Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

You may also wish to visit the A-Series IP Phones for Asterisk Overview for additional information and links to related articles.

...

  • In other to enable VPN service, you need to have a OpenVPN server  and Client OpenVPN configuration file (client.ovpn), a Root (CA) certificate (ca.crt) ,client KEY (client.key), and client CRT (client.crt) files. 

  • Files: client.ovpn , ca.crt , client.key and client.crt will be uploaded to the phone.

  • If you are using setting up the phones via configuration files, please note that the files that should be uploaded to the phone must be available outside of the VPN

  • Digium A-Phone supports HTTP authentication basic and digest as well as connecting without authentication.

  • Configuration files that are downloaded by the phone will be stored in the phone and will be used for subsequent reboots. 

  • OpenVPN server configuration must not require manual password entry in order to connect.  The phone does not provide the user a means of inputting user and/or password credentials as a part of VPN connection.

  • Only Certificates within CRT format are supported.

Web interface configuration

  1. Log into the web interface by surfing to the IP of the phone on your network. The default username is admin, and the default password is 789.

  2. Click on Network and then click on the VPN tab.

...

  1. Apply Changes and exit the GUI.

Using configuration files 

Phone configuration file example:

A2x VPN Configuration Example

<<VOIP CONFIG FILE>>Version:2.0000000000
 
<VPN CONFIG MODULE>
VPN mode           :2
Enable VPN Tunnel  :1
 
<AUTOUPDATE CONFIG MODULE>
Auto etc Url       :https://user:password@server.example.com/openvpn/etc.tar.gz
<<END OF FILE>>

 

...

  • ca.crt

  • client.crt

  • client.key

  • client.ovpn

Creating OpenVPN configuration files 

OpenVPN is very extensive in terms of the configuration options and therefore is almost impossible for us to test each possible scenario as how you should setup this file is depended on your OpenVPN Server configuration. If you need assistance adding additional parameter please contact your IT Network team as they should provide more information about what parameters are needed in your VPN implementation. if you are implementing a new OpenVPN, you can use the example below, we have confirmed that the following configuration works with Digium A-Phones

...

Code Block
tar czvf etc.tar.gz ca.crt client.crt client.key client.ovpn


Testing the Configuration

When the Enable VPN Tunnel element is enabled on the phone, the phone will display a lock in the status bar, e.g.:

...