Scribd
Upload
147 views4 pages

Using OpenVPN For Yealink Clients Tutorial

This document provides instructions for configuring the Easy VPN addon in Elastix to allow connections from Yealink phones using OpenVPN. It notes that by default, the addon uses SHA256 encryption, which Yealink phones do not support, so the openssl.cnf file must be edited to change the default encryption to SHA1. Additional steps include downloading the Easy VPN addon, editing configuration files, generating certificates, uploading the certificates to the Yealink phone, and configuring the phone for an OpenVPN connection. The document aims to help allow Yealink phone connectivity to an Elastix server using OpenVPN.

Uploaded by

Jhoan Sebastian Lopez Noguera
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
147 views4 pages

Using OpenVPN For Yealink Clients Tutorial

This document provides instructions for configuring the Easy VPN addon in Elastix to allow connections from Yealink phones using OpenVPN. It notes that by default, the addon uses SHA256 encryption, which Yealink phones do not support, so the openssl.cnf file must be edited to change the default encryption to SHA1. Additional steps include downloading the Easy VPN addon, editing configuration files, generating certificates, uploading the certificates to the Yealink phone, and configuring the phone for an OpenVPN connection. The document aims to help allow Yealink phone connectivity to an Elastix server using OpenVPN.

Uploaded by

Jhoan Sebastian Lopez Noguera
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

Using OpenVPN for Yealink Clients

Author: Daniel Guevara

Date: 28/02/2015

You may have all seen the Easy VPN addon from Elastix. It’s fairly easy to use and saves you the
trouble of configuring through cli into just a few seconds via Web.

It has worked fairly well, but recently I tried using Yealink phones to remotely connect to an elastix
box with no success. I went across internet and found an article where Yealink says it only uses the
md5 or sha1 ciphers in openssl. I checked and eventually the Easy VPN addon by default was using
sha256 in its certificates. This guide will help you configure the addon to use Yealink phones
properly and connect to your Elastix Server.

Note: In this scenario I have placed my Server connected directly to the internet with a public IP.

Download the Easy VPN addon from the Elastix marketplace.

Under cli, find the /usr/share/easy-rsa/2.0 directory and look for the openssl.cnf files.

Using the editor, find the default_md and change it to sha1.

This change will allow you to use YEALINK phones. You may choose to use md5 also. The following
note comes from Yealink:
For the rest of connections in Windows or Linux endpoints, sha256 is fine.

Note: This will allow connections only to the Elastix Server. If you need Access to the LAN network,
you will need to add the following line into server.conf:

push “route 192.168.0.0 255.255.0.0”


Remember that the clients on the LAN side also need to know the route to reach the VPN tunnel.

On the Easy VPN addon, begin by entering the information asked.

Enter the server details such as public IP, listening port, and the Server Network.

Complete all the steps to create the certificates, as described in this tutorial.

http://addons.elastix.org/Manuals/es/EasyVPN/EasyVPN.pdf

Create the certificates and download them:

Go to your YEALINK phone and upload the .tar that you created on EasyVPN.

You should now configure your phone with the regular settings of OpenVPN to register it as if in a
LAN.
If you have any comments, or want to add information to further enhance this article, please don’t
hesitate to write to my contact details below.

NOTE

This article intends to help configure OpenVPN for yealink phones. It doent’s teach you how to use
the addon. For further information use the following link.

http://addons.elastix.org/Manuals/es/EasyVPN/EasyVPN.pdf

Daniel Guevara

Elastix Certified Engineer-Elastix Security Master

Quito – Ecuador
e-mail: [email protected]
Gmail: [email protected]
www.grupomaxi.com.ec

You might also like