re running into a pretty common issue with carriers that only support IP auth. Vapi isn’t really designed for pure IP-based inbound, so your 3CX SBC is actually the right way to bridge things. Also, those IPs aren’t guaranteed to stay fixed, so relying on whitelisting alone can get risky. Pricing is usually per-minute across voice + AI usage, and there is a partner model if you’re planning to scale this.
are you planning to route everything through 3CX, or trying to pass calls directly into Vapi? @Supra