T21P fw 34.72.0.75

[skoubri]

Hi, does T21P supports OpenVPN (pfsense) connection with firmware 34.72.0.75?

I have tried many times, get VPN connection I can ping the device from the sip server (tun) but cannot manage to make the device register...

thanks

---

My current cnf file

dev tun
persist-tun
persist-key
cipher BF-CBC
auth SHA1
tls-client
client
resolv-retry infinite
remote xxx.xxx.xxx.xxx 1198 udp
ca /yealink/config/openvpn/keys/ca.crt
cert /yealink/config/openvpn/keys/client1.crt
key /yealink/config/openvpn/keys/client1.key
ns-cert-type server
comp-lzo
passtos

---

And some entries from logs

May 9 20:38:39 Log [243]: WEB <6+info > step1:lpsz1[admin],lpsz2[admin],len=5
May 9 20:38:39 Log [243]: WEB <6+info > step2:IN[uoCbM.VEiKQto],GET[uoCbM.VEiKQto],R=1
May 9 20:38:39 Log [243]: WEB <6+info > ip:192.168.1.71 Login in success!
May 9 20:38:39 Log [140]: ACCU<6+info > Account OnGetLineState[1]
May 9 20:38:40 openvpn[361]: TUN/TAP device tun0 opened
May 9 20:38:40 openvpn[361]: /sbin/ifconfig tun0 10.20.1.2 netmask 255.255.255.248 mtu 1500 broadcast 10.20.1.7
May 9 20:38:41 openvpn[361]: ERROR: Linux route add command failed: external program exited with error status: 1
May 9 20:38:41 openvpn[361]: Initialization Sequence Completed
May 9 20:38:41 TR9 [304]: TR9 <6+info > Message Recieved: 10102, 1, 0
May 9 20:38:41 Log [140]: CUIT<6+info > NetworkMonitor: BROAD_MSG_OPENVPN_STATUS (wParam = 1)
May 9 20:38:41 Log [140]: CUIT<6+info > SetStaus Type[7], Status[1]
May 9 20:38:41 TR9 [304]: TR9 <6+info > Message Recieved: 10102, 1, 0
May 9 20:38:41 SIP [238]: SDL <6+info > [000] DNS resolution with 192.168.70.10:5060
May 9 20:38:41 SIP [238]: SDL <6+info > [000] Message sent: (to dest=192.168.70.10:5060)
May 9 20:38:41 SIP [238]: SDL <6+info > [000]
May 9 20:38:41 SIP [238]: SDL <6+info > [000] REGISTER sip:192.168.70.10:5060 SIP/2.0^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] Via: SIP/2.0/UDP 192.168.1.66:5062;branch=z9hG4bK2099147527^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] From: <sip:3322@192.168.70.10>;tag=419435235^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] To: <sip:3322@192.168.70.10>^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] Call-ID: 1728800401@192.168.1.66^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] CSeq: 1 REGISTER^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] Contact: <sip:3322@192.168.1.66:5062>^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] Max-Forwards: 70^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] User-Agent: Yealink SIP-T21P 34.72.0.75^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] Expires: 3600^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] Allow-Events: talk,hold,conference,refer,check-sync^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] Content-Length: 0^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000] ^M
May 9 20:38:41 SIP [238]: SDL <6+info > [000]
May 9 20:38:41 SIP [238]: SDL <5+notice> [000] send request retransmission (id=1)^M
May 9 20:38:43 Log [140]: ACCU<6+info > Account OnGetLineState[1]
May 9 20:38:45 SIP [238]: SDL <6+info > [000] DNS resolution with 192.168.70.10:5060
May 9 20:38:45 SIP [238]: SDL <6+info > [000] Message sent: (to dest=192.168.70.10:5060)
May 9 20:38:45 SIP [238]: SDL <6+info > [000]
May 9 20:38:45 SIP [238]: SDL <6+info > [000] REGISTER sip:192.168.70.10:5060 SIP/2.0^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] Via: SIP/2.0/UDP 192.168.1.66:5062;branch=z9hG4bK2099147527^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] From: <sip:3322@192.168.70.10>;tag=419435235^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] To: <sip:3322@192.168.70.10>^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] Call-ID: 1728800401@192.168.1.66^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] CSeq: 1 REGISTER^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] Contact: <sip:3322@192.168.1.66:5062>^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] Max-Forwards: 70^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] User-Agent: Yealink SIP-T21P 34.72.0.75^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] Expires: 3600^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] Allow-Events: talk,hold,conference,refer,check-sync^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] Content-Length: 0^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000] ^M
May 9 20:38:45 SIP [238]: SDL <6+info > [000]
May 9 20:38:45 SIP [238]: SDL <5+notice> [000] send request retransmission (id=1)^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] DNS resolution with 192.168.70.10:5060
May 9 20:38:49 SIP [238]: SDL <6+info > [000] Message sent: (to dest=192.168.70.10:5060)
May 9 20:38:49 SIP [238]: SDL <6+info > [000]
May 9 20:38:49 SIP [238]: SDL <6+info > [000] REGISTER sip:192.168.70.10:5060 SIP/2.0^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] Via: SIP/2.0/UDP 192.168.1.66:5062;branch=z9hG4bK2099147527^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] From: <sip:3322@192.168.70.10>;tag=419435235^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] To: <sip:3322@192.168.70.10>^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] Call-ID: 1728800401@192.168.1.66^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] CSeq: 1 REGISTER^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] Contact: <sip:3322@192.168.1.66:5062>^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] Max-Forwards: 70^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] User-Agent: Yealink SIP-T21P 34.72.0.75^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] Expires: 3600^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] Allow-Events: talk,hold,conference,refer,check-sync^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] Content-Length: 0^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000] ^M
May 9 20:38:49 SIP [238]: SDL <6+info > [000]
May 9 20:38:49 SIP [238]: SDL <5+notice> [000] send request retransmission (id=1)^M

[Yealink_Michael]

hi

thanks for your information

for this issue, please check below :

1. you need to have to network card , one is public network card, another is inside network card .

2. download the Open VPN guide :
http://support.yealink.com/attachmentDow...V80_63.pdf

3. check with you have enable the 'TCP/IP forwarding' & " Internet connection sharing" , see guide page 20-21

4. check with option on the page 29 of the guide

5. enable the phone ability to connect the sip server , please add below sentence to you vpn.cnf :
push "route 192.168.3.0 255.255.255.0"
replace the 192.168.3.0 with the network segment of your SIP Server

let me know if any update !

TKS & BR

Michael
Yealink WIKI : http://support.yealink.com/

[skoubri]

Many thanks for your answer... I am connecting on a Pfsense system from which behind is the Asterisk server and yes it has two network cards. I have all systems working with softphone from iPhone ie with openvpn client.

I tried the push route command from VPN server side and getting this error "May 9 20:38:41 openvpn[361]: ERROR: Linux route add command failed: external program exited with error status: 1" as you can see at the logs above... I will try to add also to vpn.cnf.

The strange thing is that I can ping the tunnel address of the phone (10.20.1.2) from the server and I can see from pfsense the try of the phone to connect to the server on 5060 port... (outgoing port from yealink is 5062).

i'll check your steps and come back with update.

P.S. Is there ANY way to have CLI access on the phone? it would be the best way to trace problems like this!!! (any serial port on the PCB board maybe also?)

Thanks!

[Yealink_Michael]

thanks for your update , waiting for your update !

fro the CLI , sorry that we didn't have this interface , but to debug the issue, we can use trace file export from the phone , for how to get them , please refer to the link below :

http://forum.yealink.com/forum/showthread.php?tid=1319

http://forum.yealink.com/forum/showthread.php?tid=15529

TKS & BR

Michael