 |
|
|
|
The Aastra wireless SIP phone 312 supports the following security options:
This section describes how to configure WPA2-PSK authentication.
» Return to top
4.1 Configure encryption on the WESM
To configure the Wireless Edge Services Module for encryption:
- On the Wireless Edge Services Module, go to Network Setup > WLAN Setup and create a new WLAN called voice.
- Configure this WLAN as follows:
- SSID: voice
- VLAN ID: The VLAN to which you want the phone to be assigned. You must use the switch menu to tag this phone on the WESM uplink. (For details, refer to application note AN-M1, Extend your wired network to wireless, or to the Wireless Services Module Administrator Guide).
- Authentication: No Authentication.
- Encryption: WPA/WPA2-TKIP and WPA2-AES.
- Click on the Config button. You see a window for configuring the pre-shared key. Set the parameters as follows:
- ASCII passphrase: procurve
- Check the boxes to enable all three Fast Roaming options: PMK Caching, Opportunistic Key Caching and Pre-Authentication.
- Click OK to return to the main window.
- On the main window Advanced section, check the Closed System box to enable it.
- Finally, to enable the new WLAN, click the Enable button at the bottom of the WLAN list screen.
» Return to top
4.2 Configure the Aastra wireless SIP phone 312 for encryption
To configure the Aastra Phone 312:
- From the main screen of the phone choose Menu, then use the arrows to select System.
- In the System menu choose Network.
- From the Network menu choose Profiles. Then choose Options | New to select a new profile.
- Configure the new profile as follows:
- Profile Name: Aastra VOIP
- Region: Use the arrows to select your region (e.g., Europe)
- SSID: voice
- Security: Use the arrows to select WPA2-PSK
- WPA key: procurve
- IP address: Static, or use DHCP
- If prompted for a PIN code, enter 22222 (the default PIN).
- If you use DHCP assignment, configure the following options on the DHCP server:
Note: Illustration from Aastra Phone 312 User Guide.
- Once the profile is configured click OK, then click Back as many times as needed to go back to the Main screen. If the profile is correctly configured, in the phone display’s upper left corner you will see a small icon showing the signal strength.
- To test for connectivity, ping from the phone to an IP address on the network. Go to Menu | System | Network | Tools | Ping.
- Enter the IP address you want to ping and click OK. You should obtain a window showing the different ping attempts, the ping statistics ( tx, rx, % loss), and the average response time.
- On the WESM, you can now see the phone in Device Association > Wireless stations. You should see the MAC address, IP address, WLAN, VLAN, and Radio Index. For example:
- On the Aastra Phone 312 you can view similar info in System | Network | Info.
» Return to top
|
|
|
|
|
|
Layer 2 roaming occurs when a phone that was associated to a radio port moves to another radio port adopted by the same WESM. The phone remains in the same VLAN.
Layer 3 roaming occurs when a phone moves between two radio ports associated to different WESM modules. The voice WLAN is associated to different VLANs ( and subnets) on the two modules. In this case, the phone keeps its original IP address but the voice flow is tunneled by the current module to the home module.
For more information on L2/L3 roaming configurations, please refer to application note AN-M3, How to configure L2 and L3 wireless roaming.
» Return to top
5.1 About fast roaming
To enable a phone to quickly make the transition between two radio ports and reduce the roaming time, you normally
configure the following options: PMK caching, opportunistic key caching, and pre-authentication. However, these
options apply to 802.1X authentication only, which is not supported by the Aastra wireless phone. (For this reason, we
configured WPA2 with a pre-shared key instead.)
» Return to top
5.2 Configure self-healing
The self-healing feature of the Wireless Edge Services Module enables associating neighbors to each radio port. In
case of failure of a radio port, the neighbors will increase their coverage. You can also enable interference avoidance.
To configure self-healing on the WESM:
- From Special Features > Self Healing, click the Enable Neighbor Recovery check box.
- You can also click the Enable Interference Avoidance check box.
- From the Neighbor details tab click Detect Neighbors. You see the Neighbor Details window.
- In the Neighbor Details window, select a radio and click Edit. You can edit a radio to check that other radios
with same 802.11 mode (a or b/g) have been listed as neighbors.
» Return to top
5.3 Test the roaming time
You can determine the roaming time by first using the WESM to determine the radio port to which the phone is associated. To test roaming time:
To define a WLAN security configuration for a radio on a managed AP:
- From Device Association > Wireless Stations, note the radio’s Station Index.
- Go to Device Association > Radio Adoption Statistics and determine the MAC address of the corresponding radio port.
- To determine the switch port associated with this MAC address, use ProCurve Manager’s find node tool.
- Use the command show lldp info remote all on the switch if the radio ports are connected at layer 2.
- Or use show arp if the radio ports have IP addresses.
- From the Aastra phone Ping tool, launch a ping to the IP address of the Aastra Call Controller, or else to the network default gateway if no call controller is present. The ping launched from the Aastra phone Ping tool is a continuous ping.
- From the switch CLI or Web agent disable the port of the RP to which the phone is associated. The phone should lose one or two pings, then subsequent pings should be successful again.
If you have an Aastra Call Controller (Aastra 5000 or Aastra 800, for example) up and running on the network,
you can initiate a phone call to another phone on the network and then disable the radio port. The
communication link should remain on, and the voice should be lost for less than one second.
» Return to top
|
|
|
|
|
|
This section details how to configure WMM (802.11e) and the Unscheduled Automatic Power Save Delivery (uAPSD)
features.
6.1 Configure WMM on the WESM
To configure WMM on the Wireless Edge Services Module:
- Edit the voice WLAN.
- In Advanced Parameters, set the Access Category to Automatic WMM.
- In Network Setup > WLAN Setup > Edit screen, go to the WMM tab and verify that the voice VLAN is configured for WMM with four queues: Voice, Video, Background and Best Effort.
- If desired, you can modify the parameters of these different classes of traffic:
- AIFSN
- Transmit Ops
- CW Minimum
- CW Maximum
- Use DSCP or 802.1p priority (DSCP by default)
» Return to top
6.2 Configure uAPSD on the Aastra phone
To configure the power save mode on the Aastra Phone 312:
- Go to Menu | System | Network | Profiles.
- Edit the profile you created.
- Specify the power save mode.
This setting lets you specify which WLAN power save mode will be used during all voice connections.
» Return to top
6.3 Manually set the power save mode
In most cases the Auto selection will be the best setting for the phone’s power save mode. However, not every AP
supports all power save modes. This means that in some configurations, the Aastra Phone 312 will not be able to
reliably detect the best power save mode to be used. In these cases you may need to manually specify another mode. To manually configure the phone’s power save mode, use the left softkey. You can select between:
- Auto: In this mode, the device attempts to use uAPSD if the AP signals that it will support this. If the AP does
not support uAPSD, the Aastra Phone 312 will use asynchronous PS-Poll. Support for uAPSD is supported
can be determined in the Site survey mode. If serious interruptions in the voice connection occur quite
frequently, use another power save mode, or else no power save mode at all.
- uAPSD: Unscheduled Automatic Power Save Delivery is defined in the 802.11e standard. This mode
combines the longest battery life with highest sound quality. If you select this mode in the WLAN profile but it
is not supported by the AP, the Aastra Phone 312 will not use a power save mode.
- Async. PS-Poll: This mode uses the PS-Poll packages defined in 802.11 in order to request voice packages
from the AP. Unlike the standard, however, in this mode PS-Poll packages are not only used after the
Beacons but asynchronously to them. This allows nearly achieving the battery life of uAPSD with identical
sound quality. Not all APs support this mode. If serious interruptions in the voice connection occur quite
frequently, you should use another power save mode, or else no power save mode at all.
- 802.11 PS-Poll: This mechanism has been defined in the original 802.11 standard. A disadvantage is that a
large part of the package is delayed by the duration of the beacon interval, impairing sound quality.
Nevertheless, this mode may be useful if the AP supports no other power save mode, but you still want long
talk times.
- None (no power save mode): No power save mode is used. This reduces battery life for voice connections
by at least half. This mode can be used if the AP is not compatible with any power save mode. In contrast to
the other settings, this setting also deactivates the search for access points in the background, since this
search also depends on the power save mode. Thus, with this mode handover behavior deteriorates.
» Return to top
6.4 Determine uAPSD support
To determine whether a WLAN supports uAPSD:
- On the Aastra Phone 312, use the Site survey tool from System | Network | Tools. This gives you a view of the
different available SSIDs.
For example, if you choose the voice WLAN that was previously configured on the WESM zl, it displays:
This display indicates that for the voice WLAN, encryption is set to pre-shared key (PSK) with TKIP and AES protocols, and WME and APSD are supported.
» Return to top
|
|
|
|
|
|
7.1 Firmware versions used
ProCurve firmware versions used for this application note:
- K.13.09 for switch 5406zl
- WT.01.15 for WESM zl
Aastra Wireless Phone 312 firmware:
» Return to top
7.2 Upgrade phone’s firmware
To upgrade the Aastra Phone 312 firmware, you copy the .dnld firmware file from a TFTP server reachable from the WLAN to which the phone is connected. To upgrade the firmware:
- Connect the phone to a WLAN from which the TFTP server is reachable.
- On the phone go to: Menu | System | Software | Update
- In Settings, enter the protocol (ftp, http or tftp), the server IP address, and the file name.
» Return to top
|
|
|
