Yealink SIP-T38G, Administrator'S Manual

Page: 177 / 402

Administrator’s Guide for SIP-T3xG IP Phones
164
There are two types of VPN: remote-access VPN (connecting an individual device to a
network) and site-to-site VPN (connecting two networks together). Remote-access VPNs
allow employees to access their company's intranet from home or outside the office,
and site-to-site VPNs allow employees in geographically separated offices to share one
cohesive virtual network. VPN systems can be also classified by the protocols used to
tunnel the traffic. VPNs provide security through tunneling protocols: IPSec, SSL, L2TP
and PPTP.
The IP phones support SSL VPN. SSL VPN provides remote access VPN capabilities
through SSL. OpenVPN is a full featured SSL VPN software solution that creates secure
connections in remote access facilities. It
is designed to work with the TUN/TAP virtual
networking interface. TUN and TAP are virtual network kernel devices. TAP simulates a
link layer device and provides a virtual point-to-point connection. TUN simulates a
network layer device and provides a virtual network segment. The IP phones support
using OpenVPN to achieve the VPN feature. To prevent disclosure of private information,
tunnel endpoints must authenticate each other before secure VPN tunnel is established.
After the VPN feature is configured properly on the IP phone, the IP phone acts as a VPN
client and uses the certificates to authenticate the VPN server.
To use the VPN feature on the IP phone, the compressed package of VPN-related files
should be uploaded to the IP phone in advance. The file format of the compressed
package must be .tar. The VPN-related files are: certificates (ca.crt, client.crt and
client.key) and configuration file (vpn.cnf) of VPN client. Ask your network administrator
for the tar package.
Procedure
VPN can be configured using the configuration files or locally.
Configuration File <y0000000000xx>.cfg
Configure the OpenVPN feature
and upload the tar package to
the IP phone.
For more information, refer to
VPN on page 295 .
Local
Web User Interface
Configure the OpenVPN feature
and upload the tar package to
the IP phone.
Navigate to:
http://<phoneIPAddress>/cgi-bi
n/cgiServer.exx?page=Networ
k-Adv.htm
Phone User Interface
Configure the OpenVPN feature
under Advanced Settings.
To upload the tar package to the IP phone and configure VPN via web user interface:
1. Click on Network->Advanced.