[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
VPN configuration.
Author Message
jaymemaciejewski Offline
Junior Member
**

Posts: 2
Joined: Dec 2012
Reputation: 0
Post: #1
VPN configuration.
I am trying to configure a few T32G phones to connect with our 3CX server using OpenVPN for our home users. I keep getting a TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) when i try with the phone. I have tested my configuration with a laptop with OpenVPN installed (using the same router/network as the phone that is failing) and it works perfectly with the same configuration.

#Client Config
client
dev tun
persist-tun
persist-key
proto udp
nobind
remote x.x.x.x 1194
resolv-retry infinite
ca /config/openvpn/keys/ca.crt
cert /config/openvpn/keys/client.crt
key /config/openvpn/keys/client.key

Here are the server logs when the phone fails to connect (the public IP has been replaced with x.x.x.x):

Dec 31 14:20:14 openvpn[14850]: WARNING: using --duplicate-cn and --client-config-dir together is probably not what you want
Dec 31 14:20:14 openvpn[14850]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 31 14:20:14 openvpn[14850]: TUN/TAP device /dev/tun1 opened
Dec 31 14:20:14 openvpn[14850]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Dec 31 14:20:14 openvpn[14850]: /sbin/ifconfig ovpns1 192.168.35.1 192.168.35.2 mtu 1500 netmask 255.255.255.255 up
Dec 31 14:20:14 openvpn[14850]: /usr/local/sbin/ovpn-linkup ovpns1 1500 1541 192.168.35.1 192.168.35.2 init
Dec 31 14:20:14 openvpn[23033]: UDPv4 link local (bound): [AF_INET]192.168.30.243:1194
Dec 31 14:20:14 openvpn[23033]: UDPv4 link remote: [undef]
Dec 31 14:20:14 openvpn[23033]: Initialization Sequence Completed
Dec 31 14:40:44 openvpn[23033]: x.x.x.x:1024 Re-using SSL/TLS context
Dec 31 14:40:46 openvpn[23033]: x.x.x.x:1026 Re-using SSL/TLS context
Dec 31 14:40:50 openvpn[23033]: x.x.x.x:1028 Re-using SSL/TLS context
Dec 31 14:40:52 openvpn[23033]: x.x.x.x:1029 Re-using SSL/TLS context
Dec 31 14:41:44 openvpn[23033]: x.x.x.x:1024 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 31 14:41:44 openvpn[23033]: x.x.x.x:1024 TLS Error: TLS handshake failed
Dec 31 14:41:47 openvpn[23033]: x.x.x.x:1026 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 31 14:41:47 openvpn[23033]: x.x.x.x:1026 TLS Error: TLS handshake failed
Dec 31 14:41:50 openvpn[23033]: x.x.x.x:1028 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 31 14:41:50 openvpn[23033]: x.x.x.x:1028 TLS Error: TLS handshake failed
Dec 31 14:41:53 openvpn[23033]: x.x.x.x:1029 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 31 14:41:53 openvpn[23033]: x.x.x.x:1029 TLS Error: TLS handshake failed
Dec 31 14:41:58 openvpn[23033]: x.x.x.x:1029 Re-using SSL/TLS context

The 3CX server is 192.168.30.245, the OpenVPN server (PFSense) is 192.168.30.243, and the VPN subnet for the home users is 192.168.35.0. Everything works fine with the laptop, I can connect and ping each network/server, but when I try the same on the phone, it fails to connect. The TAR file seems to be fine, I don't get any errors when I compile it or upload it into the phone.

Anyone have any ideas I can try?

Thanks,

Jayme M.
01-08-2013 12:51 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
_alx_ Offline
Junior Member
**

Posts: 30
Joined: Dec 2012
Reputation: 1
Post: #2
RE: VPN configuration.
What time has your server and what time does your phone has?
01-08-2013 07:25 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
jaymemaciejewski Offline
Junior Member
**

Posts: 2
Joined: Dec 2012
Reputation: 0
Post: #3
RE: VPN configuration.
I found out what was causing the issue. When I was first provisioning and uploading the phone configurations, the 3CX server was sending the incorrect firmware update to the phone. The phones are SIP-T32G phones, but were receiving the SIP-T38G firmware.

Thanks,

Jayme M.
01-09-2013 12:39 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Configuration Generator Tool Abzorb 1 2,103 12-05-2023 08:28 PM
Last Post: ATICT
  Button with led configuration Wesley666 2 8,512 01-27-2022 05:28 AM
Last Post: Beachnuttz
  Read specific variable from phone configuration saivo 0 3,472 06-13-2021 05:23 PM
Last Post: saivo
  Proxy configuration Laurentt 2 9,533 01-07-2020 12:25 PM
Last Post: Laurentt
  Detailed boot process and ways to add local configuration? DanH 2 7,360 10-16-2019 04:24 PM
Last Post: justingoldberg
  Common Configuration Filenames Rus 3 11,712 06-27-2019 12:52 AM
Last Post: Evan_Yealink
  LDAP Directory Configuration Issue it_prevent 1 6,587 05-15-2019 05:55 AM
Last Post: Mike_Yealink
  BIN vs CFG configuration export/import Mauro 2 9,255 01-31-2019 09:15 AM
Last Post: Mauro
  Export CFG configuration file Issue Fraukas2 0 7,743 11-08-2017 06:19 PM
Last Post: Fraukas2
  Configuration Generator Tool telepathinc 16 59,244 09-15-2017 02:50 PM
Last Post: Sardar

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication