Android Client Setup

Disclaimer

The System Admin VPN Server is intended and optimized to allow connections from hard phones with built in OpenVPN clients, and only those phones supported and configured with Endpoint Manager. While it is possible to connect with Android, this is an unsupported configuration.

Client Installation

From the Android Play Store, download and install the "OpenVPN Connect" client published by OpenVPN. There are also a number of other OpenVPN Apps by other publishers beyond the scope of this page.

Client Configuration

1. Log into the FreePBX User Control Panel (UCP), click "VPN Access" from the left menu, and download the "VPN Client Configuration" for the logged in user. If these options are not available in UCP for the logged in user, either the System Admin VPN server setup is not complete or the VPN user permissions are not yet in place, review the page here. 

2. Decompress the downloaded archive file into temporary folder.

3. Locate the file named (where x is an integer):

   sysadmin_clientx.conf

   and change the file extension to ovpn.

4. Copy the contents of the decompressed archive and renamed .ovpn file to the Android device's Internal Storage.

5. In the OpenVPN client on the Android, select import from the menu at the upper right. Browse to the previously copied files to the internal storage, select the .ovpn file and select import. The same menu also has the option to generate a shortcut on the Android desktop to connect.

Client Connection

Select Connect/Disconnect from the OpenVPN Connect client and watch for the status "Connected". The device IP now shows up in System Admin, VPN Server, and on the Android device you can now browse to the VPN IP of the PBX. Android SIP Clients will also be able to register to the PBX VPN IP.

Troubleshooting

In testing, we were seeing all IP traffic from the Android device going over the tunnel, not just PBX traffic. If Redirect was disabled on the PBX, then this effectively blocked all non PBX traffic from and to the device.