I am hoping someone has some experience with this issue. I am trying to connect a yealink phone to a PFsense gateway with a pbx behind it. I keep getting the following errors when trying to connect:
Authenticate/Decrypt packet error: packet HMAC authentication failed
TLS Error: incoming packet authentication failed from [AF_INET]67.172.216.229:50103
MY SCENARIO:
- FreePBX 17 behind a PFsense Gateway
- PFsense Gateway already has a working OpenVPN server configured with Windows clients connecting to it successfully.
- Yealink SIP-T46U phone that I want to connect to the PFsense OpenVPN server so it can register with the pbx behind it.
WHAT I’VE DONE SO FAR:
- created users “ext4006” on PFsense with a certificate
- used the client export utility to export he VPN client config
- Extracted the Certificates and named them and stored them in the /keys folder.
- Edited the vpn configuration file which is shown below
- Created the tar file and successfully uploaded it to the phone.
MY VPN.CNF FILE:
dev tun
persist-tun
comp-lzo no
persist-key
data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC
data-ciphers-fallback AES-256-CBC
auth SHA256
tls-client
client
resolv-retry infinite
remote 24.149.91.10 1194 udp4
nobind
verify-x509-name “laketitlegateway.datacareadvanced.net” name
auth-user-pass /config/openvpn/pwd
tls-auth /config/openvpn/keys/ta.key 1
remote-cert-tls server
explicit-exit-notify
ca /config/openvpn/keys/ca.crt
cert /config/openvpn/keys/client.crt
key /config/openvpn/keys/client.key