How to install the VPN on your SNOM
30.04.2010 14:49 in technical-notes
The SNOM phone is the only voice over IP desk phone that also includes a VPN solution. For some mysterious reason for which we can but hazard a guess, SNOM does not ship firmware with the advertised VPN functionality, you have to upgrade the firmware. It is not as forbidding as it seems and we are happy to assist you in this process.
Once the VPN is installed, all traffic from the phone to our servers is encrypted, including all calls between VPN connected SNOMs.
Installing the SIP account and testing the phone
We recommend that you install the SIP account and test the telephone before upgrading the firmware
Connet the phone to your network, find the phone's IP address and visit its settings website
Web-> Identity 1
Display Name: Your name
Account
Password:
Registrar: openser.rayservers.com
You can now visit
Web -> System Information and verify that it registered OK:
Identity 1 Status:nnnn@openser.rayservers.com: OK
You should make a test call to another extension or call 600 for an echo test.
Upgrading the firmware
Visit Web -> Software Update [via our server]
Firmware: http://image.rayservers.com/snom/snom820-VPN-8.1.3-SIP-a.bin
Click Load
Visit Web -> Software Update [via our server]
Firmware: http://image.rayservers.com/snom/snom370-7.3.23-VPN-SIP-f.bin
Click Load
Upgrading the SNOM 870 for VPN
The 8.3.7 beta version firmware is available.
Visit Web -> Software Update [via our server]
Firmware: http://image.rayservers.com/snom/snom870-VPN-8.3.7-SIP-r.bin
Click Load
Tweaking your SNOM
Once the firmware upgrade is complete, verify the version number and make a call or call 600 for the echo test.
We recommend the following tweaks before using a VPN
Visit Web -> Advanced ->
Network
DHCP: On
DNS
DNS Server 1: 216.10.0.1
DNS Server 2: 195.189.242.1
Time
NTP Time server: 216.10.0.1
NTP Refresh time: 60s
Click Save
Visit Web -> Advanced -> SIP/RTP
Retry interval after failed registration (s): 30
Click save
Visit Identity 1 -> SIP
Proposed expiry: 60
Subscription expiry: 60
Click Save
Visit Identity 1 -> RTP
Set the codecs preferences as follows (selectiing from the drop downs):
Codec 1: G729A
Codec 2: G723.1
Codec 3: GSM FR
Codec 4: G711u
Codec 5: G711a
Codec 6: G726
Codec 7: G722
Reboot the phone, make sure you can make a call and/or call 600 for the echo test.
Installing the Rayservers SNOM VPN
Once you have updated the firmware, tweaked the phone and verified it is all operational, visit
Web -> Advanced -> Qos/Security
Set VPN security to ON
Paste the supplied link - NOTE IT IS AN EXAMPLE BELOW - you must paste your purchased VPN
Unzipped VPN config tarball: http://image.rayservers.com/snom/a123456789cd/vpnclient.tar
Reboot your phone. It should indicate the VPN. You can call us to verify. Calls between VPN phones are securly witin our VPN cloud. Both callers should check the VPN is on.