Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    Yealink T46u to pfSense OpenVPN

    Scheduled Pinned Locked Moved OpenVPN
    1 Posts 1 Posters 209 Views 1 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D Offline
      datacare
      last edited by datacare

      I am hoping someone has some experience with this issue. I am trying to connect a yealink phone to a pfSense gateway with a pbx behind it. I keep getting the following errors when trying to connect:

      Authenticate/Decrypt packet error: packet HMAC authentication failed

      TLS Error: incoming packet authentication failed from [AF_INET]67.172.216.229:50103

      MY SCENARIO:

      FreePBX 17 behind a pfSense Gateway
      pfSense Gateway already has a working OpenVPN server configured with Windows clients connecting to it successfully.
      Yealink SIP-T46U phone that I want to connect to the PFsense OpenVPN server so it can register with the pbx behind it.
      WHAT I’VE DONE SO FAR:

      created users “ext4006” on pfSense with a certificate
      used the client export utility to export he VPN client config
      Extracted the Certificates and named them and stored them in the /keys folder.
      Edited the vpn configuration file which is shown below
      Created the tar file and successfully uploaded it to the phone.
      MY VPN.CNF FILE:

      dev tun
      persist-tun
      comp-lzo no
      persist-key
      data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC
      data-ciphers-fallback AES-256-CBC
      auth SHA256
      tls-client
      client
      resolv-retry infinite
      remote 24.149.91.10 1194 udp4
      nobind
      verify-x509-name “laketitlegateway.datacareadvanced.net” name
      auth-user-pass /config/openvpn/pwd
      tls-auth /config/openvpn/keys/ta.key 1
      remote-cert-tls server
      explicit-exit-notify
      ca /config/openvpn/keys/ca.crt
      cert /config/openvpn/keys/client.crt
      key /config/openvpn/keys/client.key

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.
      Privacy Policy · Cookie Policy