Alcatel Unleashed

its a generted id, it has nothing to do with any hardware.

login as root , then netadmin -m and then security

Nope.
Substitution on the on the ProACD set works, but after dialing the acd prefix -> end
Substitution on the Agent doesn´t work at all

In my office we had installed Evolution

I think he has an omniOCX Office evolution... So wrong pbx...

am i right?

no not possible

now i would do a tcpdump on oxe to see if the tftp pakets reaches the OXE from VPN or not.

And have a look at the live log of the firewall if you see packets in both directions...

i would make a wireshark trace with working client and with a vpn client and then do a compare

can you ping the pbx from a remote workers PC and the other way round? what does a traceroute say from both sides?

damn, you are right... i checked on an 4068 with R100 and its there...

And? Do not use 10 year old phones? The newer generations have this feature...