[88258] in North American Network Operators' Group
RE: Wifi SIP WPA/PSK Support
daemon@ATHENA.MIT.EDU (Casey Halverson)
Thu Jan 26 18:12:48 2006
Date: Thu, 26 Jan 2006 15:12:16 -0800
From: "Casey Halverson" <casey.halverson@infospace.com>
To: <frnkblk@iname.com>, <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu
I have actually been following this as well, and I have tested several
of these handsets. Others have been impossible to source. Typically
startups will attempt to bring a wifi voip handset to the market,
realize there is no demand, and fold.
In the particular discussion of WPA:
Note that the two Senaos listed claim WPA support, but this is not
available in the current firmware. There also hasn't been any updates
to it in a year or so -- don't expect it anytime soon.
=20
> -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On=20
> Behalf Of Frank Bulk
> Sent: Thursday, January 26, 2006 12:56 PM
> To: nanog@merit.edu
> Subject: RE: Wifi SIP WPA/PSK Support
>=20
>=20
>=20
> I've been tracking the Wi-Fi SIP phone space for some time,=20
> and have documented all the phones that I could find here:
> http://www.mtcnet.net/~fbulk/VoWLAN.doc
> It's about a 7 MB file because I've included pictures of=20
> these devices where I could find them.
>=20
> Because we just installed a SIP proxy server on our switch I=20
> took the opportunity to purchase and try out 4 Wi-Fi SIP phones:=20
> - Hitachi IPC-5000
> - UTStarcom F1000
> - Pulver WiSIP/ZyXEL P-2000W v1
> - ZyXEL P-2000 v2
>=20
> The last two offer identical user interface and functionality=20
> but a different shell. =20
>=20
> The Hitachi doesn't offer WPA support, but it does do 802.1X=20
> (specifically EAP-MD5, EAP-TLS, PEAP, and EAP-TTLS) with WEP.=20
> That probably means it can hand out WEP keys, and perhaps=20
> perform dynamic WEP. The only phone to support WPA from that=20
> short list is the F1000 with 3.60 or higher firmware, and=20
> that's only WPA-PSK.
>=20
> If you look in the Word document you'll see there are other=20
> phones that offer WPA support, but there not are readily=20
> available in the North American market.
>=20
> Kind regards,
>=20
> Frank
>=20
> -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On=20
> Behalf Of Mike Leber
> Sent: Wednesday, January 25, 2006 10:35 PM
> To: nanog@merit.edu
> Subject: Wifi SIP WPA/PSK Support
>=20
>=20
>=20
> I'm working on finding a Wifi SIP phone that supports WPA/PSK=20
> that we can recommended to VOIP clients. As everybody knows,=20
> currently most Wifi SIP phones support WEP which is=20
> demonstrably insecure. For banking and financial customers,=20
> or companies that are given passwords or credit cards over=20
> the phone, this is a serious security issue.
>=20
> We recently bought a Hitachi-Cable Wireless IPC-5000 WiFi SIP=20
> Phone from voipsupply.com after finding some web pages that=20
> said that phone supported WPA (the pages were in German), yet=20
> once we got the phone all it supported was WEP even after=20
> updating the firmware to the latest version using the website=20
> mentioned in the documentation that came with the phone.
>=20
> I've had a few people say that there was some sort of=20
> conspiracy to keep US citizens from using secure phones,=20
> however I found that laughable because the potential risk of=20
> terrorist or criminal interception from having all Wifi=20
> telephone conversations involving credit cards (let alone=20
> social security numbers, bank account numbers, passwords,=20
> what have you) in the clear would create an attack vector so=20
> large as to exceed all other possible attack vectors... I=20
> mean why work on cracking anything when you can just listen=20
> to everybody in the clear (well virtually in the clear with WEP).
>=20
> So, back in reality, could anybody in the US that bought=20
> their Wifi SIP phone in the US share a success story at=20
> getting Wifi SIP setup with WPA/PSK? What model of phone did=20
> you buy? Where did you get it? Did you have to upgrade it=20
> to any special version of firmware or what?
>=20
> Mike.
>=20
> +----------------- H U R R I C A N E - E L E C T R I C=20
> +-----------------+
> | Mike Leber Direct Internet Connections Voice=20
> 510 580 4100 |
> | Hurricane Electric Web Hosting Colocation Fax=20
> 510 580 4151 |
> | mleber@he.net =20
> http://www.he.net |
> +-------------------------------------------------------------
> ----------+
>=20
>=20
>=20
