This short howto will cover the steps to get your UZH IPSec connection
running by installation of an appropriate policy file, and the steps
required to use it for IFI VoIP. Of course, IPSec is not strictly needed
to use the VoIP functionality, but it comes in handy quite often (when
connecting to UZH's 'public' network, or Swisscom APs).
Some firmwares were buggy w.r.t. VoIP and IPSec. It may be sensible to start off by a firmware upgrade (for instructions, please refer to the support website)
Please be aware, that all VoIP and IPSec entries created prior to an update appear intact afterwards, while they are not! All of these entries have to be deleted and recreated in order to work. (This is a common trap creating lots of confusion)
Note: This information is outdated. Please check out the more recent UZH IPSec instructions for the Nokia E61 at the ICU webpage
In order to use the UZH IPSec with the Nokia E61, you'll have to install and configure an appropriate policy file and configure its use. The phone does not feature a GUI to configure the details on the device itself. Intead, A policy file needs to be created along with a file containing package meta information. These have to be assembled to a '.sis' package file by use of the Symbian S60 SDK, which in turn needs to be signed by Symbian Signed in order to be installable on your phone.
As signing for a range of phone may only be done by some(!) registered developers, we cannot provide you with the signed '.sisx' file, but you'll find the source files along with the unsigned '.sis' in this archive (ZIP, 0 KB).
You need to find out the IMEI of your phone for the next step. You'll usually get it displayed upon typing '*#06#' on your phone.
You need to upload the '.sis' file to the 'Open Signed Online' feature on the SymbianSigned webpage and download the resulting '.sisx' file, which you need to transfer and install on your phone by your preferred medium (e.g. the MiniSD Card's Document folder, installing it by use of the File Mgr. application).
Installation will complain about the policy file not belonging to your phone version and possibly about the non-commercial signature... these warnings have to be ignored in order to install it.
Afterwards, you will need to create a VPN Policy entry using your phone's regular configuration interface, as well as a VPN Access Point entry UZH-VPN (which is to be associated to a regular Access Point and the freshly created Policy).
This VPN access point may be used henceforth at any time the regular Access Point is visible by (almost) any application, so don't shun testing the UZH IPSec configuration now, using (e.g.,) your Web Browser with the 'public' network.
To use the IFI VoIP functionality, you'll have to create the following SIP configuration entry:
Profile name: IFI-VoIP (can be anything you like ;) )
Service profile: IETF
Default access point: UZH-VPN (using the defined VPN APs is recommended, but you'll be able to choose others, when unavailable)
Public user name: sip:[username]@ifi.uzh.ch ([username] should be replaced by your VoIP extension, e.g. 50890)
Use compression: No
Registration: When needed (whatever you prefer... this choice lets you manually start and stop registration)
Use security: No
Proxy server address: sip:voip-external.ifi.uzh.ch
User name: [username] (again: your VoIP extension)
Password: [password] ([password] should be replaced by your VoIP password - as opposed to the VoiceMail PIN)
Allow loose routing: Yes
Transport type: Auto
Registrar serv. addr.: sip:asterisk
Realm: [None] (i.e., this entry is to be left empty)
User name: [None]
Transport type: Auto
Afterwards, you need to create an according Internet telephony entry, which is to be associated with your freshly created SIP configuration entry.
You're done! You should be able to start the registration now using the 'Internet tel.' application in the 'Connectivity' part of your menu... go ahead and test it!
Calls are placed by typing the number and then not pressing the call button, but the 'Options' button instead, choosing 'Call->Internet call'
- It is possible to define two SIP profiles for both the internal and external interface and associate them both to the same internet telephony entry, thereby letting the device choose the appropriate, if necessary
- Firewalls sometimes close connections after a prolonged period of inactivity... if you experience situations, in which your phone considers itself registered, but incoming calls are not working after a while, it might be worthwile to enable keepalives by installing this application (ZIP, 0 KB) and configuring 'CRLF refresh' to 'on'. (The application also allows you to set several other options, like whether you'd like to be able to use VoIP over UMTS ;) )
- Other Symbian S60 phones are also capable of using both VoIP and IPSec, but may have to install the appropriate software beforehand (usually available on the internet)