Configuring Network
63
outside the office, and site-to-site VPN allows employees in geographically separated
offices to share one cohesive virtual network. VPN can also be classified by the
protocols used to tunnel the traffic. It provides security through tunneling protocols:
IPSec, SSL, L2TP and PPTP.
The system supports SSL VPN, which provides remote-access VPN capabilities through
SSL. OpenVPN is a full featured SSL VPN software solution that creates secure
connections in remote access facilities and is designed work with the
TUN/TAP
virtual
networking interface. TUN and TAP are virtual network kernel devices. TAP simulates a
link layer device and provides a virtual point-to-point connection, while TUN simulates a
network layer device and provides a virtual network segment. The system uses
OpenVPN to achieve the VPN feature. To prevent disclosure of private information,
tunnel endpoints must authenticate each other before secure VPN tunnel is established.
After the VPN feature is configured properly on the system, the system acts as a VPN
client and uses the certificates to authenticate the VPN server.
To use VPN, the compressed package of VPN-related files should be uploaded to the
system in advance. The file format of the compressed package must be *.tar. The
VPN-related files are: certificates (ca.crt and client.crt), key (client.key) and the
configuration file (vpn.cnf) of the VPN client. For more information about how to
package a TAR file, refer to
OpenVPN Feature on Yealink IP Phones
, available online:
http://www.yealink.com/DocumentDownload.aspx?CateId=142&flag=142.
VPN feature parameters on the system are described below.
Enables or disables VPN feature
on the system.
Default: Disabled
Note: You need to upload the
compressed package of
VPN-related files to the system
first before enabling the VPN
feature. If you change this
parameter, the system will reboot
to implement the changes.
To configure VPN via the web user interface:
1. Click on Network->Advanced.
2. In the VPN block, click Browse to locate the VPN file (*.tar) from your local system.
3. Click Upload to upload the file to the system.