An HP ProCurve Networking Application Note
Interoperability between ProCurve WESM zl and HP iPAQ Voice Messenger smartphone

Contents

1. Introduction...... 3 2. Prerequisites...... 3 3. Network architecture..... 3 4. Secure wireless encryption..... 3 4.1 Configure the ProCurve WESM.... 4 4.2 Configure the HP iPAQ Voice Messenger.... 6 5. Fast roaming..... 8 5.1 Fast roaming options..... 9 5.2 Configure self-healing..... 9 5.3 Test roaming time..... 10
6. Firmware versions and phone upgrades.... 10 6.1 ProCurve switch and WESM firmware.... 10 6.2 HP iPAQ firmware..... 10 6.3 Upgrading firmware in the HP iPAQ Voice Messenger.... 10 7. Reference documents..... 11

HP ProCurve Networking

1. Introduction
This document describes the interoperability of a ProCurve wireless services solution coupled with the HP iPAQ Voice Messenger to provide a secure Voice over WLAN (VoWLAN) solution with the following services: Secure wireless encryption with 802.1X Fast roaming

2. Prerequisites

You will need the following equipment: ProCurve Switch 5406zl or 8212zl with the latest firmware version Wireless Edge Services Module zl (WESM zl) plugged into a slot of the 5406zl Two ProCurve radio ports (RP210 or RP230)
HP iPAQ Voice Messenger smartphone The wireless services module and radio ports are installed in the 5406zl or 8212zl. The radio ports have been discovered. For more information on this configuration please refer to ProCurve Application Note AN-M1, How to extend your wired network to wireless.

3. Network architecture

Figure 1 details the configuration referenced in this application note.
Figure 1. Configuration for ProCurve-HP iPAQ Voice Messenger interoperability
4. Secure wireless encryption
The HP iPAQ 514 Voice Messenger smartphone supports the following options: For authentication, the HP iPAQ 514 supports open authentication, shared, WPA, WPA-PSK, WPA2, and WPA2-PSK. For encryption, the device supports no encryption (disabled), as well as WEP, TKIP, and AES. For the 802.1X EAP type, the device supports PEAP, as well as Smart Card or Certificate.
This application note describes the configuration of WPA2 802.1X authentication with AES encryption and PEAP.
4.1 Configure the ProCurve WESM
To configure the ProCurve WESM for secure wireless encryption via WPA2-PSK: 1. On the wireless edge services module, go to Network Setup > WLAN Setup and create a new WLAN called voice2. 2. Configure this WLAN as follows: o o SSID: voice2 VLAN ID: The VLAN you want to be assigned to the phone. This VLAN must be tagged on the WESM uplink from the switch menu. (For details, refer to Application Note AN-M1, or to the Wireless Services Module Administrator Guide). Authentication: 802.1X EAP. Encryption: Enable both WPA/WPA2 TKIP and WPA2 AES.
3. In the main window Advanced Options panel, click to enable Use Voice Prioritization and select Voice as the Access Category. 4. Click the Config button, and in the WPA/WPA2 window enable all three Fast Roaming options (PMK Caching, Opportunistic Key Caching, Pre-Authentication). Then click OK to return to the main Edit window. 5. In the main Edit window, click the Radius Config button at the bottom to display the Radius Configuration window.
6. In the Radius Configuration window supply the RADIUS Server Address and the RADIUS Shared Secret for 802.1X authentication, then click OK:
7. Finally, to enable the new WLAN, highlight the voice2 WLAN, then click the Enable button at the bottom of the WLAN list window:
4.2 Configure the HP iPAQ Voice Messenger
To configure the HP iPAQ 514 Voice Messenger smartphone: 1. From the main screen of the phone choose Start > Settings. You see a list of options: 1. Phone 2. Sounds 3. Profiles 4. Home Screen 5. Clock & Alarm 6. Connections 7. Security 8. Remove Programs 9. More.
2. Type 6 to select Connections. The following list appears: o Wireless Manager o Beam o Bluetooth o Dial-up o GPRS o Proxy o VPN o Wi-Fi o More 3. Select Wireless Manager. This menu enables you to activate or deactivate the Wi-Fi, Bluetooth and phone. 4. Ensure Wi-Fi is enabled, or else turn it on. (Use the arrows to move from one line to another in the display and the central button to select.) Then click Done to exit the Wireless Manager. 5. From the Connections menu choose 8 for Wi-Fi. You see the list of all available wireless networks. 6. Select the voice2 network. You see the first screen, with the network name (voice2) and a request for the Network Type. 7. Choose Private/Work network, then click Next. You see the Network Key screen. 8. On the Network Key screen, configure the settings as follows: o Authentication: WPA2 o Data Encryption: AES o Select the check box for The key is automatically provided. Then click Next. 9. On the 802.1X screen, check Use IEEE 802.1X network access control, and for EAP type select PEAP. Then click Finish. 10. After a few seconds you are prompted to enter the 802.1X credentials. Enter credentials in the screen; for example: o o o User name: john Password: hp Domain: proactive

The HP iPAQ smartphone authenticates using these credentials, and you can see the authentication success in IAS and IDM:

5. Fast roaming

Layer 2 roaming occurs when a phone that was associated to a radio port moves to another radio port adopted by the same WESM. The phone remains in the same VLAN. Layer 3 roaming happens when a phone moves between two radio ports associated to different WESM modules. The voice WLAN is associated with different VLANs (and subnets) on the two modules. In this case, the phone keeps its originating IP address but the voice flow is tunneled by the current module to the home module.
For more information on L2/L3 roaming configurations, please refer to ProCurve Application Note AN-M3, How to configure L2 and L3 wireless roaming.

5.1 Fast roaming options

To enable a phone to transition faster between two radio ports and reduce the roaming time, you can configure these options: PMK caching Opportunistic key caching
Pre-authentication These options are available with 802.1X authentication. The HP iPAQ 540 Voice Messenger supports PEAP, as well as Smart Card or Certificate. This application note utilizes PEAP.
5.2 Configure self-healing
The self-healing feature enables associating neighbors to each radio port. In case of failure of a radio port, the neighbors increase their transmit power to provide coverage and compensate for the failed RP. You can also enable interference avoidance, which causes radios to change their channel settings to avoid interfering with surrounding radios. To enable self-healing: 1. In the WESM, from the Special Features > Self Healing > Configuration tab, check the Enable Neighbor Recovery box, then click Apply.
2. Then from the Neighbor Details tab click Detect Neighbors. 3. You can now edit an RP radio to check that the other radios with same 802.11 mode (a or b/g) have been listed as neighbors.

5.3 Test roaming time

You can determine the roaming time by first using the WESM to determine the radio port to which the phone is associated. To test roaming time: 1. From Device Association > Wireless Stations, note the radios Station Index. 2. Go to Device Association > Radio Adoption Statistics and determine the MAC address of the corresponding radio port. 3. To determine the switch port associated with this MAC address, use ProCurve Managers Find Node tool. o o Use the command show lldp info remote all on the switch if the radio ports are connected at layer 2. Or use show arp if the radio ports have IP addresses.

4. If the phone is connected to a SIP PBX, initiate a call. Otherwise, from a machine on the network launch a continuous ping to the phone IP address, which you can see in the Wireless Stations list. 5. From the switch CLI or Web agent disable the port of the RP to which the phone is associated. The phone should lose one or two pings, then subsequent pings should be successful again, indicating the phone has associated to a different RP:
6. Firmware versions and phone upgrades
This section provides version numbers of firmware used for this application note, and explains how to upgrade the HP iPAQ Voice Messenger smartphone.
6.1 ProCurve switch and WESM firmware
Firmware versions of the switches used for this application note are as follows: K.13.09 for the ProCurve Switch 5406zl WT.01.15 for the ProCurve WESM zl

6.2 HP iPAQ firmware

Firmware used on the HP iPAQ 512 Voice Messenger firmware is as follows: Bootrom version 2.05.00, available from: http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.jsp?lang=en&cc=us&prodTypeId=2 15348&prodSeriesId=3375716&prodNameId=3360097&swEnvOID=4014&swLang=8&mode=2&taskId=135& swItem=hh-57038-1
6.3 Upgrading firmware in the HP iPAQ Voice Messenger
To upgrade the phones firmware: 1. Back up the smartphones configuration before the firmware upgrade. Upgrading firmware resets the HP iPAQ Voice Messenger to the factory default settings. 2. Connect a PC to the smartphone via a USB cable and ActiveSync. (Refer to the phone documentation for details of ActiveSync.) 3. Open the bootrom package on the PC, and follow the instructions on the PC and smartphone screens. 4. The phone then reboots and is reset to the factory default settings, with the new firmware installed.

7. Reference documents

This concludes the procedures for interoperating ProCurve switches with the HP iPAQ 514 Voice Messenger. For further information about how to configure ProCurve switches and the HP iPAQ Voice Messenger to support convergence, please refer to the following links: For user manuals for ProCurve 3500yl-5400zl-8212zl switches: http://www.hp.com/rnd/support/manuals/3500-6200-5400-ChapterFiles.htm For ProCurve WESM zl manuals: http://www.hp.com/rnd/support/manuals/wireless_zl.htm For PCM+ and IDM manuals: http://www.hp.com/rnd/support/manuals/ProCurve-Manager.htm http://www.hp.com/rnd/support/manuals/IDM.htm For HP iPAQ Voice Messenger manuals: http://h20000.www2.hp.com/bizsupport/TechSupport/DocumentIndex.jsp?lang=en&cc=us&taskId=101&prodC lassId=-1&contentType=SupportManual&docIndexId=64179&prodTypeId=215348&prodSeriesId=3375716
For further information, please visit www.procurve.eu

2008 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

4AA2-2302EEE

Navigon 2100 [ GPS ] Navigon 2100 Max [ GPS ] Navigon 2110 max [ GPS ] Navigon 2120 Max [ GPS ] Navigon 2150 max [ GPS ] Navigon 2200T [ GPS ] Navigon 2210 [ GPS ] Navigon 2310 [ GPS ] Navigon 5100 [ GPS ] Navigon 5100 MAX [ GPS ] Navigon 7200 [ GPS ] Navigon 7200T [ GPS ] Navigon 7210 [ GPS ] Navigon 7310 [ GPS ] Navigon 8100T [ GPS ] Navigon 8110 [ GPS ] Navigon 8310 [ GPS ] Navigon NVG 7100 [ GPS ] Navman F15 [ GPS ] Navman F20 [ GPS ] Navman F20 Europe [ GPS ] Navman F30 [ GPS ] Navman F40 Europe [ GPS ] Navman F50 [ GPS ] Navman F50 Europe [ GPS ] Navman N20 [ GPS ] Navman N40i [ GPS ] Navman N60i [ GPS ] Navman S30 [ GPS ] Navman S50 [ GPS ] Navman S70 [ GPS ] Navman S90i [ GPS ] TeleNav Shotgun [ GPS ] TomTom Go 520 [ GPS ] TomTom Go 530 [ GPS ] TomTom GO 540 LIVE [ GPS ] TomTom GO 630 Traffic [ GPS ] TomTom Go 720 [ GPS ] TomTom GO 730 [ GPS ] TomTom GO 730 Traffic [ GPS ] TomTom GO 740 LIVE [ GPS ] TomTom Go 920 [ GPS ] TomTom Go 920T [ GPS ] TomTom GO 930 [ GPS ] TomTom GO 930 Traffic [ GPS ] TomTom GO 940 LIVE [ GPS ]
TomTom One [ GPS ] TomTom ONE 3rd Edition [ GPS ] TomTom ONE Europe [ GPS ] TomTom ONE Regional [ GPS ] TomTom ONE XL [ GPS ] TomTom ONE XL Europe [ GPS ] TomTom ONE XL Regional [ GPS ] TomTom ONE XL S [ GPS ] Acer BeTouch E100 [ Mobile Phone / PDA ] Acer BeTouch E101 [ Mobile Phone / PDA ] Acer BeTouch E200 [ Mobile Phone / PDA ] Acer Liquid [ Mobile Phone / PDA ] Acer NeoTouch [ Mobile Phone / PDA ] Alltel PPC6800 [ Mobile Phone / PDA ] Alltel UTStarcom PPC6700 [ Mobile Phone / PDA ] AT&T 2125 [ Mobile Phone / PDA ] AT&T 8125 [ Mobile Phone / PDA ] AT&T 8500 [ Mobile Phone / PDA ] AT&T Tilt [ Mobile Phone / PDA ] AT&T / Cingular 8525 [ Mobile Phone / PDA ] Audiovox CDM-8610 [ Mobile Phone / PDA ] Audiovox PPC-6700 [ Mobile Phone / PDA ] Audiovox PPC-6800 Mogul [ Mobile Phone / PDA ] Audiovox PPC6700 [ Mobile Phone / PDA ] Audiovox SMT 5600 [ Mobile Phone / PDA ] Audiovox SMT5600 [ Mobile Phone / PDA ] Belkin Skype WiFi F1PP000GN-SK [ Mobile Phone / PDA ] BlackBerry 8100 series T-Mobile [ Mobile Phone / PDA ] BlackBerry 8300 series T-Mobile [ Mobile Phone / PDA ] BlackBerry 8700 series T-Mobile [ Mobile Phone / PDA ] BlackBerry 8800 series T-Mobile [ Mobile Phone / PDA ] BlackBerry Bold 9000 [ Mobile Phone / PDA ] BlackBerry Curve T-Mobile [ Mobile Phone / PDA ] BlackBerry Pearl T-Mobile [ Mobile Phone / PDA ] BlackBerry 5790 [ Mobile Phone / PDA ] BlackBerry 5820 [ Mobile Phone / PDA ] BlackBerry 6210 [ Mobile Phone / PDA ] BlackBerry 6220 [ Mobile Phone / PDA ] BlackBerry 6230 [ Mobile Phone / PDA ] BlackBerry 6280 [ Mobile Phone / PDA ] BlackBerry 6510 [ Mobile Phone / PDA ] BlackBerry 7100g [ Mobile Phone / PDA ] BlackBerry 7100i [ Mobile Phone / PDA ] BlackBerry 7100r [ Mobile Phone / PDA ] BlackBerry 7100t [ Mobile Phone / PDA ] BlackBerry 7100v [ Mobile Phone / PDA ]