nanog mailing list archives
RE: Wifi SIP WPA/PSK Support
From: "Frank Bulk" <frnkblk () iname com>
Date: Thu, 26 Jan 2006 14:55:45 -0600
I've been tracking the Wi-Fi SIP phone space for some time, and have documented all the phones that I could find here: http://www.mtcnet.net/~fbulk/VoWLAN.doc It's about a 7 MB file because I've included pictures of these devices where I could find them. Because we just installed a SIP proxy server on our switch I took the opportunity to purchase and try out 4 Wi-Fi SIP phones: - Hitachi IPC-5000 - UTStarcom F1000 - Pulver WiSIP/ZyXEL P-2000W v1 - ZyXEL P-2000 v2 The last two offer identical user interface and functionality but a different shell. The Hitachi doesn't offer WPA support, but it does do 802.1X (specifically EAP-MD5, EAP-TLS, PEAP, and EAP-TTLS) with WEP. That probably means it can hand out WEP keys, and perhaps perform dynamic WEP. The only phone to support WPA from that short list is the F1000 with 3.60 or higher firmware, and that's only WPA-PSK. If you look in the Word document you'll see there are other phones that offer WPA support, but there not are readily available in the North American market. Kind regards, Frank -----Original Message----- From: owner-nanog () merit edu [mailto:owner-nanog () merit edu] On Behalf Of Mike Leber Sent: Wednesday, January 25, 2006 10:35 PM To: nanog () merit edu Subject: Wifi SIP WPA/PSK Support I'm working on finding a Wifi SIP phone that supports WPA/PSK that we can recommended to VOIP clients. As everybody knows, currently most Wifi SIP phones support WEP which is demonstrably insecure. For banking and financial customers, or companies that are given passwords or credit cards over the phone, this is a serious security issue. We recently bought a Hitachi-Cable Wireless IPC-5000 WiFi SIP Phone from voipsupply.com after finding some web pages that said that phone supported WPA (the pages were in German), yet once we got the phone all it supported was WEP even after updating the firmware to the latest version using the website mentioned in the documentation that came with the phone. I've had a few people say that there was some sort of conspiracy to keep US citizens from using secure phones, however I found that laughable because the potential risk of terrorist or criminal interception from having all Wifi telephone conversations involving credit cards (let alone social security numbers, bank account numbers, passwords, what have you) in the clear would create an attack vector so large as to exceed all other possible attack vectors... I mean why work on cracking anything when you can just listen to everybody in the clear (well virtually in the clear with WEP). So, back in reality, could anybody in the US that bought their Wifi SIP phone in the US share a success story at getting Wifi SIP setup with WPA/PSK? What model of phone did you buy? Where did you get it? Did you have to upgrade it to any special version of firmware or what? Mike. +----------------- H U R R I C A N E - E L E C T R I C -----------------+ | Mike Leber Direct Internet Connections Voice 510 580 4100 | | Hurricane Electric Web Hosting Colocation Fax 510 580 4151 | | mleber () he net http://www.he.net | +-----------------------------------------------------------------------+
Current thread:
- Wifi SIP WPA/PSK Support Mike Leber (Jan 25)
- Re: Wifi SIP WPA/PSK Support Suresh Ramasubramanian (Jan 25)
- Re: Wifi SIP WPA/PSK Support Mike Leber (Jan 25)
- Re: Wifi SIP WPA/PSK Support Crist Clark (Jan 26)
- Re: Wifi SIP WPA/PSK Support Steve Sobol (Jan 27)
- <Possible follow-ups>
- RE: Wifi SIP WPA/PSK Support Casey Halverson (Jan 26)
- Re: Wifi SIP WPA/PSK Support Suresh Ramasubramanian (Jan 26)
- RE: Wifi SIP WPA/PSK Support Frank Bulk (Jan 26)
- RE: Wifi SIP WPA/PSK Support Casey Halverson (Jan 26)
- Re: Wifi SIP WPA/PSK Support Suresh Ramasubramanian (Jan 25)