OpenVPN user password

[krisstofer]

Hello,

I'm trying to setup openvpn connection to Mikrotik RouterOS.

The problem is that Mikrotik requires both certificate and user/password authentication.

When I enter:

auth-user-pass auth.cfg

or

auth-user-pass /yealink/config/openvpn/auth.cfg

phone is not triying to setup vpn connection anymore

Does anyone have an expirience with that configuration or knowledge of introducing support of auth-user-pass paramenter in open vpn client?

[montemartello]

Hello,
this is very interesting also for me.
Mikrotik is a economical OpneVPN server for this application.

Thanks
E.

[clicks]

I'm suffering from exact the same problem. Our watchguard firewall requires a username/password for login but as soon as I add the line auth-user-pass /phone/config/openvpn/auth.txt to the vpn.cnf (and include the file of course) my T32G simpy doesn't do anything vpn related according to the syslog.
Without the line it tries to connect and the syslog contains openvpn entries.

Any ideas?

[James_Yealink]

Hi,

Can you send your tar file to us for a check?
You can mask private information.

Regards,
James

[clicks]

Hi James,

I send you an EMail containg the configuration an syslog files.

[clicks]

Hi James,

have you been able to locate and debug the issue?

[James_Yealink]

Hi,

Sorry for the late. I did reproduce the issue locally.
Finally I confirm with our R&D that the parameter is not supported in T3x series, it's supported in T2x, T4x and W52P.

Regards,
James

[clicks]

Ok, "good" to know that it is an error and not my faulty configuration. So will there be an update for the T3x series? We have lot's of these phones and it would be devastating for us to see VPN support in older and newer ranges, but not in our product range.

[James_Yealink]

Sorry, currenlty there is no a plan to add support of this paramter.
can the username/password authentication be disable din your firewall? The individual authentication can be achieved by different client certificate.

Regards,
James

[clicks]

Unfortunately this isn't possible, just for IPSec connections - which aren't supported by the Yealink phones as far as I understood.
Nevertheless, thanks for having a look.