Vpn - Yealink SIP-T4X Administrator's Manual

Administrator's Guide for SIP-T4X IP Phones
4. Click Confirm to accept the change.
A dialog box pops up to prompt that settings will take effect after reboot.
5. Click OK to reboot the IP phone.
To configure VLAN for Internet port (or PC port) via phone user interface:
1. Press Menu->Advanced (password: admin) ->Network->VLAN->WAN Port (or PC
Port).
2. Press
Status field.
3. Enter the VLAN ID (1-4094) in the VID Number field.
4. Enter the priority value (0-7) in the Priority field.
5. Press the Save soft key to accept the change.
The IP phone reboots automatically to make settings effective after a period of
time.
VPN (Virtual Private Network) is a secured private network connection built on top of
public telecommunication infrastructure, such as the Internet. It provides remote offices
or individual users with secure access to their organization's network. VPN has become
more prevalent due to the benefits of scalability, reliability, convenience and security.
There are two types of VPN access: remote-access VPN (connecting an individual
device to a network) and site-to-site VPN (connecting two networks together).
Remote-access VPN allows employees to access their company's intranet from home or
outside the office, and site-to-site VPN allows employees in geographically separated
offices to share one cohesive virtual network. VPN can be also classified by the
protocols used to tunnel the traffic. It provides security through tunneling protocols:
IPSec, SSL, L2TP and PPTP .
IP phones support SSL VPN, which provides remote-access VPN capabilities through SSL.
OpenVPN is a full featured SSL VPN software solution that creates secure connections in
remote access facilities, designed to work with the TUN/TAP virtual networking interface.
TUN and TAP are virtual network kernel devices. TAP simulates a link layer device and
provides a virtual point-to-point connection, while TUN simulates a network layer device
and provides a virtual network segment. IP phones use OpenVPN to achieve the VPN
feature. To prevent disclosure of private information, tunnel endpoints must authenticate
each other before secure VPN tunnel is established. After the VPN feature is configured
properly on the IP phone, the IP phone acts as a VPN client and uses the certificates to
authenticate the VPN server.
To use the VPN feature, the compressed package of VPN-related files should be
uploaded to the IP phone in advance. The file format of the compressed package must
be .tar. The VPN-related files are: certificates (ca.crt and client.crt), key (client.key) and
178
or , or the Switch soft key to select the desired value from the VLAN