TRY THIS VPN Best Practices

[Hometech]

Hi All, was going to get a few new phones looking at the Yea Link T48G & T46G I was wanting to use these as remote off site extensions utilizing VPN back to the PBX.
My question: should I set up the VPN server on the PBXiAF box or on the Hardware firewall router? Just was wondering what experience the community has had with doing it either way?

Thank You

 

[islandtech]

I prefer the vpn server on the router/firewall

 

[Adam Kayden]

What about home that does not have a firewall or VPN capabilities. Is it easy to configure OpenVPN in PIAF and Yealink ip phones?

 

[wardmundy]

Easy OpenVPN tutorial here. Or use NeoRouter which is much simpler to install and setup.

 

[howardsl2]

Based on other people's work, I created a fully automated ("one-click") IPsec/L2TP VPN setup script for Ubuntu with Libreswan. You can find it here:

http://www.webhostingtalk.com/showthread.php?t=1349950

Edit: Just realized that PIAF requires CentOS or Scientific Linux, but you may still get some hints from my script on how to install and configure the VPN.

 

[vic peters]

I realize this is a completely different endpoint then you mentioned in your original post, but if you haven’t purchased the phones yet, I know that the GrandStream GXP 2200 android phone had VPN capabilities built right into the phone. I know there was issues with the earlier firmware releases that may or may not be resolved. Last I read there was an issue with the earlier firmware not retaining the VPN password. If that has been solved in the more recent firmware releases, the phone supported PPTP, L2TP, L2TP/IPsec with a shared password and certificate-based IPsec. The GrandStream forum did contain some threads that might be worth reading if the android-based 2200 is of any interest.