Phone Network33Web UI Settings->SIP->TLS SIP PortVPNYealink IP phones use OpenVPN to achieve VPN feature. To prevent disclosure of private information, tunnel endpointsmust authenticate each other before secure VPN tunnel is established. After you configure VPN feature on the IPphone, the IP phone will act as a VPN client and use the certificates to authenticate with the VPN server.For more information, refer to OpenVPN Feature on Yealink IP phones.TopicsVPN Related FilesVPN ConfigurationVPN Related FilesTo use VPN, you should collect the VPN-related files into one archive file in .tar format and then upload this tar file.The VPN-related files include certificates (ca.crt and client.crt), key (client.key) and the configuration file (vpn.cnf) ofthe VPN client.The following table lists the unified directories of the OpenVPN certificates and key in the configuration file (vpn.cnf)for Yealink IP phones:VPN Files Description Unified Directoriesca.crt CA certificate /config/openvpn/keys/ca.crtclient.crt Client certificate /config/openvpn/keys/client.crtclient.key Private key of the client /config/openvpn/keys/client.keyVPN ConfigurationThe following table lists the parameters you can use to configure VPN.Parameter static.network.vpn_enable[1] .cfgDescription It enables or disables the OpenVPN feature on the IP phone.Permitted Values0-Disabled1-EnabledDefault 0Web UI Network->Advanced->VPN->ActiveParameter static.openvpn.url .cfgDescriptionIt configures the access URL of the *.tar file for OpenVPN.Example:static.openvpn.url = http://192.168.10.25/OpenVPN.tarPermitted Values URL within 511 charactersDefault BlankWeb UI Network->Advanced->VPN->Upload VPN Config