A COMPLETE GUIDE TO WIRELESS CONFIGURATION
`
`mm
`
`i iM
`M.
`
`p4
`
`'.».i
`m
`
`‘
`-V '9
`
`7S%
`A.
`
`i
`
`/*
`
`/
`/,
`
`L
`
`>«.
`[&
`
`IP
`
`Pi
`
`mi
`Ww
`
`Ai
`
`fJhk-*-
`'ms
`
`i VIm
`
`''w’S
`
`m
`
`tot
`Wi
`m£
`m
`
`/j
`
`3sr
`S?!wJ
`it: vfrlJ
`
`O’REILLY
`
`ROGER WEEKS,
`EDD DUMBILL & BRIAN JEPSON
`
`Google - Exhibit 1029, cover
`
`

`
`LINUX
`UNWIRED
`
`Roger Weeks, Edd Dumbill,
`and Brian Jepson
`
`O’REILLY*
`Beijing * Cambridge • Farnham * Koln • Paris • Sebastopol ■ Taipei * Tokyo
`
`Google - Exhibit 1029, page i
`
`

`
`Linux Unwired
`by Roger Weeks, Edd Dumbill, and Brian Jepson
`Copyright © 2004 O’Reilly Media, Inc. All rights reserved.
`Printed in the United States of America,
`Published by O’Reilly Media, Inc., 1005 Cravenstein Highway North, Sebastopol, CA 95472.
`O’Reilly & Associates books may be purchased for educational, business, or sales promotion­
`al use. Online editions are also available for most titles {safari.omify.com). For more informa­
`tion, contact our corporate/instkutional sales department: (800) 998-9938 or
`c0rpamte@9reilly.com.
`Editor:
`Production Editor:
`Cover Designer:
`Interior Designer:
`
`Brian Jepson
`Sarah Sherman
`Emma Colby
`David Futato
`
`Printing History:
`April 2004:
`
`First Edition.
`
`Nutshell Handbook, the Nutshell Handbook logo, and the O’Reilly logo are registered
`trademarks of O’Reilly Media, Inc. The Linux series designations, Linux Unwired, images of
`the American West, and related trade dress are trademarks of O’Reilly Media, Inc,
`Many of the designations used by manufacturers and sellers to distinguish their products are
`claimed as trademarks. Where those designations appear in this book, and O’Reilly Media,
`Inc. was aware of a trademark claim, the designations have been printed in caps or initial
`caps.
`While every precaution has been taken in the preparation of this book, the publisher and
`authors assume no responsibility for errors or omissions, or for damages resulting from the
`use of the information contained herein.
`
`This book uses RepKover" a durable and flexible lay-flat binding,
`
`ISBN: 0-596-00583-0
`fMJ
`
`Google - Exhibit 1029, page ii
`
`

`
`timeslots your device supports for upstream data, as well as by the number
`of timeslots your cellular carrier makes available for this purpose.
`EDGE is an improvement over GSM in that it increases the data rate per
`timeslot significantly. Instead of 9.6 kbps to 13.4 kbps, EDGE supports
`between 48 and 70 kbps per timeslot. However, to take advantage of EDGE
`speeds, you need a handset or PC Card that supports EDGE, such as the
`Nokia 6200 cell phone or the Sony Ericsson GC82 PC Card Modem. EDGE
`devices are backward-compatible with GSM and GPRS, $0 if you’re in a loca­
`tion without EDGE coverage, you can still connect at the slower GPRS speeds.
`GSM devices require the installation of a Subscriber Identity Module (SIM).
`You (or the salesperson) insert this card when you first get the phone. If you
`have more than one phone, you can swap SIMs and use the phone that is
`currently holding the SIM. However, most cellular providers lock the device
`to their network, so you can use the phone onlwith them. So, if you buy a
`phone from AT&T Wireless and Insert the SIM you bought from T-Mobile,
`you’ll receive an error message. However, there are many ways to remove
`this lock. Some carriers will do it for you if you contact their customer sup­
`port and ask; this is usually done for customers who have been with the car­
`rier for a while, have an account in good standing, and are planning to use
`the phone overseas (you can save money by buying a pay-as-you-go SIM
`from a local cellular provider and swapping SIMs while you are abroad).
`Figure 9-1 shows a Nokia 6200 that is being inserted with an AT&T Wire­
`less SIM card (that’s the battery next to it, which we had to remove to get at
`the SIM).
`
`IxRTT and IxEV-DO
`IxRTT is an improvement to CDMAone, the first version of Code Division
`Multiple Access (CDMA), a digital cellular protocol that supported data
`rates up to 14.4 kbps. IxRTT cranks it up to 144 kbps upstream and down­
`stream. Instead of slicing up cellular channels by timeslots, CDMA uses
`spread-spectrum technology to support multiple users in each 1.25 MH~
`wide CDMA channel within the 800 and 1900 MHz bands. Each user within
`a given CDMA channel is associated with a code, and their signals (tagged
`with the associated code) are spread across the channel, although CDMA is
`not as widespread as GSM, there are still many users (188 million at the end
`of 2003). It’s available in the U.S., parts of Asia, Latin America, and Europe.
`IxEV-DO improves on IxRTT by supporting burst speeds up to 2.4 Mbps
`while still keeping channels only 1.25 MHz wide. At the time of this writ­
`ing, Verizon Wireless has begun IxEV-DO trials in San Diego and Washing­
`ton, D.C, (priced the same as its IxRTT offering). Initial reports indicate
`that 300-500 kbps are the likely real-world speeds.
`
`Cellular Data | 243
`
`0
`
`Google - Exhibit 1029, page 243
`
`

`
`Figure 9-1. Inserting a SIM card into a Nokia 6200
`CDMA phones do not use SIM cards. As a result, you can’t move your
`account to a new phone as easily as you can with GSM phones. You must
`contact your cellular provider, deactivate the old phone, and activate the
`new one. (Your carrier may also allow you to do this through its customer
`support web site),
`Some Cellular Carriers
`There are major cellular carriers around the world; This section looks at
`some of the major U.S. providers. Of the ones described here, we have
`hands-on experience with Sprint, Verizon Wireless, AT&T Wireless, and
`T-Mobile.
`To connect to the Internet using a GPRS carrier, you must specify an Access
`Point Name (APN), which is the name of a gateway on the carrier’s network
`that gets you on the Internet. After that, dial *99#*” 1# to connect, APNs
`for networks not listed here can be found in a variety of places online, but
`your best bet is to contact your cellular provider. Opera Software maintains
`a list of user-submitted carriers and APNs at http://www.opera.com/products/
`smartphone/docs/connect/.
`
`244 | Chapter* Cellular Networking
`
`Google - Exhibit 1029, page 244
`
`

`
`All plans and prices listed in the following sections are accurate as of this
`writing, but are subject to change.
`AT&T Wireless
`AT&T Wireless (http://www.aitwireless.com) offers GSM service with GPRS
`under a variety of plans. Its consumer-oriented mMode plan tops out at 8
`megabytes of data per month for $19.99, with additional megabytes costing
`about six dollars each.
`mMode plans must be accompanied by a voice plan. However, AT&T Wire­
`less offers standalone Mobile Internet data plans starting at $29.99 for 10
`megabytes (about three dollars per additional megabyte), going up to $79.99
`a month for unlimited data (you can also add these plans to service with an
`existing voice plan). In late 2003, AT&T rolled out support for EDGE on its
`North American network.
`AT&T Wireless uses a GPRS APN named proxy, which also works with its
`EDGE data service. You can set your APN with the following AT command
`sequence;
`AT+CODCGNT-l, "IP", "proxy”
`AT&T Wireless maintains online support forums at http;//forums.
`attwireless.com/attws that are valuable more for the community discussion
`than for the actual tech support that goes on there. Check out the mMode
`and G$M.(TM)/GPRS/EDGE General Discussion forums for insights into
`AT&T Wireless’ data services.
`At the time of this writing, Cingular has just purchased AT&T Wireless, and
`it is expected to merge its network with AT&T’s by the end of 2004.
`Whether that changes any of the AT&T Wireless-related instructions in this
`chapter remains to be seen. For more information, consult this book’s errata
`at http://wvm.oreilly.com/catalog/lnxmwired.
`T-Mobile
`T-Mobile (http://www.t-mobile.com), formerly VoiceStream, offers GSM and
`GPRS in a number of markets across the globe. Its unlimited (T-Mobile
`Internet Unlimited) data plans are available as an add-on to voice service or
`as separate plans. You can add unlimited GPRS data for $19.99 a month
`with a qualifying voice plan ($29.99 and higher). Otherwise, unlimited
`GPRS data is $29,99 a month.
`Don’t confuse T-Mobile’s t-zones plan with its T-Mobile Internet Unlimited
`plan. The $4.99 and $9,9.9 a month t-zones plans are designed for users who
`
`Some Cellular Carriers j 245
`
`Google - Exhibit 1029, page 245
`
`

`
`use the Internet exclusively from their handset, and some users have
`reported that services such as SSH (and practically anything that isn’t
`HTTP, SMTP, or POP3) don’t work with these plans.
`As of late 2003, T-Mobile had not rolled out EDGE in any of the markets we
`tested.
`T-Mobile uses two different APN$; internet2.volcestreaffi.com and
`internets.voicestream,com, internet2.voicestream.com gives you a private
`network IP address, which may cause headaches with VPN connections, and
`internets.voicestream,com gives you a public IP address, which may cause
`headaches when people to try break into your machine. If you want to use
`internets,voicestream.cow, you must be on the T-Mobile Internet Unlim­
`ited VPN plan, which costs the same as T-Mobile Internet Unlimited. If you
`aren’t sure which plan you are on, contact T-Mobile customer service to find
`out. You can set your APN with one of the following AT command
`sequences:
`AT+CQDCONT-l, ’IP* /internets. voicestream. com*
`AI+CGDCCWT*!, "IP" /internets .voicestream. cow"
`Cingular Wireless
`Cingular Wireless {http://www,dngu!ar,com) is also a GSM/GPRS provider.
`Its Wireless Internet Express pricing plans are similar to AT&T’s mMode
`and Mobile Internet plans: for $24.99 a month, you can get 10 megabytes of
`data, and each additional megabyte is about four dollars. Its unlimited plan
`is $74.99 per month.
`As of late 2003, Cingular Wireless had rolled out trial EDGE support in one
`market (Indianapolis).
`Cingular Wireless uses a GPRS APN named isp. cingular. You can set your
`APN with the following AT command sequence:
`AT+CGDCONT-l, "IP"/isp.cingular"
`Verizon Wireless
`Verizon Wireless (http://www.verizonwirekss.com) offers CDMA service
`with IxRTT and IxEV-DO for data. Its advertised data plans are available as
`add-ons to a voice plan or as standalone data plans. Although it is not adver­
`tised on its site, many users have reported that the America’s Choice voice
`plan minutes can be used for data; but many users have reported that Veri­
`zon does not permit this, so unless you get something in writing that indi­
`cates your plan allows this, we suggest that you use an add-on data plan.
`
`246 | Chapter* Cellular Networking
`
`Google - Exhibit 1029, page 246
`
`

`
`Example 9-1. Kermit session with the Novatel Wireless Merlin C201 (continued)
`The escape character is Ctrl-\ (ASCII 28, FS)
`Type the escape character followed by C to get back,
`or followed by ? to see other options.
`
`at
`OK
`at+csq?
`+CSQ: 22, 00000000,00000000
`
`OK
`
`If you can’t .see the commands you are typing but are still
`getting a response, the modem is probably set to not echo
`' gfc the commands that you type. You can reset this with the
`“ command ATE1 or reset the modem to its defaults with
`ATZ.
`■
`
`Set manufacturer information
`Get mobile model
`Set model revision
`
`Get serial number
`Get service Information (analog or
`digital)
`Get serving system information
`
`AT+GMI
`AT+GMH
`AT+CMR
`
`AT+GSN
`AT+CAD?b
`
`AT+CSS?i>
`
`Table 9-2, Some of the AT commands recognized by cellular modems
`Command
`Syntax
`Sample response from Q01
`VI- *
`+CBC: 0,65 (First Integer; 0=nmnlng on battery,
`Get battery charge Information
`AT+C8C?3
`1=<harging, Instate no available, 3=power fault;
`second Integer: percentage charge remaining) Not
`applicable to the QOI, because It's powered by the
`PCMCIA bus
`+GMI: Novatel Wireless Inc.
`+CMM: COMA Merlin 1900MHz
`+GMR: F/W VER: 1065 S/W VER: BM3.0.10
`lun 11 03 14:45:56 BOOT VER: 1-1
`+GSN: 00000000
`+CAO; 1 (0-no service, 1—COMA digital, 2=IDMA
`digital, 3=anatog)
`+CSS: 1,1 4106 (First integer; Q=unknown band,
`1=800MHz, 2=1900MHz; second integer: mobile sta­
`tion Mock; third integer: system identifier)
`+CSQ: 5, 00000291,00000241 (first Integer:
`signal strength from 0-11; last Integers: frame error
`rate)
`
`Get signal quality
`
`AT+CSQ?3
`
`* Do not include the? for 6SM phones or modems.
`► Not supported by the S5M phones or modems that we tested.
`
`The Tao of Mac maintains a list of GSM AT commands at http://the.
`taoofmac.com/space/AT%20Cotnmands.
`
`Phones and Cards j 249
`
`Google - Exhibit 1029, page 249
`
`

`
`CDMA PC Card
`The Novatel Wireless Merlin C201 (Figure 9-2} is a CDMA IxRTT PC Card
`offered by Sprint that is automatically recognized by all the versions of
`Linux we tested (Mandrake 9.2, Gentoo 1.4, and Debian 3.0). It appears as
`two serial ports starting at the highest unused serial port. So, on a ThinkPad
`A20m running Debian 3.0, there were already two serial ports (ttySO and
`ttyST). When we plugged in the C201 card, two more were detected: ttyS2,
`which is the CDMA, modem, and ttyS3, a status port for the modem (whose
`purpose is unknown to us but is not necessary to connect to the Internet).
`
`Figure 9-2. The Novatel Wireless Merlin C201 card
`
`As of this writing, there is no way to provision (perform the initial activa­
`tion with the Sprint network) this card without a PC running Microsoft
`Windows. Novatel Wireless technical support confirmed this but men­
`tioned that upcoming firmware may come out that supports provisioning on
`
`Phones and Cards | 251
`
`Google - Exhibit 1029, page 251
`
`

`
`any operating system. Unless that happens, you must get access to a Win­
`dows notebook long enough to install the software that comes with the
`card, activate it, and verify that you can connect to the network before try­
`ing it with Linux,
`To get online with the Merlin C201, use a PPP connection and the phone
`number #777, If you use a regular phone number, you’ll end up making a
`CSD call, which may incur per-minute charges. When you dial #777, you’ll
`incur whatever charges are applicable under your data plan. To set up a data
`connection with the €201, first create the /etdppp/peers/sprint-pcs file shown
`in Example 9-2. You must change the first two lines to specify your device
`(for example, /dev/ttySZ).
`
`Example 9-2, PPP peer settings for Sprint PCS and the Merlin C201
`# File: /etc/ppp/peers/sprint-pcs
`#
`/dev/YOUR DEVICE
`# device
`init "setserial /dev/YOURJ5IVICE baud_base 230400s
`
`'
`
`# speed
`115200
`defaultroute # use the cellular network for the default route
`# use the DNS servers from the remote network
`usepeerdns
`# keep pppd in the foreground
`nodetach
`# hardware flow control
`crtscts
`# lock the serial port
`lock
`# don’t expect the modem to authenticate itself
`noautb
`
`# scripts for connection/disconnection
`
`"/usr/sbin/chat -v -f /etc/chatscripts/sprint-connect*
`connect
`disconnect Vusr/sbin/chat -v -f /etc/chatscripts/sprint-disconnect"
`
`The Merlin C201 is a bit of an oddball. You must use setserial
`to specify twice the actual speed you want to use, (Thanks to
`^****^1 the folks at tutnmy.com for this information, found on http://
`www.tummy.com/articles/laptops/merlm-c201/)
`
`Next, create the /etc/chatscripts/sprint-connect and /'etcJchatscripts/sprint-
`disconnect scripts, shown in Example 9-3 and Example 9-4,
`
`Example 9-3. PPP connect script for Sprint PCS and the Merlin C201
`# File: /etc/chatscripts/sprint-connect
`
`#T
`
`IMEOUT 10
`ABORT
`‘BUSY ’
`ABORT
`’NO ANSWER ’
`’NO CARRIER*
`ABORT
`’Starting CDMA connect scriptW
`SAY
`
`252 | Chapter?: Cellular Networking
`
`Google - Exhibit 1029, page 252
`
`

`
`Example 9-3. PPP connect script for Sprint PCS and the Merlin C201 (continued)
`# Get the modem's attention and reset it.
`t *
`•ATZ’
`
`# Eo*No echo, Vl*English result codes
`OK 'ATEOVl*
`
`# Dial the number
`'Dialing...\n*
`SAY
`OK
`'ATD#777'
`i *
`CONNECT
`Example 9-4. PPP disconnect script for Sprint PCS and the Merlin C201
`# File: /etc/chatscripts/sprint-disconnect
`#
`* M
`SAY
`
`"\K"
`"•mATHO*
`"CWSA disconnected."
`
`After you’ve set up these scripts, issue the command pppd call sprint-pcs
`as root. Press Ctrl-C to invoke the disconnect script and hang up the PPP
`connection.
`*5,
`
`If your carrier requires a username and password, set the
`4 m user aiK^ remote_name options as shown in Example 9-5, and
`‘ create a chap^secrets file, as shown in Example 9-6.
`CDMA Phone with Data Cable
`The Motorola vl20e (see Figure 9-3) is a CDMA IxRTT phone offered by
`Verizon Wireless. You must modprobe or insmod the acm.o (the USB Abstract
`Control Model drive) module for this phone to be recognized. The vl20e
`appears as a serial port named /dev/ttyACMO.
`
`The Motorola vl20e does not require the provisioning step
`typically required of PCMCIA cards (see “CDMA PC Card"
`**.
`M* 4
`3$ earlier in this chapter). Simply using the data connection for
`“ the first time provisions the phone.
`
`To get online with this phone, create a PPP connection using the phone
`number #777. You can also use this phone to connect to dial-up service (see
`“CSD” earlier in this chapter), but per-minute charges will apply, and you’ll
`get a maximum speed of 14.4 kbps. To set up a data connection for this
`phone, first create the /etdppp/peers/verizon file shown in Example 9-5. Be
`sure the device name corresponds to that of your phone (use dmesg to see
`
`Phenes and Cards | 253
`
`Google - Exhibit 1029, page 253
`
`

`
`w
`
`S •
`
`Figure 9-3, The Motorola vl20e CDMA phone
`which device the phone was associated with), although it will probably be /
`dev/ttyACMO. You must supply your phone number followed by fvzwSg.coin
`as your username in the verizon file, and specify vzw as your password in the
`kidppp!chap-secrets file shown in Example 9-6 (the verizon in the server
`column in chap-secrets corresponds to the remote_name specified in the ietcf
`ppp/peers/verizon file).
`
`Example 9-5. PPP peer settings for Verizon Wireless and the Motorola vl20e
`# File: /etc/ppp/peers/verizon
`#
`
`254 1 Chapter?: CeflutarNetworking
`
`Google - Exhibit 1029, page 254
`
`

`
`Example 9-5. PPP peer settings for Verizon Wireless and the Motorola v!20e (continued)
`/dev/ttyACMO # device
`'
`# The following two settings need a corresponding entry in
`# /etc/ppp/ehap-secrets,
`•
`user Y0U8_C£LLUtARJPH0NE_ttflBER#vzw3g. com
`remotename verizon
`
`# speed
`115200
`# use the cellular network for the default route
`defaultroute
`# use the OTIS servers from the remote network
`usepeerdns
`# keep pppd in the foreground
`nodetach
`# hardware flow control
`crtscts
`# lock the serial port
`lock
`# don’t expect the modem to authenticate itself
`noauth
`
`novj
`novjccomp
`# scripts fox connection/disconnection
`'Vusr/sbin/chat -v -f /etc/chatscripts/verizon-connect"
`connect
`disconnect Vusr/sbin/chat -v -f /etc/chatscripts/verizon-disconnect“
`Example 9-6. CHAP password for Verizon wireless connection
`# File: /etc/ppp/chap-secrets
`#
`# Secrets for authentication using CHAP
`# client
`Y0URJELLUlAR_PHONEJMUMBER#vzw3g. com
`
`'
`server secret IP addresses
`*
`verizon vzw
`
`Next, create the /etc/chatscripts/verizon-connect and /etc/chatscripts/verizon-
`disconnect scripts, shown in Example 9-7 and Example 9-8.
`■
`
`Example 9-7, PPP connect script for Verizon Wireless and Motorola vl20e
`# File: /etc/ehatscripts/verizon-connect
`
`#T
`
`IMEOUT 10
`ABORT
`’BUSY ’
`’NO ANSWER*
`ABORT
`'NO CARRIER'
`ABORT
`SAY 'Starting CDMA connect scriptNn
`
`# Get the modem's attention and reset it.
`•ATZ
`
`# £0*No echo, Vl-English result codes
`'ATEOVl*
`OX
`
`# Dial the number
`SAY 'Dialing,,An.
`’
`
`Phones and Cards | 255
`
`Google - Exhibit 1029, page 255
`
`

`
`Figure 9-4, The Nokia 6200 EDGE/GPRS phone
`To set up your PPP connection, first create the /etc/ppp/peersfatlm file
`shown in Example 9-9, Be sure the device name corresponds to that of your
`phone (use dmesg to look at the device that the phone was assigned to),
`although it will probably be /dev/ttyUSBO.
`
`Example 9-9, PPP peer settings for AT&T Wireless and the Nokia 6200
`/dev/ttyUSBO # USB-serial port
`it speed
`230400
`defaultroute # use the cellular network for the default route
`# use the DNS servers from the remote network
`usepeerdns
`# keep pppd in the foreground
`nodetach
`# hardware flow control
`artscts
`# lock the serial port
`lock
`# don't expect the modem to authenticate itself
`noautb
`
`connect
`Vusr/sbin/chat -v -f /etc/chatscripts/attws-connect"
`disconnect Vusr/sbin/chat -v -f /etc/chatscripts/attws-disconnect"
`
`Next, create the /etc/chatscripts/attws-connect and /etc/chatscripts/attws-dis-
`connect scripts, shown in Example 9-10 and Example 9-1L If you are using a
`
`Phones and Cards 257
`
`Google - Exhibit 1029, page 257
`
`

`
`branded iStream (see Figure 9-5), Under the hood, it’s a Novatel Wireless
`Merlin G100 GPRS PCMCIA modem. We like this card because it’s cheap
`(we picked ours up for $50 on eBay) and we have received faster downloads
`with it than with other GPRS phones that we’ve used,
`
`Figure 9-5, The (VoiceStream branded) Novatel Wireless Merlin G1QQ GPRS card
`Linux automatically detects this as a serial card; when you insert the card,
`look for messages in the system log or the output of dmesg to see the port
`it’s assigned to. On our system, it shows up as fdeviltySl (dmesg reports
`“ttyS02 at port 0x03e8,” and ttyS02 corresponds to /dev/tty$2).
`To connect to the Internet with this phone, you must set up a PPP connec­
`tion that sets the APN (see “Some Cellular Carriers” earlier in this chapter)
`and dials the number (*99***i#) for making a GPRS connection. In theory,
`you could dial the number of a dialup ISP (see “CSD” earlier in this chapter).
`To set up your PPP connection, first create the /etc/ppp/peers/tmobile file
`shown in Example 9-12 Be sure the device name corresponds to that of the
`PCMCIA card.
`
`Phones and Cards | 259
`
`Google - Exhibit 1029, page 259