Configuration Overview Page 22 FortiFone User Guide
FON-C71s use OpenVPN to achieve VPN feature. To prevent disclosure of private information,
tunnel endpoints must authenticate each other before secure VPN tunnel is established. After
VPN feature is configured properly on the FON-C71, the FON-C71 acts as a VPN client and
uses the certificates to authenticate the VPN server.
To use VPN, the compressed package of VPN-related files should be uploaded to the FON-C71
in advance. The file format of the compressed package must be *.tar. The related VPN files are:
certificates (ca.crt and client.crt), key (client.key) and the configuration file (vpn.cnf) of the VPN
client.
The *.tar file must be uploaded via the web interface first. To upload the *.tar file:
1. Enter the IP address of the FON-C71 in a web browser.
2. Log into the web interface (Username: admin, Password 23646).
3. Click on Network > Advanced.
4. Under VPN, click on Browse to locate your *.tar file.
5. Once the *.tar file has been selected, click on Upload.
6. Once the *.tar file has been uploaded, select the desired value from the Active pull-down list.
7. Click on Confirm at the bottom.
8. Click OK to reboot the phone.
To configure the VPN via the phone after uploading the *.tar file:
1. Tap Menu > Advanced (default password: 23646) > Network > VPN.
2. Tap or to select the desired value from the VPN Active field.
3. Tap the Save softkey to accept the changes.
4. Tap OK to reboot the phone.
LLDP
LLDP (Linker Layer Discovery Protocol) is a vendor-neutral Link Layer protocol, which allows
FON-C71 to receive and/or transmit device-related information from/to directly connected
devices on the network that are also using the protocol, and store the information about other
devices.
When the LLDP feature is enabled on the FON-C71, the FON-C71 periodically advertises their
own information to the directly connected LLDP-enabled switch. The FON-C71 can also receive
LLDP packets from the connected switch. When the application type is voice, FON-C71
decides whether to update the VLAN configurations obtained from the LLDP packets. When the
VLAN configurations on FON-C71 are different from the ones sent by the switch, the FON-C71
performs an update and reboots. This allows the FON-C71 to be plugged into any switch,
obtain their VLAN IDs, and then start communications with the call control.
To configure the LLDP feature:
1. Tap Menu > Advanced (default password: 23646) > Network > LLDP > LLDP Status.
2. Tap or to select the desired value from the LLDP Status field.
3. Enter the priority value (1-3600s) in the Packet Interval field.
4. Tap the Save softkey to accept the change. A dialog box pops up to prompt that the
settings will take effect after a reboot.
5. Tap OK to reboot the phone.