Yealink Forums
[Solved] VPN with watchguard - Printable Version

+- Yealink Forums (
+-- Forum: IP Phone Series (/forumdisplay.php?fid=4)
+--- Forum: Phone specific topic (/forumdisplay.php?fid=12)
+---- Forum: T2xP Series (/forumdisplay.php?fid=21)
+---- Thread: [Solved] VPN with watchguard (/showthread.php?tid=2051)

Pages: 1 2

[Solved] VPN with watchguard - 5cservices - 07-10-2014 11:48 PM

Im attempting to connect a Yealink T20P over VPN to our watchguard.

Has anyone managed to successfully do this, or any good idea on how to do so ?

RE: VPN with wathguard - 5cservices - 07-23-2014 06:27 PM

Worked this out myself in the end.

Hopefully our experience may be of help to some others:

Create a stranded SSL-VPN user, Authenticating against Watchguard.

Depending on your Watchgaurd's Firmware go to https://<IP>/sslvpb.html and Download the Open VPN config file, Or Wathgaurd SSL VPN client if not available.

Create the bellow files & folders

In auth.txt add username / password for VPN account on septate lines:

If using Open VPN conf file :
Copy / Paste certificates & key in to respective files in keys folder
Copy reaming info from .ovpn file into vpn.cnf

If using SSL vpn client:
Open client, and log into vpn, then close again.
Navigate to your user: \AppData\Roaming\WatchGuard\Mobile VPN
Replace files in keys folder with ca.crt, client.crt & client.pem files.
Rename client.pem to client.key
Copy contents of client.ovpn into vpn.conf

In vpn.cnf :

Change auth-user-pass to: auth-user-pass /yealink/config/openvpn/auth.txt

append the bellow lines:
ca /yealink/config/openvpn/keys/ca.crt
cert /yealink/config/openvpn/keys/client.crt
key /yealink/config/openvpn/keys/client.key

Add the Keys folder, vpn.cnf & auth.txt into a new .tar archive called OpenVPN
Upload archive to Phone, and active VPN.

RE: [Solved] VPN with wathguard - jits04 - 09-22-2016 04:12 PM

I'm using t23g phone. I have firebox t-10 (watchguard).

I'm using SSL vpn client so I follow your instructions.

I have loaded the .tar file successful, but log file tell me:

Sep 21 00:00:08 openvpn[539]: OpenVPN 2.2.1 arm-dspg-linux-uclibceabi [SSL] [LZO2] [EPOLL] built on Feb 2 2015
Sep 21 00:00:08 openvpn[539]: WARNING: cannot stat file '/yealink/config/openvpn/auth.txt': No such file or directory (errno=2)
Sep 21 00:00:08 openvpn[539]: Error opening 'Auth' auth file: /yealink/config/openvpn/auth.txt: No such file or directory (errno=2)
Sep 21 00:00:08 openvpn[539]: Exiting

Any idea?


RE: [Solved] VPN with wathguard - Kevin_Yealink - 09-23-2016 09:39 AM

Hi William

This is Kevin from Yealink support team, nice to know you.

Seems that you upload a auth.txt file into the vpn config while our phone don't support. Can you send the files to me,then i can test in my side. For more information about openvpn, you also can refe to the guide:


RE: [Solved] VPN with wathguard - jits04 - 09-23-2016 02:02 PM

Hi Kevin,

your colleague Klaus is already checking this problem, so if you want to try yourself ask him what kind of test he did to avoid waste of time (for save you time support).

5cservices user told to have had solved it, but it is very strange if your phone doesn't support it.

it will be wonderful to have this future working with watchguard products. I use always this as firewall


RE: [Solved] VPN with wathguard - jits04 - 09-26-2016 08:59 PM

Hi Kevin,

look at your faq:

it is supported!

I have correct it with right folder, but same error

.... WARNING: cannot stat file '/config/openvpn/auth.txt': No such file or directory (errno=2)
.....Error opening 'Auth' auth file: /config/openvpn/auth.txt: No such file or directory (errno=2)


Best regards


RE: [Solved] VPN with watchguard - meneersjon - 09-30-2016 05:10 PM

For the T27P SIP and a Firebox XTM330 it works!

Just be sure to use this syntax in the vpn.cnf file: auth-user-pass /config/openvpn/auth.txt
And in auth.txt, use account name and password both on their own line!

RE: [Solved] VPN with watchguard - jits04 - 10-05-2016 12:08 PM

Hi meneersjon,

I have open a ticket open with yealink support. I have done some tests. I have try to insert "auth-user-pass /config/openvpn/auth.txt", but it doesn't work. Would you mind to post your vpn.txt? Remove import information with XXX.

Thank you

RE: [Solved] VPN with watchguard - jits04 - 10-13-2016 03:29 PM


This evening I'll try your test.tar file.

I'll keep you update.

Thank you very much


RE: [Solved] VPN with watchguard - jits04 - 10-14-2016 02:55 AM


I moved the pwd to keys folder, otherwise the load failed, but I still receive the same error!

other suggest? Have you tried with t23g?

best regards