INTEROPERABILITY REPORT Ascom i62 Aerohive Networks, …

Report IntopTest Interoperability Report - Ascom i62 / Aerohive Networks 1 2013-08-13
INTEROPERABILITY REPORT Ascom i62 Aerohive Networks, AP120, 121, 141, 330 and 350
HiveOS version 5.1r5
Ascom, Gothenburg
March 2013
TABLE OF CONTENT: INTRODUCTION ........................................................................................................................... 3
About Ascom ............................................................................................................................ 3 About Aerohive Networks ......................................................................................................... 3
SITE INFORMATION .................................................................................................................... 4 SUMMARY .................................................................................................................................... 5
General conclusion ................................................................................................................... 6 Known issues ............................................................................................................................ 6
TEST CONFIGURATION .............................................................................................................. 7 Ascom WLAN Infrastructure Verification – VoWiFi ................................................................... 7
APPENDIX A: TEST CONFIGURATIONS .................................................................................... 8 Aerohive HiveManager and AP120, 121, 141, 330 and 350 Access Points. ............................ 8
ESS, Security settings. .......................................................................................................... 8 Quality of Service (QoS) ..................................................................................................... 14 Radio Configuration ............................................................................................................ 16
Ascom i62 ............................................................................................................................... 19 Innovaphone IP6000 (IP PBX) ................................................................................................ 21
APPENDIX B: DETAILED TEST RECORDS .............................................................................. 22
Interoperability Report - Ascom i62 / Aerohive Networks 3 2013-08-13
INTRODUCTION This document describes necessary steps and guidelines to optimally configure the Aerohive Networks solutions WLAN platform with Ascom i62 VoWiFi handsets.
The guide should be used in conjunction with both Aerohives and Ascoms configuration guide(s).
About Ascom
Ascom Wireless Solutions (www.ascom.com/ws) is a leading provider of on-site wireless communications for key segments such as hospitals, manufacturing industries, retail and hotels. More than 75,000 systems are installed at major companies all over the world. The company offers a broad range of voice and professional messaging solutions, creating value for customers by supporting and optimizing their Mission-Critical processes. The solutions are based on VoWiFi, IP-DECT, DECT, Nurse Call and paging technologies, smartly integrated into existing enterprise systems. The company has subsidiaries in 10 countries and 1,200 employees worldwide. Founded in the 1950s and based in Göteborg, Sweden, Ascom Wireless Solutions is part of the Ascom Group, listed on the Swiss Stock Exchange.
About Aerohive Networks People want to work anywhere; on any device, and IT needs to enable them -- without drowning in complexity or compromising on security, performance, reliability or cost. Aerohive's mission is to Simpli-Fi these enterprise access networks with a cloud-enabled, self-organizing, service-aware, identity-based infrastructure that includes innovative Wi-Fi, VPN, branch routing and switching solutions. Aerohive was founded in 2006 and is headquartered in Sunnyvale, Calif. The company's investors include Kleiner Perkins Caufield & Byers, Lightspeed Venture Partners, Northern Light Venture Capital, New Enterprise Associates, Inc. (NEA) and Institutional Venture Partners (IVP). For more information, please visitwww.aerohive.com, call us at 408-510-6100, follow us on Twitter @Aerohive, subscribe to our blog, join ourcommunity or become a fan on our Facebook page.
SITE INFORMATION
Test Site(s): Ascom US Ascom Sweden 598 Airport Blvd Grinbodalen 2 Suite 300 Göteborg 417 49 Morrisville 27560 NC Sweden Participants: Karl-Magnus Olsson, Ascom HQ, Morrisville, NC Matthew Williams, Ascom HQ, Gothenburg, Sweden Henric Chronholm, Ascom HQ, Gothenburg, Sweden TEST TOPOLOGY
SUMMARY Please refer to Appendix B for detailed results for respective access point. WLAN Controller Features
High Level Functionality Result Association, Open with No Encryption OK Association, WPA-PSK, TKIP / AES Encryption OK Association, WPA2-PSK, TKIP / AES Encryption OK Association, PEAP-MSCHAPv2 Auth., AES Encryption OK Association, EAP-TLS Auth., AES Encryption OK Association, Multiple ESSIDs OK Beacon Interval and DTIM Period OK Preauthentication Not tested PMKSA Caching OK WPA2-opportunistic/proactive Key Caching OK* WMM Prioritization OK Active Mode (load test) OK 802.11 Power-save mode OK 802.11e U-APSD OK 802.11e U-APSD (load test) OK *) Issue found with Ap120 and AP121. AP330/350 OK. See Known issues section for additional details. Roaming
High Level Functionality Result Roaming, Open with No Encryption OK Roaming, WPA-PSK, TKIP Encryption OK Roaming, WPA2-PSK, AES Encryption OK Roaming, PEAP-MSCHAPv2 Auth, AES Encryption OK
General conclusion The result of the verified test areas, such as authentication, association, handover and call stability test, produced in very good results. The roaming times, both PSK and 802.1x were excellent by ranging in the interval 30 to 70m. Performance has also been proven to be very good. In both active and U-APSD mode it was possible to keep up 12 simultaneously calls per AP one single access point. Keep in mind that the limitation was available handsets and not system capacity. Consider the below mentioned caveats.
Known issues
• Roaming with AP330/350. It was noticed that the key exchange failed at a few roaming
occasions both when using PSK and .1X authentication resulting in a few seconds speech gap. Frequency approximately 1 out of 80 roaming. Impact: Minor due to low frequency and symptom Workaround: None Refer to Ascom Ticket 22235 for details.
• Opportunistic Key Caching (OKC) not always working with AP120/121.
Impact: Moderate. Workaround: Use PSK authentication instead. It is our recommendation to avoid usage of 802.1X authentication with the AP120/121 until this is resolved. Aerohive has indicated that this is a bug which will be fixed in an upcoming release. Note that Ap330/350 does not experience this problem. Refer to Aerohive ticket 24913 or Ascom Ticket 22236 for details.
For additional information regarding the known issues please contact [email protected] or [email protected]
TEST CONFIGURATION
• Aerohive HiveOS software 5.1r5 • AP120/121/141/330/350 • Ascom i62, v 4.1.12 (WLAN driver version 2.3.c)
Signaling Protocol: • SIP, Innovaphone IP6000 used as SIP server. Version 9 hotfix 13
Configuration of WLAN System:
• Beacon Interval: 100ms • DTIM Period: 5 • 802.11bg(n) • 802.11a(n) • WMM/ U-APSD Enabled (See appendix A for QoS profiles) • 802.11d Regulatory Domain: World mode
Ascom i62 Configuration:
• World Mode Regulatory Domain set to World mode. • IP DSCP for Voice: 0x30 (48) – Class selector 6 • IP DSCP for Signaling: 0x1A (26) – Assured Forwarding 31
Keep in mind that security options and power save modes were adjusted according to requirements in individual test cases. Please refer to appendix A for information regarding device configuration.
APPENDIX A: TEST CONFIGURATIONS
Aerohive HiveManager and AP120, 121, 141, 330 and 350 Access Points. In the following chapter you will find screenshots and explanations of basic settings in order to get the Aerohive Networks solution operational with Ascom i62. Please note that security settings were modified according to requirements in individual test cases. The configuration file is found at the bottom of this chapter. ESS, Security settings.
List of all configured SSIDs
WPA2 PSK (Personal)
- Select WPA/WPA2 PSK (Personal) - Select WPA2-PSK and CCMP and Key Management and Encryption Method - Key can be entered in HEX or in ASCII format. Example shows a key entered in ASCII format.
WPA2 802.1X (Enterprise)
- Select WPA/WPA2 802.1X (Enterprise) - Select WPA2-802.1X and CCMP and Key Management and Encryption Method - Make sure Enable Proactive PMK ID response is checked.
WPA2 802.1X (Enterprise) – RADIUS configuration
- Configure the IP Address to the Radius server - Type in the “secret” that corresponds to the secret configured in the Radius server.
Data rate configuration. (Same for all encryption methods)
- To improve the performance in the wireless system it is recommended to disable the lowest data rates.
Advanced SSID settings (Same for all encryption methods)
- Set the DTIM settings to 5. DTIM value 5 is recommended in order to allow maximum battery conservation without impacting the quality. A lower value is possible but will negatively impact the standby time.
- Make sure Enable WMM is checked. - Make sure Enable Unscheduled Automatic Power Save Delivery is checked. U-APSD is not
mandatory but is highly recommended as it will significantly increase the talk time.
User Profile.
- Create a user profile and select your Rate Control & Queuing Policy. See section QoS for details.
Quality of Service (QoS)
Classifier Maps
- Create classifier map according to the screenshot and enable DiffServ and 802.11e
Marker Maps
- Create a Marker Map. Note that these are the system default values.
Rate Control & Queuing
- Make sure that the system default values look as per above.
Radio Configuration
Radio Profiles. (5Ghz)
- Example shows the default profile radio_na0 - Channel with is set to 20Mhz but 40Mhz has also been verified. - Make sure the beacon period is set to 100TU
Radio Profiles. (2.4Ghz)
- Example shows the default profile radio_ng0 - Channel with is set to 20Mhz. 40Mhz channel width is not recommended on the 2.4Ghz band. - Make sure the beacon period is set to 100TU
Configuration of access points
- Radio profiles used is the default (radio_na0 and radio_ng0). See earlier steps for configuration of the radio profiles.
- In the example channel has been set manually for each access point. Note. 1. Enabling more than 8 channels will degrade roaming performance. Ascom strongly recommends against going above this limit. 2. Using 40 MHz channels (or “channel-bonding”) will reduce the number of non-DFS* channels to two in ETSI regions (Europe). In FCC regions (North America), 40MHz is a more viable option because of the availability of additional non-DFS channels. The handset can co-exist with 40MHz stations in the same ESS. 3. Make sure that all non-DFS channel are taken before resorting to DFS channels. The handset can cope in mixed non-DFS and DFS environments; however, due to “unpredictability” introduced by radar detection protocols, voice quality may become distorted and roaming delayed. Hence Ascom recommends avoiding the use of DFS channels in VoWIFI deployments. *) Dynamic Frequency Selection (radar detection)
Ascom i62
Ascom i62 Network configurations (WPA2-PSK)
- Set IP DSCP for voice to 0x30 (48) – CS6 to match default mappings in the Aerohive system.
i62 network settings for 802.1X authentication (PEAP-MSCHAPv2)
- Set IP DSCP for voice to 0x30 (48) – CS6 to match default mappings in the Aerohive system.
If 802.1X Authentication is used a root certificate has to be uploaded to the phone by “right clicking” - > Edit certificates. Note that both a root and a client certificate are needed for TLS. Otherwise only a root certificate is needed. Server certificate validation can be overridden in version 4.1.12 and above per handset setting (Validate server certificate).
Innovaphone IP6000 (IP PBX) The Innovaphone IP6000 was configured with a static IP address of 172.20.106.113. Signaling is less relevant here since testing homes in on interoperability in relation to the WLAN infrastructure and not features of the IP PBX. IP6000 configuration: See attached file (complete-IP6000-08-03-a6.txt) for configuration.
APPENDIX B: DETAILED TEST RECORDS VoWIFI Pass 26 Fail 0 Comments 2 Untested 5 Total 33 Results are based on the Ap330/350 results. See attached file (WLANinteroperabilityTestReport.xls) for detailed test results. MISCELLANEOUS Please refer to the test specification for WLAN systems on Ascom’s interoperability web page for explicit information regarding each test case. See URL (requires login): https://www.ascom-ws.com/AscomPartnerWeb/en/startpage/Sales-tools/Interoperability
Document History Rev Date Author Description PA 2013-03-06 SEKMO Initial draft PB 2013-03-08 SEKMO Minor changes after feedback R1 2013-03-11 SEKMO Revision 1. R2 2013-08-13 SEKMO Corrected some typos. Revision 2
INTRODUCTION
APPENDIX A: TEST CONFIGURATIONS
Aerohive HiveManager and AP120, 121, 141, 330 and 350 Access Points.
Quality of Service (QoS)
WLAN TR
802.11 Protocol: 802.11b/g/n and a/n (NOTE: i62 11n-enabled), 802.11d Regulatory Domain: SE, WMM Enabled (Auto/WMM),
Test object - WLAN system:
QoS = SIP BE & RTP CS6 (Default WMM<->DSCP map on controller)
HiveManager Ent. v. 5.1r5 build Dakar 1077
Deauth on roam = disabled, Roaming methodology = 802.11 roaming, MTU = 1400
No Auto-tune, Single Voice VLAN
AP120
AP121
AP330
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
Hidden SSID OK; IMPORTANT: HiveManager supports DFS channels in a/n mode; Ascom's VoWIFI recommendation, if possible, is to avoid DFS channels, see interop. report
#104
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
#105
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
#106
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
#107
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
#110
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
FAIL
#111
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
TEST AREA POWER-SAVE AND QOS
#150
#151
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
#152
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
QoS = SIP BE & RTP CS6 (default WMM<->DSCP map on controller)
#202
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
File transfers simulated to/from FTP server on the wireless LAN (WLAN) without voice deterioration, QoS = FTP BE/UP0 & RTP CS6/UP6
TEST AREA "PERFORMANCE"
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
Wireless protection unchecked in HiveManager, handset OPEN, 12 active calls without voice deterioration (12 calls required to PASS); not tested if U-APSD passes
#303
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
WPA2/AES only in HiveManager, handset WPA/WPA2; b/g/n: 12 active calls without voice deterioration, a/n: 12 active calls without voice deterioration (12 calls required to PASS)
#308
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
WPA2/AES only in HiveManager, handset WPA/WPA2; b/g/n: 12 active calls without voice deterioration, a/n: 12 active calls without voice deterioration (12 calls required to PASS)
TEST AREA ROAMING AND HANDOVER TIMES
#401
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
Roaming methodology: 802.11 roaming, b/g/n (b/g): no significant drop in call quality during roam, a/n: no significant drop in call quality during roam (36-52ms)
#403
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
Roaming methodology: 802.11 roaming, b/g/n: no significant drop in call quality during roam, a/n: no significant drop in call quality during roam (35-50ms)
#404
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
#408
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
#409
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
PMKSA caching enabled by default in HiveManager; first assoc. towards AP requires full EAP exchange, subsequent reassoc. back to old AP requires only 802.1x 4-way key exchange
#411
FAIL
FAIL
FAIL
FAIL
PASSED
PASSED
OKC/PKC enabled by default in HiveManager; first assoc. towards ESS requires full EAP exchange, subsequent reassoc. require only 802.1x 4-way key exchange (AP12x: OKC does not always work upon roam)
#412
Preauthentication
See Comment
See Comment
See Comment
See Comment
See Comment
See Comment
Supported by WLAN controller, feature not used in tested scenarios at Ascom (unnecessary in single "Hive" environment)
TEST AREA BATTERY LIFETIME
PASSED
PASSED
AP120: approx. 80hrs expected, AP330: >91hrs idle (avg. 93.75hrs); b/g/n: 96.5hrs, a/n: 91hrs; clock screen saver enabled (def.); DTIM = 5 (NOTE: new power packs)
#502
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
PASSED
PASSED
AP120: >3.5hrs in-call (avg. 4hrs); b/g/n: 4.5hrs, a/n: 3.5hrs; clock screen saver enabled (def.); DTIM = 5; AP330: >3.5hrs in-call (avg. 3.625hrs); b/g/n: 3.75hrs, a/n: 3.5hrs; clock screen saver enabled (def.); DTIM = 5
#504
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
PASSED
PASSED
AP120: >8.75hrs in-call (avg. 10.875hrs); b/g/n: 13hrs, a/n: 8.75hrs; clock screen saver enabled (def.); DTIM = 5; AP330: >9.5hrs in-call (avg. 12hrs); b/g/n: 9.5hrs, a/n: 14.5hrs; clock screen saver enabled (def.); DTIM = 5 (NOTE: new power packs)
TEST AREA STABILITY
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
#602
PASSED
PASSED
PASSED
PASSED
PASSED
PASSED
NOT TESTED
NOT TESTED
NOT TESTED
NOT TESTED
#805

Documents

INTEROPERABILITY REPORT Ascom i62 Aerohive Networks, …