Yealink SIP-T2 SERIES Administrator's Manual page 714

Administrator's Guide for SIP-T2 Series/T19(P) E2/T4 Series/CP860 IP Phones
VPN Technology
IP phones support SSL VPN, which provides remote-access VPN capabilities through SSL.
OpenVPN is a full featured SSL VPN software solution that creates secure connections in remote
access facilities, designed to work with the TUN/TAP virtual network interface. TUN and TAP are
virtual network kernel devices. TAP simulates a link layer device and provides a virtual
point-to-point connection, while TUN simulates a network layer device and provides a virtual
network segment.
IP phones use OpenVPN to achieve VPN feature. To prevent disclosure of private information,
tunnel endpoints must authenticate each other before secure VPN tunnel is established. After
VPN feature is configured properly on the IP phone, the IP phone acts as a VPN client and uses
the certificates to authenticate the VPN server.
To use VPN, the compressed package of VPN-related files should be uploaded to the IP phone
in advance. The file format of the compressed package must be *.tar. The related VPN files are:
certificates (ca.crt and client.crt), key (client.key) and the configuration file (vpn.cnf) of the VPN
client.
The following table lists the unified directories of the OpenVPN certificates and key in the
configuration file (vpn.cnf) for Yealink IP phones:
VPN files
ca.crt
client.crt
client.key
For more information, refer to
Note
VPN is not applicable to SIP-T19(P) E2 IP phones.
Procedure
VPN can be configured using the configuration files or locally.
Configuration File
Local
690
Description
CA certificate
Server certificate
Private key of the client
OpenVPN Feature on Yealink IP phones
<y0000000000xx>.cfg
Web User Interface
Unified Directories
/config/openvpn/keys/ca.crt
/config/openvpn/keys/client.crt
/config/openvpn/keys/client.key
.
Configure VPN feature and upload a
TAR file to the IP phone.
Parameters:
network.vpn_enable
openvpn.url
Configure VPN feature and upload a
TAR package to the IP phone.
Navigate to:
For
SIP-T48G/T46G/T42G/T41P/T40P/T29G/
T27P/T23P/T23G/T21(P) E2/CP860: