Took a bit of playing but I’ve gotten the GXP2170 to work with OpenVPN AND EPM.
The general procedure is this:
Configure the PBX and EPM as you would for Sangoma phones that will use OpenVPN.
You will need to log into UCP and download the OpenVPN files for each extension.
Boot the 2170 and log into it’s web ui
Network > OpenVPN Settings
OpenVPN Enable = yes
OpenVPN Server = PBX public address
OpenVPN Port = 1194
OpenVPN Transport = UDP
(upload the appropriate files that were downloaded from UCP)
OpenVPN Cipher Method = Blowfish
OpenVPN username = blank
OpenVPN password = blank
OpenVPN Comp-Izo = Yes
Additional Options = Blank
Reboot the phone.
EPM > Global Settings > Internal address = 10.8.0.1 (which should be the OpenVPN server IP)
EPM > Global Settings > External Address = PBX Public IP
EPM > Grandstream Template
Destination Address = Internal
Provision Server Protocol = HTTP
Provision Server address = interal
Configure the rest of the profile as needed, save end rebuild configs
EPM > Basefile Edit > Grandstream template > Select GPX2170
edit the following settings
Network/OpenVPN Settings OpenVPN Enable. 0 - No, 1 - Yes. Default is 1 Number: 0, 1 Mandatory
P7050 = 1
OpenVPN Server Address String
P7051 = (your PBX’s public IP)
NATTraversal. 0-No, 1-STUN, 2-keepalive, 3-UPnP, 4-Auto, 5-VPN. Default is 0.
P52 = 5
Save and rebuild config(s)
The phone should now be rebooted and you can log into the web interface again and go to:
Maintenance > upgrade and provisioning
Turn off Allow DHPC option 43 and option 66 to override server
Config
Set Config Upgrad via = http
config server path = 10.8.0.1:84
Config server username = (get this from system admin > provisioning protocols)
Config server password = (get this from system admin > provisioning protocols)
Firmware
Firmware server path = (delete anything in here)
Save and apply
Then from the very top menu in the phone web UI click:
Provision
The phone should now provision and grab all the settings from EPM.