Navigation auf uzh.ch
This short howto will cover the steps to get your UZH IPSec connection
running by installation of an appropriate policy file, and the steps
required to use it for IFI VoIP. Of course, IPSec is not strictly needed
to use the VoIP functionality, but it comes in handy quite often (when
connecting to UZH's 'public' network, or Swisscom APs).
Some firmwares were buggy w.r.t. VoIP and IPSec. It may be sensible to start off by a firmware upgrade (for instructions, please refer to the support website)
Please be aware, that all VoIP and IPSec entries created prior to an update appear intact afterwards, while they are not! All of these entries have to be deleted and recreated in order to work. (This is a common trap creating lots of confusion)
Note: This information is outdated. Please check out the more recent UZH IPSec instructions for the Nokia E61 at the ICU webpage
In order to use the UZH IPSec with the Nokia E61, you'll have to install and configure an appropriate policy file and configure its use. The phone does not feature a GUI to configure the details on the device itself. Intead, A policy file needs to be created along with a file containing package meta information. These have to be assembled to a '.sis' package file by use of the Symbian S60 SDK, which in turn needs to be signed by Symbian Signed in order to be installable on your phone.
As signing for a range of phone may only be done by some(!) registered developers, we cannot provide you with the signed '.sisx' file, but you'll find the source files along with the unsigned '.sis' in this archive (ZIP).
You need to find out the IMEI of your phone for the next step. You'll usually get it displayed upon typing '*#06#' on your phone.
You need to upload the '.sis' file to the 'Open Signed Online' feature on the SymbianSigned webpage and download the resulting '.sisx' file, which you need to transfer and install on your phone by your preferred medium (e.g. the MiniSD Card's Document folder, installing it by use of the File Mgr. application).
Installation will complain about the policy file not belonging to your phone version and possibly about the non-commercial signature... these warnings have to be ignored in order to install it.
Afterwards, you will need to create a VPN Policy entry using your phone's regular configuration interface, as well as a VPN Access Point entry UZH-VPN (which is to be associated to a regular Access Point and the freshly created Policy).
This VPN access point may be used henceforth at any time the regular Access Point is visible by (almost) any application, so don't shun testing the UZH IPSec configuration now, using (e.g.,) your Web Browser with the 'public' network.
To use the IFI VoIP functionality, you'll have to create the following SIP configuration entry:
Profile name: IFI-VoIP (can be anything you like ;) )
Service profile: IETF
Default access point: UZH-VPN (using the defined VPN APs is recommended, but you'll be able to choose others, when unavailable)
Public user name: sip:[username]@ifi.uzh.ch ([username] should be replaced by your VoIP extension, e.g. 50890)
Use compression: No
Registration: When needed (whatever you prefer... this choice lets you manually start and stop registration)
Use security: No
Proxy server:
Proxy server address: sip:voip-external.ifi.uzh.ch
Realm: asterisk
User name: [username] (again: your VoIP extension)
Password: [password] ([password] should be replaced by your VoIP password - as opposed to the VoiceMail PIN)
Allow loose routing: Yes
Transport type: Auto
Port: 5060
Registrar server:
Registrar serv. addr.: sip:asterisk
Realm: [None] (i.e., this entry is to be left empty)
User name: [None]
Password: [None]
Transport type: Auto
Port: 5060
Afterwards, you need to create an according Internet telephony entry, which is to be associated with your freshly created SIP configuration entry.
You're done! You should be able to start the registration now using the 'Internet tel.' application in the 'Connectivity' part of your menu... go ahead and test it!
Calls are placed by typing the number and then not pressing the call button, but the 'Options' button instead, choosing 'Call->Internet call'