1. Specifying a user's VPN credentials

The same VPN username and password are used whether the user uses the ViewPoint Mobile Softphone or a supported VPN phone, or both.

There are two ways to configure the user’s VPN credentials.

Important!  Be sure that you understand the security issues involved before you choose a method.

Via User/Group Management. This method is easier for the Wave administrator, because the user name and password can be supplied at the same time that VPN is enabled for the user.

However, this method is less secure because the credentials will be sent to the phone through the TFTP server which is inherently not secure. If you have any security concerns, configure the user’s VPN credentials using the phone.

If you enter the user’s VPN credentials via User/Group management, you do not need to perform any further configuration on the user’s phone.

To configure a user's VPN credentials via User/Group Management, see The User \ VPN tab.

Via the phone itself. This method requires some extra effort on the part of the end user, but is more secure.

For detailed steps, see “Configuring VPN on a user’s IP phone” in Chapter 3 in the Wave OpenVPN Server Guide.

If you configure the user’s VPN credentials on the phone, you still need to enable OpenVPN Server for the user via the The User \ VPN tab.

OpenVPN Server: Off-Wave configuration mode vs. Custom Deployment

OpenVPN Server configuration tasks

About VPN phone users

Changing an existing user to use VPN

Off-Wave OpenVPN Server advanced settings

Updating the VPN server software