User Guide User Manual

Configuration Notes

Configuring VPN with PPTP

Almost all smartphones support a VPN connection via the PPTP protocol. You can also

access the Aastra CTI Touch web application via such a VPN connection. The following

instructions assumes that the company LAN or the communications system is con-

nected to the internet via a DSL router.

1. If your internet connection is not configured with a fixed public IP address, you

have to set up an account on the internet website of a DynDNS service. This kind

of service links the changing public IP address of your DSL router with a DNS

name. Open the Network: DynDNS page in the Configurator and enter the login

information for the DynDNS service. Alternatively, you can – if possible – configure

the DynDNS service on the DSL router as well.

2. Configure port forwarding on the DSL router. You have to divert the TCP port 1723

to the IP address of the communications system. For some DSL routers you have to

also divert the GRE protocol to the IP address of the communications system;

other DSL routers execute this automatically.

3. Set up a new user group, e.g. “Standard RAS”, on the User Manager: User Groups

page. Activate the RAS option under the Network header. Assign at least one user

to the new user group under User Manager: User. Please ensure that all users

with the RAS authorisation use a secure password.

4. Activate the Status option on the Network: RAS: PPTP. Enter a range of unused IP

addresses from your LAN into the Address range input fields. The following

example is sufficient for 10 RAS connections:

5. Go to the Network: Firewall page. Deactivate the Webserver option to be able to

access the Aastra CTI Touch web application via RAS/VPN.

6. Configure a new VPN connection via PPTP on a smartphone. This is located under

Settings: Wireless and network: VPN settings on the Android telephone. This is

located under Settings: General: Network: VPN on the iPhone. When configuring

the VPN access, enter the DynDNS name you set up in the first step. Activate the

VPN connection by entering the user name with RAS authorisation along with the

associated password.

IP addresses in... From IP To IP

LAN 192.168.99.0 192.168.99.255

RAS/PPTP 192.168.99.240 192.168.99.249