[sg60611]

I am unable to get UMA even when I am connected to the free Wi-Fi in public places. I get a W006.3 error message. I can get UMA at home and work with no problem.

Is there some setting I need to change on my phone?.

Thanks

[ezrunner]

Wirelessly posted (overwhelmingly stressed)

I believe that in order for uma to work they would need an appropriate wireless router. I may be wrong but that is what comes to mind first

[NJBlackBerry]

There are many places that don't support/allow UMA even through you can get WiFi. Panera Bread is one of them. I recall that someone (John Clark?) created a thread about public spots where UMA did and didn't work, but have no idea where the thread is.

[sg60611]

Thanks for the info.

If anyone knows where that thread is pls let me know.

[penguin3107]

Originally Posted by sg60611

If anyone knows where that thread is pls let me know.

This website has a 'Search' feature.

[NJBlackBerry]

Originally Posted by penguin3107

This website has a 'Search' feature.

Who knew. I search "Panera" and got this..

http://www.blackberryforums.com/wifi...rk-8320-a.html

[woodyofid]

It is not so much a matter of supporting UMA as it is not interfering with a user/customer's IP traffic. If UMA does not work on a given WiFi connection there is likely traffic blocking/restriction going on.

For UMA to work, the phone needs to be able to speak isakmp/ipsec to T-Mo's (or your carrier's) central server and then after the IPSec negotiation (UDP port 500) and establishment, needs outbound UDP port 4500 and TCP port 443 to be open. It looks at a very quick glance that 443 is the control/signaling/data channel (SSL encrypted) while 4500 is used for the audio/voice traffic (IPSec encrypted); UDP 500 is the isakmp/ipsec negotiation.

This was validated on a NAT boundary/router, so on a non-NAT setup your 4500 port may vary. However for free/open APs, NAT is the rule, not the exception. Even for pay APs, NAT is the rule.

The AP provider has to go to some length to make UMA *not* work. He has to restrict outbound traffic flow (sadly becoming more common). In the case of airports or hotels and the like, once you authenticate (web browser) to their network system, they should then allow the free flow of normal network traffic. They should be expecting their (corporate traveling) customers to be using IPSec and SSL tunnels and thus to make the customers happy by NOT blocking such.

Something interesting to note is that if you attach to a Access Point and notice (without using your browser or any other application) that you keep getting spurious certificate errors, somebody (the AP owner most likely) is force redirecting port 443 (transparent proxy). If you accept the invalid certificate, then your control/signaling/data traffic is subject to third-party monitoring. *Possibly* the audio channel is also compromised. I do not know the certificate/key relationship between the 443 and 500/4500 traffic.

Enjoy,

Woody

[b52junebug]

Woody, I contacted my technical rep at Tmobile here is his response:
Regardless of the Wi-Fi security, the voice is still GSM encrypted inside an IPSec tunnel. The voice is at least as secure as a regular call. In my opinion, it is more secure.

[sg60611]

I have been trying the free wi-fi in several public places and it says its connected when you look at the connection magager. However, the wifi symbol is still grayed out. Then when I look under wi-fi tools it says UMA connection available but under that it has an "x" by connected.

Is this a phone problem or a router issue? Can anyone help?

[woodyofid]

Originally Posted by sg60611

I have been trying the free wi-fi in several public places and it says its connected when you look at the connection magager. However, the wifi symbol is still grayed out. Then when I look under wi-fi tools it says UMA connection available but under that it has an "x" by connected.

Is this a phone problem or a router issue? Can anyone help?

In the Connection Manager you have a check to the right of "WiFi"? The "Mobile Network" or top line check indicates cell-tower EDGE/GSM service.

In the Connection Manager does the WiFI indicate the access point name? That should also be indicated on the main screen where it normally says "T-Mobile". When I am at home, the main screen says "T-Mobile - Wizardofid" where Wizardofid is my AP SSID/wireless profile name.

There are actually three levels of 'connection' for UMA to function.

1) AP (wireless) association (establish link layer and local IP address; Options -> Status will tell you if you have and what the IP address is)
2) IPSec/SSL data links to T-Mobile server (this is what lights up the "WiFi" symbol I think; the phone has successfully 'called home' via IP)
3) GSM tunnel (see previous post above) within the IPSec/SSL tunnels for the actual UMA service (indicated by the UMA symbol)

Do you explicitly pay for UMA service (T-Mo's market name 'HotSpot')? On T-Mobile it is an additional $10 (if I remember correctly) on top of your regular plan. Generic data service (ability to browse the web at large and use non-T-Mobile IP enabled applications) is an additional charge on top of UMA but is not required for UMA.

[sg60611]

Yes- wifi is checked in the connection maganger, the top bar on the home screen has the name of the wifi network I am trying to connect to and I explicitly pay for hotspot service.

If it says UMA available, should I be able to connect? I apologize if I'm being naiive about the topic and I appreciate the help!

[woodyofid]

Originally Posted by sg60611

Yes- wifi is checked in the connection maganger, the top bar on the home screen has the name of the wifi network I am trying to connect to and I explicitly pay for hotspot service.

If it says UMA available, should I be able to connect? I apologize if I'm being naiive about the topic and I appreciate the help!

Options -> Status. Do you have an IP address?

[sg60611]

When I am trying to connect to the public wifi or when I am home on my wifi?

I have an IP address when I am on my home wifi but I have never checked when I am trying to connect outside of my home.

[woodyofid]

Let's be clear. At home, does WiFi/UMA work as you expect?

[sg60611]

yes

[woodyofid]

At the public spot in question, check to see if you have an IP address. If you do, then they are likely blocking the necessary outbound (UDP) ports. If you dont then, their DHCP service is broken or at least does not like you(r device).

Are you sure that the public place(s) in question do not require some type of web based authentication (or agreement to terms of service) in order to allow your traffic to flow?

[callcom]

This past weekend while visiting my brother, I noticed I had no signal what-so-ever. He said that this was normal in his area, where all carriers either don't have a signal or very weak at best. So I immediately did a search for WiFi networks and found that 2 were available (one open, one secured). So happens the open WiFi network was his own linksys router. After a few seconds, the phone established a network connection (UMA), and I was able to make/receive calls, email and text messages. He was amazed that I was able to get a cell connection (through his router), when normally, there isn't any cell access in his area (on any carrier). That's my one and only UMA connection story...and it works!

[sg60611]

Yesterday I was in a T-Mobile hotspot and easily got a UMA connection. I guess this means that it's router/phone connection issue in the places I can't connect and nothing I can do about it.

Thanks for all of your help.