INTEROPERABILITY REPORT

Alcatel-Lucent OT8118/8128
Juniper Networks, MP/WLA 321,322, 422, 522 & 532
Juniper Networks software version 8.0.2.2
Alcatel-Lucent OT81x8 version 4.1.12

8AL90480USAA Ed.01
April 2013

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 1

2013-04-18
TABLE OF CONTENT:

INTRODUCTION ...........................................................................................................................3
About Alcatel-Lucent................................................................................................................. 3
Juniper Networks solution......................................................................................................... 3
SITE INFORMATION ....................................................................................................................4
Known issues............................................................................................................................ 6
Compatibility information .......................................................................................................... 6
General conclusion ................................................................................................................... 6
TEST RESULTS............................................................................................................................7
Alcatel-Lucent WLAN Infrastructure Verification – VoWiFi ....................................................... 7
APPENDIX A: TEST CONFIGURATIONS ....................................................................................8
Juniper Networks WLC (MX) Controller version 8.0.2.2. .......................................................... 8
ESS, Radio and QoS settings ............................................................................................... 8
Security settings ..................................................................................................................... 14
Alcatel-Lucent OT81x8 ........................................................................................................... 17

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 2

2013-04-18
INTRODUCTION

This document describes necessary steps and guidelines to optimally configure the Juniper Networks
WLAN platform with Alcatel-Lucent OT81x8 WLAN handsets.

The guide should be used in conjunction with both Juniper Networks and Alcatel-Lucents configuration
guide(s).

About Alcatel-Lucent

The Alcatel-Lucent OmniTouch 8118/8128 WLAN handsets offer a sleeker design, high-resolution color
TFT display (OT8128), IP44 compliant construction, and longer battery time. OT 8118/8128 handsets
can be managed over-the-air (OTA) and are designed to interoperate within a Wi-Fi network. With the
OT 8118/8128 WLAN handsets, users get a mobile device for voice conversations, text messaging and
alarms from Alcatel-Lucent Call Servers and third party Alarm servers.

Juniper Networks solution

Juniper Networks is in the business of network innovation. From devices to data centers, from consumers
to cloud providers, Juniper Networks delivers the software, silicon and systems that transform the
experience and economics of networking. Additional information can be found at Juniper
Networks (www.juniper.net).

Juniper Networks and Junos are registered trademarks of Juniper Networks, Inc. in the United States and
other countries. The Juniper Networks and Junos logos are trademarks of Juniper Networks, Inc. All other
trademarks, service marks, registered trademarks, or registered service marks are the property of their
respective owners

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 3

2013-04-18
SITE INFORMATION

Test Site:
Ascom US
598 Airport Blvd
Suite 300
Morrisville 27560 NC

Participants:
Karl-Magnus Olsson, Ascom HQ, Gothenburg

TEST TOPOLOGY

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 4

2013-04-18
SUMMARY

Please refer to Appendix B for detailed results for respective access point model.

WLAN Controller Features

High Level Functionality Result
Association, Open with No Encryption OK
Association, WPA-PSK, TKIP OK
Association, WPA2-PSK, TKIP / AES Encryption OK
Association, PEAP-MSCHAPv2 Auth., AES Encryption OK
Association, EAP-TLS OK
Association, Multiple ESSIDs OK
Beacon Interval and DTIM Period OK
Preauthentication Not supported by controller
PMKSA Caching OK (always on)
WPA2-opportunistic/proactive Key Caching OK
WMM Prioritization OK
Active Mode (load test) OK
802.11 Power-save mode OK
802.11 Power-save mode (load test) OK
802.11e U-APSD OK
802.11e U-APSD (load test) OK

Roaming
High Level Functionality Result
Roaming, Open with No Encryption OK
Roaming, WPA-PSK, TKIP Encryption OK
Roaming, WPA2-PSK, AES Encryption OK
Roaming, PEAP-MSCHAPv2 Auth, AES Encryption OK

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 5

2013-04-18
Known issues

• Important. Occasionally no ARP response is sent back to U-APSD clients. The symptom is one-
way speech during the first seconds of a call.

A workaround is available which has been proven to work. Problem is addressed by Juniper in
PR740837. Please contact the interoperability team or support for additional information and
instructions.

For additional information regarding the known issues please contact Alcatel-Lucent support.

Compatibility information

All tests were performed on a Juniper Networks MX(WLC) 2 WLAN controller running version 8.0.2.2.

Based on a Juniper compatibility statement we assure interoperability with all controllers in the MX/WLC
family (2, 8, 200, 216, 800, 880 and 2800).

Supported access points:

MP/WLA 321/322
MP/WLA 422
MP/WLA 522
MP/WLA 532

Note that MP/WLA 371/372 is no longer supported in version 8 and above.

General conclusion

The result of the verified test areas, such as authentication, association, handover and load tests,
produced in general a good result. The roaming times are in general acceptable good with measured
times around 70ms for WPA2-AES/CCMP. Interestingly, the roaming times were slightly better when
using 802.1X authentication (PEAP-MSCHAPv2).

The outcome of the load test was in general very good. In both active and U-APSD mode it was possible
to keep up 18 simultaneously calls per AP one single access point.

In order to use 802.11n speeds and features WPA2 and AES-CCMP encryption must be used, either with
PSK or using Radius server. Open encryption is also supported but is not recommended.

Note that this report covers both legacy access points (MP/WLA422) as well as 802.11n access points
(MP/WLA 321, 322, 522 and 532).

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 6

2013-04-18
TEST RESULTS

Alcatel-Lucent WLAN Infrastructure Verification – VoWiFi

Software Versions:
• Mobility exchange software 8.0.2.2
• MP/WLA 321, 322, 422, 522 and 532 Access Points
• Alcatel-Lucent OT81x8 version 4.1.12

Configuration of WLAN System:

• Beacon Interval: 100ms
• DTIM Period: 5
• 802.11bg(n) (MP/WLA 422 is 802.11abg only while MP/WLA321, 322, 522 & 532 supports
802.11abgn)
• 802.11a(n) (MP/WLA 422 is 802.11abg only while MP/WLA321, 322, 522 & 532 supports
802.11abgn)
• WMM/ U-APSD Enabled (See appendix A for QoS profiles)
• 802.11d Regulatory Domain: World mode

Alcatel-Lucent OT81x8 Configuration:

• World Mode Regulatory Domain set to World mode.
• IP DSCP for Voice: 0x2E (46) – Expedited Forwarding
• IP DSCP for Signaling: 0x1A (26) – Assured Forwarding 31
• Transmit Gratuitous ARP: Enable

Keep in mind that security options and power save modes were adjusted according to requirements in
individual test cases. Please refer to appendix A for information regarding device configuration.

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 7

2013-04-18
APPENDIX A: TEST CONFIGURATIONS

Juniper Networks WLC (MX) Controller version 8.0.2.2.

In the following chapter you will find screenshots and explanations of basic settings in order to get the
Juniper controller operational with Alcatel-Lucent OT81x8. Please note that security settings were
modified according to requirements in individual test cases.

The configuration file is found at the bottom of this chapter.

ESS, Radio and QoS settings

ESS settings. SSID type states if the SSID is open or encrypted. By checking the “Beacon” checkbox the
SSID will be broadcasted.

Enable the “Load Balancing Exempt” to prevent dynamic load balancing of clients and ensure the fastest
possible association. Dynamic load balancing is enabled by default and balances clients by causing an
overloaded radio to be ignore further association requests. This may cause a client device to take longer
to associate to an AP as it must try several times.

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 8

2013-04-18
802.11ng data rates. Alcatel-Lucent recommends disabling the lowest rates.

Note: To further optimize performance it is recommended that 802.11b clients be disallowed from
associating by setting the 6 Mbps or 12Mbps rates to mandatory in the 802.11g configuration.

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 9

2013-04-18
802.11na data rates.

It is recommended to disable Frame Aggregation for the voice SSID. If Frame Aggregation is turned on it
might result in delayed packets and unnecessary jitter

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 10

2013-04-18
By enabling Proxy ARP, the controller will respond to ARP for known devices. It is also recommended to
enable No Broadcast to minimize broadcast traffic.

Configuration of “Diffserv Codepoint” (DSCP). Shown above is the default settings which implies that all
Alcatel-Lucent VoIP devices must mark voice packets with DSCP 0x2e/46 (Expedited forwarding), while
ditto for signaling has to be DSCP 0x1A/26 (AF31).

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 11

2013-04-18
Recommended radio profile settings. U-APSD is not mandatory but is highly recommended as it will
significantly increase the talk time.

Alcatel-Lucent recommends a Beacon interval of 100ms and a DTIM Period of 5. These values are
recommended in order to allow maximum battery conservation without impacting the quality. Using a
lower DTIM value is possible but will reduce the standby time.

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 12

2013-04-18
Make sure QoS mode is set to “WMM”

Alcatel-Lucent recommended settings for 802.11bg(n) are to use only channel 1, 6 and 11. For
802.11a(n), use channels according to the infrastructure manufacturer and/or country regulations.

General guidelines when deploying Alcatel-Lucent OT81x8 handsets (SW version 2.5.7 or later) in
802.11a/n environments:

1. Enabling more than 8 channels will degrade roaming performance. Alcatel-Lucent strongly
recommends against going above this limit.

2. Using 40 MHz channels (or “channel-bonding”) will reduce the number of non-DFS* channels to
two in ETSI regions (Europe). In FCC regions (North America), 40MHz is a more viable option
because of the availability of additional non-DFS channels. The handset can co-exist with 40MHz
stations in the same ESS.

3. Make sure that all non-DFS channel are taken before resorting to DFS channels. The handset
can cope in mixed non-DFS and DFS environments; however, due to “unpredictability” introduced
by radar detection protocols, voice quality may become distorted and roaming delayed. Hence
Alcatel-Lucent recommends avoiding the use of DFS channels in VoWIFI deployments.

*) Dynamic Frequency Selection (radar detection)

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 13

2013-04-18
Security settings

Security profile WPA2-PSK, AES-CCMP encryption.

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 14

2013-04-18
Setting up a Radius profile using 802.1X

Security profile WPA2-Enterprise, CCMP-AES encryption.

AAA/Radius. See Screenshot below for details.

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 15

2013-04-18
The “Key“ and the IP number must correspond to the authentication server running in the network (“Key”
is often mentioned as “Secret”). In this case A FreeRadius server was used during testing. Note that both
a root and a client certificate are needed for TLS. Otherwise only a root certificate is needed.

Configuration:

Juniper controller configuration

See attached file (juniper.conf) for the controller configuration.

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 16

2013-04-18
Alcatel-Lucent OT81x8

Alcatel-Lucent OT81x8 Network configurations (WPA2-PSK)

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 17

2013-04-18
Alcatel-Lucent OT81x8 network settings for 802.1X authentication (PEAP-MSCHAPv2)

If 802.1X Authentication is used a root certificate has to be uploaded to the phone by “right clicking” - >
Edit certificates.

Note that both a root and a client certificate are needed for TLS. Otherwise only a root certificate
is needed. Server certificate validation can be overridden in version 4.1.12 and above per handset
setting (Validate server certificate).

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 18

2013-04-18
APPENDIX B: DETAILED TEST RECORDS

VoWIFI

MP532
Pass 28
Fail 0
Comments 5
Untested 0
Total 33

See attached file (WLANinteroperabilityTestReport.xls) for detailed test results.

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 19

2013-04-18
Document History

Rev Date Author Description

R1 2013-04-18 SEKMO ALE revision R1

Interoperability Report – Alcatel-Lucent OT81x8 / Juniper Networks 20

2013-04-18