Remote Extension via VPN - help

Hi everyone,

I’ve tried looking everywhere online with no success. FreePBX newbie looking for help with connecting to my PBX via VPN.

My setup-
FreePBX connected to a Unify Dream Machine Pro router. The WAN input is then connected to my ISPs router (they dont allow bridging etc). I think is called double NAT. I have managed to setup several extension internally with no problems and it runs great with a SIP Trunk, voicemail, IVR and BLF etc.
Currently hosting FreePBX on an old Dell Optiplex and using Yealink T46S / W60Bs for extensions.

I’m trying to add another T46S to another house and connect to my PBX via the VPN option. I’ve purchased SysAdmin Pro on the PBX for the VPN element.

For the life of me, I can’t seem to get the phone to connect to the PBX via the VPN.

I have tried port forwarding on my ISP/UDM with no joy.
I’ve created a DDNS using NoIP and this doesn’t seem to help for the VPN config file.
I’ve tried both 66.86 and 66.84 firmware and nothing seems to work.

Do I need to connect inside the network prior to going externally with the end point?
Will End Point Manager resolve all of this for me instead?

Any guidance would be much appreciated!
Please let me know if you need more info

If you’re talking about using the VPN built into the PBX what I remember is first go into SysAdmin and enable the server, then go to User Management and in the user there is a VPN tab. There you can auto create and link a new VPN user. Then in the EPM go to the phone and edit it, near the bottom there is a drop down for VPN Client. Rebuild the config, load it onto the phone, make sure the VPN service is enabled in the firewall, and hopefully it works.

I was hoping to avoid EPM as it’s $100-$300 and seems pricey for one end point.

Do you know a way using the VPN and I can load the files myself onto the phone?

Try

scripts for both openvpn and the better wireguard

1 Like

In the yealink administrator guide there it mentions 2 certificates and a key that can be uploaded. Never tried doing it manually, will look on the pbx and see if I can find what it’s creating for files.