[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
T32G OpenVPN configuration
Author Message
Yealink_Michael Offline
Administrator
*******

Posts: 382
Joined: Jul 2015
Reputation: 2
Post: #2
RE: T32G OpenVPN configuration
(08-06-2015 03:06 AM)GiHe Wrote:  Like others, I am having a hard time trying to get OpenVPN working and do not see any logging or confirmation in the "ps" output from the phone's syslog. My tar upload succeeds and contains vpn.cnf (and a keys directory with ca.crt, client.crt, and client.key) with the following content (except for the IP address which is anonymized below):

Code:
client
cipher AES-256-CBC
auth SHA256
remote aaa.bbb.ccc.ddd 1194
float
ns-cert-type server
proto udp
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
verb 5
mute 9
ca /config/openvpn/keys/ca.crt
key /config/openvpn/keys/client.key
cert /config/openvpn/keys/client.crt

These same files work on my laptop (with the "keys" paths changed) using a server with the following configuration:

Code:
server 10.0.0.0 255.255.0.0
dev tun
keepalive 10 120
proto udp
cipher AES-256-CBC
auth SHA256
persist-key
persist-tun

log server.log
status status.log
verb 4
mute 9

ifconfig-pool-persist ipp.txt

ca ca.crt
dh dh.pem
cert server.crt
key server.key

Does the OpenVPN implementation on the phone have limits regarding key sizes, etc. which I need to consider? Is there any way to get visibility into what the phone does not like about the configuration?

Please help!


hi

thanks for your information

for the VPN issue, please check that the signature algorithm of your keys are SHA256 or not?

if yes, i am sorry that T32 doesn't support this, it should use SHA1 or MD5, please chaange it and then recreate the keys, you can change it in "openssl.cnf" file , change sentence :

"default_md = sha256"
change to :
"default_md = md5"

"openssl.cnf" file in windows: Open VPN --- easy-rsa --- the file begin with openssl, it may be openssl-1.1.1.cnf or some like this

"openssl.cnf" file in linux: easy-rsa or the subdirectories under it ,also begin with openssl


I have uploaded a sample Openvpn file(Openvpn_sample.tar) for your reference, please follow this format to create the .tar file.


Thank you!
Michael


Attached File(s)
.tar  Openvpn_sample.tar (Size: 10.5 KB / Downloads: 45)
08-06-2015 05:20 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Messages In This Thread
T32G OpenVPN configuration - GiHe - 08-06-2015, 03:06 AM
RE: T32G OpenVPN configuration - Yealink_Michael - 08-06-2015 05:20 AM

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Configuration Generator Tool Abzorb 1 2,111 12-05-2023 08:28 PM
Last Post: ATICT
  Passing only LDAP traffic through OPENVPN Commensus 0 1,984 02-23-2022 09:47 PM
Last Post: Commensus
  Configuring OPENVPN with Yealink Commensus 0 2,478 02-23-2022 09:45 PM
Last Post: Commensus
  Button with led configuration Wesley666 2 8,517 01-27-2022 05:28 AM
Last Post: Beachnuttz
  Read specific variable from phone configuration saivo 0 3,473 06-13-2021 05:23 PM
Last Post: saivo
  DHCP not working on T26P when OpenVPN is enabled. LandonL 11 35,946 05-12-2021 10:46 AM
Last Post: 1sae
  Solved Openvpn.tar creating the right size file compsos 3 8,197 08-20-2020 06:49 AM
Last Post: complex1
  Proxy configuration Laurentt 2 9,535 01-07-2020 12:25 PM
Last Post: Laurentt
  Detailed boot process and ways to add local configuration? DanH 2 7,363 10-16-2019 04:24 PM
Last Post: justingoldberg
  Common Configuration Filenames Rus 3 11,727 06-27-2019 12:52 AM
Last Post: Evan_Yealink

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication