Yealink SIP-T38G Administrator's Guide

Administrator’s Guide for SIP-T3xG IP Phones
164
There are two types of VPN: remote-access VPN (connecting an individual device to a
network) and site-to-site VPN (connecting two networks together). Remote-access VPNs
allow employees to access their company's intranet from home or outside the office,
and site-to-site VPNs allow employees in geographically separated offices to share one
cohesive virtual network. VPN systems can be also classified by the protocols used to
tunnel the traffic. VPNs provide security through tunneling protocols: IPSec, SSL, L2TP
and PPTP.
The IP phones support SSL VPN. SSL VPN provides remote access VPN capabilities
through SSL. OpenVPN is a full featured SSL VPN software solution that creates secure
connections in remote access facilities. It is designed to work with the TUN/TAP virtual
networking interface. TUN and TAP are virtual network kernel devices. TAP simulates a
link layer device and provides a virtual point-to-point connection. TUN simulates a
network layer device and provides a virtual network segment. The IP phones support
using OpenVPN to achieve the VPN feature. To prevent disclosure of private information,
tunnel endpoints must authenticate each other before secure VPN tunnel is established.
After the VPN feature is configured properly on the IP phone, the IP phone acts as a VPN
client and uses the certificates to authenticate the VPN server.
To use the VPN feature on the IP phone, the compressed package of VPN-related files
should be uploaded to the IP phone in advance. The file format of the compressed
package must be .tar. The VPN-related files are: certificates (ca.crt, client.crt and
client.key) and configuration file (vpn.cnf) of VPN client. Ask your network administrator
for the tar package.
Procedure
VPN can be configured using the configuration files or locally.
Configuration File
<y0000000000xx>.cfg
Configure the OpenVPN feature
and upload the tar package to
the IP phone.
For more information, refer to
VPN on page 295.
Local
Web User Interface
Configure the OpenVPN feature
and upload the tar package to
the IP phone.
Navigate to:
http://<phoneIPAddress>/cgi-bi
n/cgiServer.exx?page=Networ
k-Adv.htm
Phone User Interface
Configure the OpenVPN feature
under Advanced Settings.
To upload the tar package to the IP phone and configure VPN via web user interface:
1. Click on Network->Advanced.

Yealink SIP-T38G Specifications

General

Expansion module support	Yes
Ethernet LAN (RJ-45) ports	2
Keypad number of keys	48
Touchscreen	-
Display resolution	480 x 272 pixels
Display number of colors	16.78 million colors
Lines quantity	- lines
Phonebook capacity	1000 entries
Number of VoIP accounts	6
Voice codecs	G.711, G.722, G.723.1, G.726
Bluetooth	No
Security algorithms	802.1x RADIUS, HTTPS, SSL/TLS
AC adapter input voltage	100 - 240 V
AC adapter output voltage	5 V
Power consumption (typical)	4.6 W
Operating relative humidity (H-H)	10 - 95 %
Handset type	Wired handset
Product type	IP Phone
Product color	Black
Compliance industry standards	IEEE 802.3af
Number of handles included	1 pc(s)

Weight and Dimensions

Depth	204 mm
Width	273 mm
Height	42 mm
Weight	1050 g