Yealink CP969, Руководство администратора

Страница: 99 / 868

Setting Up Your System
77
IP phones use OpenVPN to achieve VPN feature. To prevent disclosure of private information,
tunnel endpoints must authenticate each other before secure VPN tunnel is established. After
VPN feature is configured properly on the IP phone, the IP phone acts as a VPN client and uses
the certificates to authenticate the VPN server.
To use VPN, the compressed package of VPN-related files should be uploaded to the IP phone
in advance. The file format of the compressed package must be *.tar. The related VPN files are:
certificates (ca.crt and client.crt), key (client.key) and the configuration file (vpn.cnf) of the VPN
client.
The following table lists the unified directories of the OpenVPN certificates and key in the
configuration file (vpn.cnf) for Yealink IP phones:
VPN files Description Unified Directories
ca.crt CA certificate /config/openvpn/keys/ca.crt
client.crt Client certificate /config/openvpn/keys/client.crt
client.key Private key of the client /config/openvpn/keys/client.key
For more information, refer to
OpenVPN Feature on Yealink IP phones
.
Procedure
VPN can be configured using the following methods.
Central
Provisioning
(Configuration File)
<y0000000000xx>.cfg
Configure VPN feature and upload a
TAR file to the IP phone.
Parameters:
static.network.vpn_enable
static.openvpn.url
Web User Interface
Configure VPN feature and upload a
TAR file to the IP phone.
Navigate to
:
http://<phoneIPAddress>/servlet?m
=mod_data&p=network-adv&q=loa
d
Phone User Interface
Configure VPN feature.
Details of Configuration Parameters:
Parameters Permitted Values Default
static.network.vpn_enable 0 or 1 0
Description: