An HP PrCurve Netwrking Applicatin Nte Interperability between PrCurve WESM zl and Cisc Unified Wireless IP Phne 7921G Cntents 1. Intrductin... 3 2. Prerequisites... 3 3. Netwrk architecture... 3 4. Secure wireless WPA2-PSK encryptin... 4 4.1 Cnfigure the PrCurve WESM... 4 4.2 Cnfigure the Cisc wireless IP phne... 5 5. Fast raming... 6 5.1 Fast raming ptins... 6 5.2 Cnfigure self-healing... 7 5.3 Test raming time... 7 6. Cnfiguring 802.11e and UAPSD... 8 6.1 Cnfigure WMM n the WESM... 8 6.2 Cnfigure UAPSD n the Cisc wireless IP phne... 9
Interperability between PrCurve WESM zl and Cisc Unified Wireless IP Phne 7921G 7. Firmware versins... 9 8. Reference dcuments... 10 HP PrCurve Netwrking 2
Interperability between PrCurve WESM zl and Cisc Unified Wireless IP Phne 7921G 1. Intrductin This dcument describes the interperability f a PrCurve wireless services slutin cupled with the Cisc Unified Wireless Phne 7921G t prvide a secure Vice ver WLAN (VWLAN) slutin with the fllwing services: Secure wireless encryptin with WPA/WPA2 (pre-shared key) Fast raming Quality f Service (via WMM) n the wireless media Unscheduled Autmated Pwer Save Delivery (UAPSD) 2. Prerequisites Yu will need the fllwing equipment: PrCurve Switch 5406zl r 8212zl with the latest firmware versin Wireless Edge Services Mdule zl (WESM zl) plugged int a slt f the 5406zl Tw PrCurve radi prts (RP210 r RP230) Cisc Unified Wireless IP Phne 7921G The wireless services mdule and radi prts are installed in the 5406zl r 8212zl. The radi prts have been discvered. Fr mre infrmatin n this cnfiguratin please refer t PrCurve Applicatin Nte AN-M1, Hw t extend yur wired netwrk t wireless. 3. Netwrk architecture Figure 1 details the cnfiguratin referenced in this applicatin nte. Figure 1. Cnfiguratin fr PrCurve-Cisc wireless IP phne interperability HP PrCurve Netwrking 3
Interperability between PrCurve WESM zl and Cisc Unified Wireless IP Phne 7921G 4. Secure wireless WPA2-PSK encryptin The Cisc Unified Wireless IP Phne 7921G supprts the fllwing encryptin ptins: WEP WPA1-PSK WPA2-PSK 802.1X with the fllwing EAP prtcls: LEAP, PEAP, EAP-FAST, EAP-TLS, and PEAP This applicatin nte describes the cnfiguratin f WPA2-PSK encryptin. 4.1 Cnfigure the PrCurve WESM T cnfigure the PrCurve WESM fr secure wireless encryptin via WPA2-PSK: 1. On the wireless edge services mdule, g t Netwrk Setup > WLAN Setup and create a new WLAN called vice. 2. Cnfigure this WLAN as fllws: SSID: vice VLAN ID: The VLAN yu want t be assigned t the phne. This VLAN must be tagged n the WESM uplink frm the switch menu. (Fr details, refer t Applicatin Nte AN-M1, r t the Wireless Services Mdule Administratr Guide). Authenticatin: N Authenticatin. Encryptin: Enable bth WPA/WPA2 TKIP and WPA2 AES. HP PrCurve Netwrking 4
Interperability between PrCurve WESM zl and Cisc Unified Wireless IP Phne 7921G 3. Click the Cnfig buttn, and cnfigure the pre-shared key as fllws. ASCII passphrase: prcurve Enable all three Fast Raming ptins (PMK Caching, Opprtunistic Key Caching, Pre- Authenticatin). 4. Click OK t return t the main Edit windw. 5. In the main Edit windw, under Advanced, select Clsed System, then click OK. 6. Finally, t enable the new WLAN, at the bttm f the WLAN list windw click the Enable buttn. 4.2 Cnfigure the Cisc wireless IP phne T cnfigure the Cisc Wireless IP Phne 7921G: 1. Frm the phne main menu, press the bttm arrw t enter the SETTINGS menu. 2. Then chse 2 fr Netwrk Prfiles. 3. Select Prfile 1 and press Change. 4. Press 1 t enter Prfile Name. Enter a new prfile name, WPA2. Then press Optins and 1 t save the prfile name. Nte: If at any time yu btain the Settings lcked message, press **# t unlck the screen. 5. Return t the Netwrk Prfiles menu and chse 2. Netwrk Cnfiguratin. 6. If yu want t assign a static IP address, set DHCP (ptin 4) t N, and assign the IP address, subnet mask and gateway. -r- Use DHCP with the fllwing ptins: Optin 1: Subnet Mask Optin 3: Ruter IP Address Optin 6: DNS Server(s) Optin 15: DNS Dmain Name Optin 66: TFTP Server 7. Press Optins and 1 t save the netwrk prfile cnfiguratin. 8. Return t the Prfile menu and chse 3. WLAN Cnfiguratin. HP PrCurve Netwrking 5
Interperability between PrCurve WESM zl and Cisc Unified Wireless IP Phne 7921G 9. Set the WLAN parameters as fllws: 1. Ssid: vice 2. Security Mde: Chse Aut (AKM) 3. Leave uncnfigured 4. Leave uncnfigured 5. Key style: ASCII 6. Pre-shared key: prcurve 7. 802.11 mde: Aut-RSSI Leave the ther settings as they are. 10. On the WESM, yu can nw see the phne in Device Assciatin > Wireless statins. Yu can see the phne s MAC Address, IP Address, WLAN, VLAN, and Radi Index: Nte that the phne is nw cnnected t the RP represented by Radi Index 3. 11. Check cnnectivity t the phne by running a ping t its IP address frm anther machine r ther device n the same LAN: 5. Fast raming Layer 2 raming ccurs when a phne that was assciated t a radi prt mves t anther radi prt adpted by the same WESM. The phne remains in the same VLAN. Layer 3 raming happens when a phne mves between tw radi prts assciated t different WESM mdules. The vice WLAN is assciated with different VLANs (and subnets) n the tw mdules. In this case, the phne keeps its riginating IP address but the vice flw is tunneled by the current mdule t the hme mdule. Fr mre infrmatin n L2/L3 raming cnfiguratins, please refer t PrCurve Applicatin Nte AN-M3, Hw t cnfigure L2 and L3 wireless raming. 5.1 Fast raming ptins Nrmally, t enable a phne t transitin faster between tw radi prts and reduce the raming time, yu can cnfigure these ptins: PMK caching Opprtunistic key caching Pre-authenticatin These ptins apply t 802.1X authenticatin nly, which is supprted with EAP-TLS n the Cisc phne. This applicatin nte, hwever, presents authenticatin with WPA2. HP PrCurve Netwrking 6
Interperability between PrCurve WESM zl and Cisc Unified Wireless IP Phne 7921G 5.2 Cnfigure self-healing The self-healing feature enables assciating neighbrs t each radi prt. In case f failure f a radi prt, the neighbrs increase their transmit pwer t prvide cverage and cmpensate fr the failed RP. Yu can als enable interference avidance, which causes radis t change their channel settings t avid interfering with surrunding radis. T enable self-healing: 1. Frm the Special Features > Self Healing > Cnfiguratin tab, check the Enable Neighbr Recvery bx, then click Apply. 2. Then frm the Neighbr Details tab click Detect Neighbrs. 3. Yu can nw edit an RP radi t check that the ther radis with same 802.11 mde (a r b/g) have been listed as neighbrs. 5.3 Test raming time Yu can determine the raming time by first using the WESM t determine the radi prt t which the phne is assciated. T test raming time: 1. Frm Device Assciatin > Wireless Statins, nte the radi s Statin Index. 2. G t Device Assciatin > Radi Adptin Statistics and determine the MAC address f the crrespnding radi prt. 3. T determine the switch prt assciated with this MAC address, use PrCurve Manager s Find Nde tl. Use the cmmand shw lldp inf remte all n the switch if the radi prts are cnnected at layer 2. Or use shw arp if the radi prts have IP addresses. 4. Frm a machine n the netwrk launch a ping t the phne IP address: 10.1.40.151. 5. Frm the switch CLI r Web agent disable the prt f the RP t which the phne is assciated. The phne shuld lse ne r tw pings, then subsequent pings shuld be successful again: HP PrCurve Netwrking 7
Interperability between PrCurve WESM zl and Cisc Unified Wireless IP Phne 7921G After lsing between 1 and 3 pings, yu see the phne assciated t anther radi. In this case, the Radi Index, which was previusly 3, is nw 5, indicating the phne is nw assciated with the RP represented by Radi Index 5: 6. Cnfiguring 802.11e and UAPSD This sectin details hw t cnfigure WMM (802.11e) and Unscheduled Autmatic Pwer Save Delivery (UAPSD). 6.1 Cnfigure WMM n the WESM T priritize vice traffic yu can cnfigure WiFi Multimedia (WMM), which is a WiFi Alliance interperability certificatin based n the 802.11e standard. WMM autmatically defines fur classes f traffic that will be queued and priritized accrdingly. T cnfigure WMM n the Wireless Edge Services Mdule: 1. Edit the vice WLAN. 2. In Advanced Parameters, set the Access Categry t Autmatic WMM. 3. In Netwrk Setup > WLAN Setup > Edit screen, g t the WMM tab and verify that the vice VLAN is cnfigured fr WMM with fur queues: Vice, Vide, Backgrund and Best Effrt. 4. If desired, yu can mdify the parameters f these different classes f traffic: AIFSN Transmit Ops CW Minimum CW Maximum Use DSCP r 802.1p pririty (DSCP by default) HP PrCurve Netwrking 8
Interperability between PrCurve WESM zl and Cisc Unified Wireless IP Phne 7921G 5. Click OK t accept Autmatic/WMM as the Access Categry. Wireless traffic is placed in the fur queues accrding t its 802.1p pririty (default) r DSCP value. Nte that fr each queue, fur parameters are defined: AIFSN, Arbitratin IFS Number, the default time befre cuntdwn. CW minimum (CWmin), the minimum cntentin windw. CW maximum (CWmax), the maximum cntentin windw. Transmit Ops (TXOP), the pprtunity t transmit. This is the time during which a statin that has wn the cntrl f the shared medium can retain it. Fr mre infrmatin n WMM cnfiguratin n the WESM, please refer t PrCurve Applicatin Nte AN- M12, Using 802.11e and WMM n the PrCurve Wireless Edge Services Mdule. 6.2 Cnfigure UAPSD n the Cisc wireless IP phne UAPSD (Unscheduled Autmatic Pwer Save Delivery) has been adpted by the WiFi Alliance, where it is knwn as WMM Pwer Save. This technlgy allws saving battery pwer and fine-tuning the pwer cnsumptin f wireless statins n WMM-enabled wireless netwrks. T cnfigure the Cisc wireless phne fr UAPSD: 1. Frm the Settings Menu, pen Netwrk Prfiles. 2. Edit the Netwrk Prfile yu want t mdify, using the Change buttn. 3. Chse 3. WLAN Cnfiguratin. 4. Chse 9. Call Pwer Save Mde. 5. Chse 1. U-APSD/PS-Pll and then Save. 6. Click Back several times t exit the different menus. 7. Firmware versins Firmware versins f the switches used fr this applicatin nte are as fllws: K.13.09 fr the PrCurve Switch 5406zl WT.01.15 fr the PrCurve WESM zl Cisc Unified Wireless IP Phne 7921G firmware: Versin 1.1.1 (cmterm-7921-sccp.1-1-1.exe) Upgrading firmware in the Cisc wireless IP phne: Dwnlad the cmterm file t Cisc Call Manager versin 4.1 r later, and pen it t upgrade the CCM. (Yu need a CCO lgin t dwnlad the firmware versin.) HP PrCurve Netwrking 9
Interperability between PrCurve WESM zl and Cisc Unified Wireless IP Phne 7921G 8. Reference dcuments This cncludes the prcedures fr interperating PrCurve switches with the Cisc Unified Wireless IP Phne 7921G. Fr further infrmatin abut hw t cnfigure PrCurve switches t supprt mbility, please refer t the fllwing links: Fr user manuals fr PrCurve 3500yl-5400zl-8212zl switches: http://www.hp.cm/rnd/supprt/manuals/3500-6200-5400-chapterfiles.htm Fr PrCurve WESM zl manuals: http://www.hp.cm/rnd/supprt/manuals/wireless_zl.htm Fr PCM+ and IDM manuals: http://www.hp.cm/rnd/supprt/manuals/prcurve-manager.htm http://www.hp.cm/rnd/supprt/manuals/idm.htm Fr the Administratin Guide fr the Cisc Unified Wireless IP Phne 7921G: http://www.cisc.cm/en/us/dcs/vice_ip_cmm/cuipph/7921g/6_0/english/administratin/guide/21adm60.ht ml Fr further infrmatin, please visit www.prcurve.eu 2008 Hewlett-Packard Develpment Cmpany, L.P. The infrmatin cntained herein is subject t change withut ntice. The nly warranties fr HP prducts and services are set frth in the express warranty statements accmpanying such prducts and services. Nthing herein shuld be cnstrued as cnstituting an additinal warranty. HP shall nt be liable fr technical r editrial errrs r missins cntained herein. HP PrCurve Netwrking 4AA2-2298EEE 10