Silicon Laboratories Finland WRAPAS229X Bluetooth Access Server User Manual Manual

Silicon Laboratories Finland Oy Bluetooth Access Server Manual

Manual

Access ServerUser’s and Developer’s GuideBluegiga Technologies
Access Server: User’s and Developer’s Guideby Bluegiga TechnologiesPublished 2007-01-22 (3.1)Copyright © 2001, 2002, 2003, 2004, 2005, 2006, 2007 Bluegiga TechnologiesBluegiga Technologies reserves the right to alter the hardware, software, and/or specifications detailed herein at any time withoutnotice, and does not make any commitment to update the information contained herein. Bluegiga Technologies assumes noresponsibility for any errors which may appear in this manual. Bluegiga Technologies’ products are not authorized for use as criticalcomponents in life support devices or systems.The WRAP is a registered trademark of Bluegiga Technologies. iWRAP, WRAP THOR and WRAP Access Server are trademarks ofBluegiga Technologies.The Bluetooth trademark is owned by the Bluetooth SIG Inc., USA, and is licensed to Bluegiga Technologies.ARM and ARM9 are trademarks of ARM Ltd.Linux is a trademark of Linus Torvalds.All other trademarks listed herein belong to their respective owners.
Table of Contents1. Introduction to Access Server............................................................................................................11.1. Licenses and Warranty ............................................................................................................21.2. Bluegiga Technologies Contact Information ........................................................................22. Getting Started with Access Server..................................................................................................32.1. Powering Up .............................................................................................................................32.2. WWW Interface ........................................................................................................................42.3. Shell Prompt Access.................................................................................................................72.3.1. Management Console .................................................................................................72.3.2. Accessing Remotely.....................................................................................................82.3.3. Transferring Files to/from Access Server ................................................................92.4. Introduction to Configuration................................................................................................92.5. Using the Setup WWW Interface.........................................................................................102.6. Using the setup Command Line Application ....................................................................172.7. Resetting a Configuration .....................................................................................................182.8. Exporting and Importing Configurations...........................................................................183. Using the System ...............................................................................................................................193.1. Network Interfaces.................................................................................................................193.2. Bluetooth .................................................................................................................................193.2.1. iWRAP Password Protection ...................................................................................193.2.2. LAN Access Profile....................................................................................................203.2.3. Serial Port Profile .......................................................................................................203.2.4. Object Push and File Transfer Profile......................................................................213.2.5. PAN Profiles ...............................................................................................................223.2.6. Changing the Bluetooth Range................................................................................223.2.7. BTCLI - iWRAP Command Line Interface Utility ................................................223.2.8. serialbluetooth............................................................................................................223.3. Compact Flash Cards.............................................................................................................233.3.1. Compact Flash GPRS Cards.....................................................................................233.3.2. Compact Flash GPS Card .........................................................................................233.3.3. Compact Flash Wi-Fi Cards......................................................................................243.4. USB Memory Dongles and Compact Flash Memory Cards ............................................243.5. Servers......................................................................................................................................253.5.1. Finder ..........................................................................................................................263.5.2. ObexSender ................................................................................................................263.5.3. SMS Gateway Server.................................................................................................263.5.4. User Level Watchdog ................................................................................................273.5.5. Remote Management ................................................................................................273.5.5.1. Overview........................................................................................................273.5.5.2. Management Packet Format........................................................................283.5.5.3. Management Packet Information File Format..........................................283.5.5.4. Management Operation Example: Hello World.......................................293.5.5.5. Management Operation Example: Software Update...............................303.5.5.6. Management Operation Example: IPQUERY ...........................................303.5.5.7. Management with USB Memory Dongle or Compact Flash MemoryCard ....................................................................................................................30iii
3.5.6. FTP ...............................................................................................................................313.5.7. Web Server..................................................................................................................313.5.8. SNMP ..........................................................................................................................313.5.9. OpenVPN....................................................................................................................313.5.10. SSH.............................................................................................................................323.5.11. Telnet .........................................................................................................................323.5.12. NTP............................................................................................................................323.6. Utilities.....................................................................................................................................323.7. Real Time Clock......................................................................................................................363.8. Time Zone................................................................................................................................373.9. System Re-Install and Upgrade............................................................................................374. SPP-over-IP .........................................................................................................................................384.1. How SPP-over-IP Works .......................................................................................................384.1.1. Standard Operation...................................................................................................384.1.2. Repeater Operation ...................................................................................................394.1.3. SPP-over-IP over GPRS.............................................................................................394.1.4. Opening Connections from Access Server.............................................................404.1.5. SPP-over-IP and COM Ports ....................................................................................414.2. Configuring SPP-over-IP.......................................................................................................414.2.1. Preparations................................................................................................................414.2.2. Preparations................................................................................................................444.2.3. Repeater Configuration ............................................................................................454.2.4. Wi-Fi Configuration ..................................................................................................464.2.5. GPRS Configuration..................................................................................................465. Obexsender .........................................................................................................................................475.1. Key Features............................................................................................................................475.2. Use Cases.................................................................................................................................475.2.1. Content Push ..............................................................................................................485.2.2. Content Pull................................................................................................................485.3. Configuration..........................................................................................................................495.3.1. Getting Started ...........................................................................................................495.3.2. Updating Obexsender...............................................................................................515.3.3. Ensuring Obexsender is Enabled ............................................................................525.3.4. Basic Obexsender Configuration.............................................................................535.3.5. Uploading Files..........................................................................................................535.3.6. Advanced Obexsender Configuration....................................................................545.3.7. How to Store Files Sent to Access Server ...............................................................565.4. Monitoring Obexsender ........................................................................................................575.5. Troubleshooting and Known Issues ....................................................................................586. Software Development Kit ..............................................................................................................606.1. Introduction to SDK...............................................................................................................606.2. Installing SDK.........................................................................................................................606.2.1. Access Server Software Development Environment System Requirements ....606.2.2. Questions Asked by the Install Script.....................................................................616.3. Creating Applications............................................................................................................626.3.1. Application Examples...............................................................................................626.3.1.1. Installing Examples.......................................................................................62iv
6.3.1.2. Running Examples........................................................................................626.3.2. Creating a New Project .............................................................................................636.3.3. Building from the Command Line..........................................................................646.3.4. Transferring an Application to Access Server .......................................................646.3.4.1. Transferring an Application Using SCP or SFTP......................................646.3.4.2. Using SSHFS ..................................................................................................656.3.4.3. Transferring an Application Using Terminal Software ...........................656.3.4.4. Using NFS Mount .........................................................................................656.3.5. Running an Application Transferred to Access Server ........................................666.3.6. Using Debugger (GDB/DDD) .................................................................................666.3.7. Native SDK .................................................................................................................677. iWRAP - Bluetooth Interface...........................................................................................................687.1. Terms........................................................................................................................................687.2. Starting the iWRAP Servers..................................................................................................687.3. Writing iWRAP Applications ...............................................................................................687.3.1. Forklistener.................................................................................................................697.3.2. iWRAP Client .............................................................................................................697.4. Commands Controlling iWRAP ..........................................................................................69INFO ......................................................................................................................................70QUIT ......................................................................................................................................71SET .........................................................................................................................................72SAVE ......................................................................................................................................82LOAD ....................................................................................................................................83PING......................................................................................................................................84PONG ....................................................................................................................................85ECHO ....................................................................................................................................86LOCK.....................................................................................................................................87UNLOCK ..............................................................................................................................88SHUTDOWN........................................................................................................................89SLEEP ....................................................................................................................................907.5. Finding Bluetooth Devices....................................................................................................91INQUIRY...............................................................................................................................91NAME ...................................................................................................................................937.6. Making a Bluetooth Connection ..........................................................................................94CALL .....................................................................................................................................94CONNECT............................................................................................................................96NO CARRIER.......................................................................................................................98RING......................................................................................................................................99RINGING............................................................................................................................100CLOSE .................................................................................................................................101LIST......................................................................................................................................102STATUS ...............................................................................................................................1047.7. Service Discovery .................................................................................................................105SDPSEARCH......................................................................................................................105SDPATTR ............................................................................................................................107SDPQUERY.........................................................................................................................109SDP bdaddr ........................................................................................................................110v
SDP ADD ............................................................................................................................111SDP DEL..............................................................................................................................112SDP LIST .............................................................................................................................1137.8. Example Sessions .................................................................................................................1147.9. Error Codes ...........................................................................................................................1148. I/O API ...............................................................................................................................................1188.1. Led and Buzzer API.............................................................................................................1188.2. GPIO API...............................................................................................................................1189. Advanced Use Cases for Access Server .......................................................................................1199.1. Making Access Server Secure.............................................................................................1199.2. Saving Bluetooth Pairing Information Permanently.......................................................1199.3. Digital Pen.............................................................................................................................1199.4. OpenVPN ..............................................................................................................................1209.4.1. Prerequisites .............................................................................................................1209.4.2. Installing OpenVPN................................................................................................1209.4.3. Creating Certificates and Keys ..............................................................................1219.4.4. Creating Configuration Files..................................................................................1239.4.4.1. Server Configuration File...........................................................................1239.4.4.2. Client Configuration File ...........................................................................1269.4.5. Starting up VPN.......................................................................................................1289.4.5.1. Starting up the Server.................................................................................1289.4.5.2. Starting up the Client .................................................................................12910. Certification Information and WEEE Compliance ..................................................................130A. Directory Structure.........................................................................................................................133B. Setup Options ..................................................................................................................................135B.1. Security settings ...................................................................................................................135B.2. Generic settings....................................................................................................................136B.3. Network settings..................................................................................................................137B.3.1. Default interface settings .......................................................................................138B.3.2. Ethernet cable settings............................................................................................138B.3.3. Wi-Fi settings ...........................................................................................................139B.3.4. GPRS settings...........................................................................................................139B.4. Applications..........................................................................................................................140B.4.1. wpkgd settings ........................................................................................................141B.4.2. FTP server settings..................................................................................................142B.4.3. ObexSender settings ...............................................................................................143B.4.3.1. Delete log (confirm)....................................................................................145B.4.4. SMS gateway settings .............................................................................................145B.5. Bluetooth settings ................................................................................................................146B.5.1. Bluetooth profiles ....................................................................................................148B.5.1.1. Lan access profile settings .........................................................................148B.5.1.2. PAN user profile settings...........................................................................149B.5.1.3. PAN generic networking profile settings................................................149B.5.1.4. PAN network access point profile settings .............................................150B.5.1.5. Serial port profile settings .........................................................................150B.5.1.6. Object push profile settings.......................................................................151vi
B.5.1.7. File tranfer profile settings ........................................................................151B.6. Advanced settings ...............................................................................................................151B.6.1. System information.................................................................................................153B.6.2. Reboot system (confirm) ........................................................................................153B.7. Summary of Setup Options................................................................................................153C. Open Source Software Licenses...................................................................................................158D. Supported Hardware .....................................................................................................................162vii
List of Tables2-1. The Management Console Port Settings ........................................................................................83-1. Access Server Network Interfaces.................................................................................................193-2. Access Server Servers......................................................................................................................253-3. Access Server Utilities.....................................................................................................................326-1. Examples, Their Usage and Purpose............................................................................................627-1. Supported Parameters for iWRAP SET Command....................................................................727-1. SAVE parameters.............................................................................................................................827-3. Supported Keywords for Replacing SDP UUIDs or Attributes..............................................1057-1. SDP Response Formatting Characters........................................................................................1077-5. iWRAP Errors.................................................................................................................................1147-6. Errors Masks...................................................................................................................................1157-7. HCI Error Codes ............................................................................................................................1157-8. L2CAP Error Codes.......................................................................................................................1167-9. SDP Error Codes............................................................................................................................1177-10. RFCOMM Error Codes ...............................................................................................................11710-1. Excerpt of Table 1B of 47 CFR 1.1310........................................................................................131C-1. Open Source Licenses in Access Server Software Components ............................................158C-2. Access Server Open Source Software Components and Their Licences...............................158D-1. Supported Hardware by Access Server ....................................................................................162viii
Chapter 1. Introduction to Access ServerBluegiga’s WRAP™ product family offers for device manufacturers, integrators, companies anddevelopers a simple and fast way to set-up wireless communication systems between standardor proprietary devices, networks, machines and instruments.Access Server is a cutting edge wireless Bluetooth router. It supports multiple communicationstandards including Ethernet, WiFi, and GSM/GPRS enabling full media-independent TCP/IPconnectivity. Access Server is easy to deploy and manage in existing wired and wireless net-works without compromising speed or security. For rapid deployment, Access Server config-urations can easily be copied from one device to another by using USB memory dongles. Thedevice can be conveniently managed and upgraded remotely over SSH secured links. By usingSimple Network Management Protocol (SNMP), Access Servers can also be connected to thecustomer’s management and monitoring systems.Access Server usage scenarios and applications:•Point-of-sales systems•Logistics and transportation systems•Telemetry and machine-to-machine systems•Medical and healthcare systems•Fitness and sport telemetry systems•Cable replacement•Content and application distribution to mobile phones and PDAsAccess Server key features:•Enables Bluetooth networking between multiple devices and networks•Serves up to 21 simultaneous Bluetooth connections•Offers an open platform for adding local applications•Acts as a transparent router or bridge•Supports all key communication medias:•Bluetooth•Ethernet•WiFi, GSM and GPRS with a Compact Flash card•USB and RS232•Incorporates a packet filtering firewall•Is fast and easy to install•Supports all relevant Bluetooth profiles and APIs•100 meter range / Software configurable to support 10 meter range•DHCP support for plug-and-play installation•Uncompromised security: SSH, firewall, and 128 bit Bluetooth encryption1
Chapter 1. Introduction to Access Server•Simple and secure mounting accessory available•Bluetooth, CE, and FCC certified•Compliant with Bluetooth 1.1, 1.2 and 2.0 Specification1.1. Licenses and WarrantyWarningBluegiga Technologies is hereby willing to license the enclosed WRAP product andits documentation under the condition that the terms and conditions described inthe License Agreement are understood and accepted. The License Agreement issupplied within every WRAP product both in hard copy. It is also available on-lineat http://bluegiga.com/as/current/doc/eula.pdf. The use of the WRAP productwill indicate your assent to the terms. If you do not agree to these terms, BluegigaTechnologies will not license the software and documentation to you, in whichevent you should return this complete package with all original materials, equip-ment, and media.Some software components are licensed under the terms and conditions of an open source li-cense. Details can be found in Appendix C. Upon request, Bluegiga will distribute a completemachine-readable copy of the source of the aforementioned open source software componentsduring a period of three (3) years from the release date of the software. Delivery costs of thesource code will be charged from the party requesting the source code.The Bluegiga WRAP Product Limited Warranty Statement is available on-line athttp://bluegiga.com/as/current/doc/warranty.pdf.1.2. Bluegiga Technologies Contact InformationPlease see http://www.bluegiga.com/ for news and latest product offers. For more information,contact <sales@bluegiga.com>.Please check http://bluegiga.com/as/ for software and documentation updates.Please contact <support@bluegiga.com> if you need more technical support. To speed up theprocessing of your support request, please include as detailed information on your product andyour problem situation as possible.Please begin your email with the following details:•Access Server product type•Access Server product serial number•Access Server software version•End customer name•Date of purchase2
Chapter 2. Getting Started with Access ServerAccess Server can be controlled in three ways:•by using the WWW interface•by entering commands and using applications at the Access Server shell prompt•by sending and/or retrieving files to/from Access Server.Note: The default username is root and the default password is buffy.2.1. Powering UpTo get started with Access Server, connect it to your local area network (LAN) by using anEthernet cable, and connect the power adapter. Access Server will power up and retrieve thenetwork settings from your network’s DHCP server.Access Server will also use Zeroconf (also known as Zero Configuration Networking or Au-tomatic Private IP Addressing) to get an unique IP address in the 169.254.x.x network. Mostoperating systems also support this. In other words, you can connect your controlling laptopwith a cross-over Ethernet cable to Access Server, then power up Access Server, and the deviceswill automatically have unique IP addresses in the 169.254.x.x network.Note: If you need to configure the network settings manually and cannot connect first by using Zero-conf, you can do it by using the management console. For more information, see Section 2.3.1.The physical interface locations of Access Server are described in Figure 2-1 and Figure 2-2.Figure 2-1. Access Server ConnectorsNote: There is no power switch in Access Server. The adapter is the disconnection device; the socket-outlet shall be installed near the equipment and shall be easily accessible. Unplug and plug the poweradapter to switch the power on and off. The power led in Figure 2-2 is on when the power adapter isconnected.3
Chapter 2. Getting Started with Access ServerFigure 2-2. Access Server LEDsAll the blue status LEDs are turned off when the boot procedure is finished and Access Serveris ready to be connected.2.2. WWW InterfaceMost Access Server functionality can be controlled through the WWW interface by using anystandard WWW browser.The wrapfinder application (see Figure 2-3), available for the Windows operating system fromBluegiga Techforum (http://www.bluegiga.com/techforum/) provides an easy-to-use interfacefor finding Access Servers (with SW version 2.1.0 or later) in the local area network.Figure 2-3. Access Server Finder ApplicationThe wrapfinder automatically identifies the broadcast address of the network it runs in, andshows the IP addresses, serial numbers, and Access Server device types it could find by using4
Chapter 2. Getting Started with Access ServerUDP broadcast when it was launched.Note: Normally, there are two entries for each Access Server. Use the one with the IP address in yourlocal area network. Use the one with the 169.254.x.x, the Zeroconf network address, when it is theonly one shown.You can change the broadcast address used for finding Access Servers. A new scan can be doneby clicking Rescan.Select an Access Server by clicking its IP address, and click Details to see more information (suchas the Bluetooth addresses and friendly names) on Access Server. See Figure 2-4 for details.Figure 2-4. Details Dialog of Access Server FinderClick Connect or double-click an IP address to connect to the selected Access Server by using aWWW browser.Click Exit to close the program.Note: To find Access Server’s IP address without wrapfinder, see Section 2.3.2.To access the WWW interface, enter the IP address of Access Server to the browser’s addressfield and press Enter (see Figure 2-5).5
Chapter 2. Getting Started with Access ServerFigure 2-5. Access Server WWW InterfaceFrom the top-level page, click Setup to log in to the configuration interface. The default user-name is root and the default password is buffy (see Figure 2-6).Figure 2-6. WWW Login Prompt for Access Server SetupAfter logging in, you can configure several Access Server settings (see Figure 2-7). These arediscussed in detail in Section 2.4.6
Chapter 2. Getting Started with Access ServerFigure 2-7. The WWW Configuration Interface of Access Server2.3. Shell Prompt AccessShell prompt access may be needed for advanced controlling operations that cannot be per-formed by using the WWW interface.You can get to the shell prompt by using either SSH or the management console. The manage-ment console is only needed to change the network configuration settings if you cannot config-ure the network by using DHCP or Zeroconf. The management console is connected to AccessServer with a serial cable. All further controlling activities can be performed remotely using SSHsessions over Ethernet or Bluetooth LAN/PAN connection.If you can establish an SSH connection from a device that has Bluetooth LAN Access or PAN pro-file support, you do not need the management console. Just connect to Access Server by usingLAN Access or PAN profile. Access Server can be seen in Bluetooth inquiries as "Wserialno_n",where "serialno" is the serial number of the device and "n" is the number of the Bluetooth base-band in question (model 2293 has three Bluetooth basebands, any of which can be connected).After you have connected to the server (no PIN code, username or password needed), establishan SSH connection to the device at the other end of the connection, typically 192.168.160.1. Youcan also use the wrapfinder application to find the IP address (see Section 2.2 for details).Note: Bluetooth LAN Access and PAN profiles are disabled by default. Use the WWW interface toenable them, if needed. The PAN profile can also be enabled by sending the enable-pan.wpk file(available on-line at http://bluegiga.com/as/current/enable-pan.wpk) to Access Server by usingBluetooth Object Push profile or by inserting a USB memory dongle with the file in its root direc-tory to Access Server’s USB port.Note: The default username is root and the default password is buffy.7
Chapter 2. Getting Started with Access Server2.3.1. Management ConsoleIf you do not have a Bluetooth LAN/PAN client and if Access Server is not connected to yourLAN, or if you do not know the IP address given to Access Server, you can get the first shellprompt access by using the management console.To setup the management console, proceed as follows:1. Have a PC with a free COM port.2. Power off Access Server.3. Configure your terminal application, such as HyperTerminal in Windows, to use the settingsbelow for your computer’s free COM portSetting ValueSpeed 115200bpsData Bits 8Parity NoneStop Bits 1Flow Control NoneTable 2-1. The Management Console Port Settings4. Connect the serial cable shipped with Access Server to your PC’s free COM port.5. Connect the serial cable to the management (user) port in Access Server (see Figure 2-1).6. Power on Access Server.7. Enter letter bin the terminal application during the first five seconds, while the blue LEDsin Access Server turn on one by one.8. The management console is now activated and you can see the boot log in your terminalwindow.Note: The boot process may stop at the following U-Boot prompt:Hit any key to stop autoboot: 0U-Boot>If this happens, enter command boot to continue to boot Linux.9. Wait for the device to boot up and end with the following prompt:Please press Enter to activate this console.10. Press Enter to activate the console. You will be logged in as root in directory /root:[root@wrap root]11. You can now control Access Server from the management console.2.3.2. Accessing RemotelyWhen Access Server is connected to a LAN, it tries to get the IP address by using DHCP andZeroconf by default. You can then use the wrapfinder application to find the IP address (see8
Chapter 2. Getting Started with Access ServerSection 2.2).If you cannot get the IP address by using the wrapfinder, another way to see the IP address ofAccess Server is to connect with a management console (see previous section), power on theunit and, after the system is up and running, give the ifconfig nap command. The inet addrfield for the nap interface contains the IP address of Access Server. For example, in the followingcapture from the management console, the IP address is 192.168.42.3.[root@wrap /]$ ifconfig napnap Link encap:Ethernet HWaddr 00:07:80:00:BF:01inet addr:192.168.42.3 Bcast:192.168.42.255 Mask:255.255.255.0inet6 addr: fe80::207:80ff:fe00:bf01/64 Scope:LinkUP BROADCAST MULTICAST MTU:1500 Metric:1RX packets:12635 errors:0 dropped:0 overruns:0 frame:0TX packets:8 errors:0 dropped:0 overruns:0 carrier:0collisions:0 txqueuelen:100RX bytes:1686246 (1.6 MiB) TX bytes:1640 (1.6 KiB)Interrupt:24 Base address:0xc000You can use this address to connect to Access Server remotely over SSH, SCP or SFTP.Note: The default username is root and the default password is buffy.2.3.3. Transferring Files to/from Access ServerYou can transfer files to and from Access Server by using, for example:•SCP (secure copy over SSH)•SFTP (secure FTP connection over SSH)•FTP (plain FTP connection)Note: FTP is disabled by default for security reasons. Use SFTP instead.Tip: If enabled, use the integrated FTP client on the Internet Explorer (type ftp://root:buffy@wrap-ip-address/ in the address bar)•Bluetooth OBEX (Object Push and File Transfer Profiles) to/from directory /tmp/obex in Ac-cess Server•NFS (mount an NFS share from a remote device as a part of Access Server’s file system)•SSHFS (mount an Access Server directory over SSH as a part of any other Linux host filesystem)To download and install SSHFS, visit http://fuse.sourceforge.net/sshfs.html.•USB memory dongle (see Section 3.4 for more information).•Xmodem/Ymodem/Zmodem (use rz/rx/rb/sz/sx/sb commands from the management con-sole)For examples of transferring files, see Section 6.3.4.9
Chapter 2. Getting Started with Access Server2.4. Introduction to ConfigurationWhen Access Server is installed and powered up for the first time, the default configurationsettings are being used. With these settings, Access Server automatically configures its networksettings assuming that it is connected to a LAN network with a DHCP server running. Addition-ally, Access Server also uses Zero Configuration Networking (also known as Automatic PrivateIP Addressing) to connect to the 169.254.x.x network, which can be used if the network has noDHCP server.After booting up, the only Bluetooth profiles enabled are the Object Push and File Transfer Pro-files, used to send files to/from Access Server.More Bluetooth profiles can be enabled, and most of Access Server settings can be configuredby using the setup application. It has a WWW interface at http://wrap-ip/setup but it can alsobe run at the command line.All configurable settings in the setup application are listed in Appendix B with short help texts.Note: The default username is root and the default password is buffy.2.5. Using the Setup WWW InterfaceThe easiest way to change Access Server settings is to use the WWW interface. Accessing theWWW interface is instructed in Section 2.2.A typical WWW configuration page is shown in Figure 2-8 (This page can be found at Setup−→ Security settings)Figure 2-8. Example WWW Setup Page10
Chapter 2. Getting Started with Access ServerThe different parts of the WWW Setup page are discussed in the following list:•Status areaThe status area serves two purposes:•It indicates that the changes are permanently saved when the user clicks the Save button(or when the user clicks a toggling Yes/No link).•If invalid values were entered in one or more fields, an error message is shown in this area(see Figure 2-9).Figure 2-9. Trying to Save an Invalid InputNote: It is typically necessary to reboot Access Server for the changes to take effect. This can bedone through the WWW interface (Advanced settings menu).•Number or text entry fieldsMost of the configurable settings are text (or number) entry fields. For some fields, such asthe IP address or netmask, there are restrictions on the input format. Setup validates the inputat save time and accepts valid data only. The fields with errors are shown to the user so thatmistakes can be fixed (see Figure 2-9).•Help -linkClick the Help link to retrieve the setup page again with requested help information displayed.For an example, see Figure 2-10.11
Chapter 2. Getting Started with Access ServerFigure 2-10. Help Links in WWW SetupWarningIf you have made changes to the settings on the page before clicking Help andnot saved them yet, they are lost.•Yes and No radio buttonsThese buttons are typically used to configure a setting that can be either enabled or disabled,and this setting has no effect on the visibility of other settings.•Link to a configuration fileSome of the configurable settings are actually editable configuration files, such as/etc/httpd.conf for WWW passwords. Clicking the link will retrieve the file for editing inthe browser window, or create a new file, if it does not exist. See Figure 2-11.12
Chapter 2. Getting Started with Access ServerFigure 2-11. Editing Files in WWW SetupNote: You can edit any file through the WWW Setup. to edit files, navigate to Setup −→ Advancedsetting −→ Edit other configuration files.•Reset buttonReset button resets the fields to the values currently in use at Access Server. In other words,the Reset button discards unsaved changes.Note: The Reset button does not make a "factory reset".•Save buttonSave button sends the WWW page to the setup application for validation. If the values in thefields are valid, they are permanently saved and the page is refreshed with the Changes havebeen saved. message at the top. The accepted values are shown in the page fields.If there were errors in the fields, these are shown as in Figure 2-9.Note: It is typically necessary to reboot Access Server for the changes to take effect. This can bedone through the WWW interface (Advanced settings menu).•Back linkPress the Back link to return to the previous level of the Setup menu hierarchy.Note: Pressing the Back link does not save changes in the fields on the current page.13
Chapter 2. Getting Started with Access Server•Exit linkExit link quits the setup application and returns to the Access Server’s main WWW page.Note: Pressing the Exit link does not save changes in the fields on the current page.•Toggling Yes/No and on/off linksClicking the Yes/No link (see Figure 2-12) immediately changes the setting and saves thechange. Typically these links are used display or hide further settings.Figure 2-12. Yes / No links in WWW SetupThe on/off links in Setup −→ Applications −→ Default bootup applications behave in a sameway, making and saving the change immediately (see Figure 2-13).14
Chapter 2. Getting Started with Access ServerFigure 2-13. Selecting Default Bootup Applications in WWW SetupNote: To configure the default bootup applications from the command line, use the chkconfigcommand.•Upload linksThe WWW Setup has settings that allow user to upload files to Access Server, for exampleSetup −→ Advanced −→ Upload a software update (see Figure 2-14).15
Chapter 2. Getting Started with Access ServerFigure 2-14. Uploading files via WWW SetupUse the Browse... button to select the file to be uploaded, and send it to Access Server byclicking Upload.•Browsing filesSome WWW Setup pages allow users to browse the Access Server file system or part of it,such as Setup −→ Advanced −→ Browse files (see Figure 2-15).16
Chapter 2. Getting Started with Access ServerFigure 2-15. Browsing files via WWW SetupClick the directory names to navigate in the file system.Click del to delete a file or an empty directory.WarningDeletion is not confirmed.The WWW Setup also has menu items that run commands in Access Server, and show the outputin the browser window. Some commands, such as rebooting Access Server, are confirmed beforeexecution.2.6. Using the setup Command Line ApplicationThe basic configuration settings can also be changed by using the setup application at the com-mand line interface.The setup application displays the settings in a hierarchical menu (see Figure 2-16). Navigatingthe menu is accomplished by entering the number or letter corresponding to the setting to beviewed and/or changed and pressing Enter. Pressing only Enter either accepts the previousvalue of the setting or returns to the previous level in the menu hierarchy.17
Chapter 2. Getting Started with Access ServerFigure 2-16. Using the setup Command Line ApplicationNote: Ensure that your terminal application does not send line ends with line feeds. If your terminalsends both CR and LF when you press Enter, you cannot navigate in the setup application.2.7. Resetting a ConfigurationYou can reset the default configuration with the setup -r command. The command requiresrebooting of Access Server. When the system starts up, the default configuration settings are re-stored. If you have only changed the configuration by using the setup application, the followingcommands at the Access Server’s command prompt will suffice:[root@wrap /]$ setup -r[root@wrap /]$ rebootNote: This does not reset the edited files to factory defaults; it only affects only the settings changedthrough the WWW Setup or the setup command line application.2.8. Exporting and Importing ConfigurationsYou can export configuration settings (expect for passwords and the list of default bootup ap-plications) with the following command:[root@wrap /root]$ setup -o > settings.txtThe saved settings can later be restored with the following commands:[root@wrap /root]$ setup -m settings.txt[root@wrap /root]$ reboot18
Chapter 3. Using the SystemThis chapter describes the basic features of a Bluegiga Access Server. This includes informationon using Access Server as a Bluetooth LAN/PAN Access Point or a Bluetooth Serial Port CableReplacer, using the Web Server, ObexSender, and WRAP Package Management System. Thevarious ways of uploading content for browsing and/or downloading are also included, as wellas getting familiar with the utility applications.Using the features described in this chapter does not require Access Server Software Develop-ment Environment to be installed.Note: The default username is root and the default password is buffy.Note: Most of the configuration files are in Linux text file format, where the lines end with a sin-gle Line Feed (LF, "\n") character. Some applications will not work if the configuration file format ischanged to MS-DOS format (this happens, for example, if you transfer the files to Windows for edit-ing with Notepad), where the lines end with both Carriage Return and Line Feed (CR+LF, "\r\n")characters.3.1. Network InterfacesThe Access Server network interfaces are described in Table 3-1.Interface Descriptionnap Dynamic virtual Ethernet ("cable") device. This is the device having an IPaddress. All the programs should use this device instead of eth0.eth0 Real Ethernet device, which is dynamically linked to the nap device. Do notuse this device, use nap instead.wlan0 Wi-Fi device. In the client mode (default), this device has its own IP address.In the access point mode, it is dynamically linked to the nap device (thedefault interface).wifi0 Virtual control device for wlan0. Do not use this device.gn Virtual device for PAN-GN connections.bnep# These devices are used for incoming and outgoing PAN connections. Thesedevices are created, deleted and linked (to nap or gn) dynamically.ppp# These devices are used for incoming and outgoing LAP connections. Thesedevices are created and deleted dynamically. By default, data coming fromppp# is masqueraded to the nap device.Table 3-1. Access Server Network Interfaces3.2. BluetoothThe iWRAP servers (one server in Access Server 2291, three in Access Server 2293) are automat-ically started at power-up. By default, the Object Push and File Transfer Profiles are activated.The iWRAP servers can be accessed and controlled (by applications or even interactively with atelnet client) through the iWRAP interface, described in Chapter 7. Currently, there can be up to14 simultaneous Bluetooth connections between a single master iWRAP server and up to sevensimultaneous slaves.19
Chapter 3. Using the System3.2.1. iWRAP Password ProtectionThe access to iWRAP can be password protected. The default password is buffy, but it can beset off or changed with the setup application (see Section 2.4). The password is case sensitive.The password must be typed in as the first command after the server has replied with "READY."3.2.2. LAN Access ProfileThis profile is not automatically started at boot. The default settings can be changed with thesetup application (see section Section 2.4), or runtime with the iWRAP interface (see Chapter 7).Access Server can also act as a LAN Access Client, but in this case it must be controlled manuallyusing iWRAP commands, as described in Chapter 7.Note: Since Bluetooth specification 1.2, LAN Access Profile has been deprecated.3.2.3. Serial Port ProfileThis profile is not automatically started at boot. The default settings can be changed with thesetup application (see section Section 2.4).The Serial Port Profile is used to replace an RS-232 serial cable between two devices with aBluetooth connection. The physical setup is shown in Figure 3-1.Figure 3-1. Serial Cable Replacement Physical SetupState A) in the figure is the starting situation with a serial cable connecting the devices. Thiscable is to be replaced with a Bluetooth connection.In state B) the long serial connection is replaced with a Bluetooth Serial Port Profile connectionbetween the two Access Server devices. These Access Server devices are then locally connected20
Chapter 3. Using the Systemto the user devices with (short) serial cables. The cable between user device A and Access Serverdevice A must be a cross-over cable. The cable between user device B and Access Server deviceB must be similar (direct or cross-over) to the one used in state A).If RTS/CTS handshaking is used to ensure correct data transfer, the serial cables must have thesepins connected. Notice that this handshaking is "local": it takes place between the user deviceand Access Server. No handshaking between user device A and user device B on the other endof the Bluetooth connection is provided.If RTS/CTS handshaking is not used, CTS must be connected to DTR.DCD, DTR, and DSR signals are not supported. This also means that user devices A and B willnot be able to tell whether or not the Bluetooth connection is up.When the physical setup is ready, you can create the Bluetooth connection. By default, the SerialPort Profile is started up at boot with the default settings. That is, listening in DevB mode, at115200 bps, 8 data bits, no parity, 1 stop bit, and RTS/CTS enabled. To change these settings, usethe setup application or the WWW Setup interface, as described in Section 2.4.Note: To enable Serial Port Profile, navigate to Setup −→ Applications −→ Default bootup applicationsin the WWW Setup interface, and switch serialport application to off.Enabling can also be done from command prompt with command chkconfig serialport on.3.2.4. Object Push and File Transfer ProfileAccess Server has two OBEX profiles: Object Push Profile (ObjP) and File Transfer Profile (FTP).You can use these profiles to transfer files easily between different Access Server devices andother devices supporting ObjP/FTP.The OBEX profiles are handled by forwarding incoming calls to the obexserver program, whichhandles both profiles. The working directory is /tmp/obex, and users have full read and writeaccess to that directory. By default, the default contact card /etc/default.vcf is copied to thatdirectory at boot.In the ObjP mode, obexserver will prefix received files with the sender’s Bluetooth address andiWRAP port number.Two simple command line utilities, obexput and obexget, are provided. They can be used tosend and retrieve files to and from another Bluetooth device supporting ObjP/FTP.Usage:obexput [parameters] bdaddr channel file(s)Note: You can use the friendly name instead of Bluetooth address as the "bdaddr" parameter andkeywords "OBJP" and "FTP" as the "channel" parameter for automatic service discovery.Enter either of these commands without parameters to view a short help text for using thecommand.A non-zero return value indicates an error. The reason for this error is printed to the terminal.Tip: Special parameters and the iWRAP interface (see Chapter 7) obexput command can be easilyused from the user application as follows:CALL bdaddr OBJP FORK \"/usr/bin/obexput - 1 filename\"21
Chapter 3. Using the System-as bdaddr and 1as channel tells obexput that it will be launched by the iWRAP server, and thatdata connection is bound to standard input and output.3.2.5. PAN ProfilesAccess Server has support for all PAN profile modes: Personal Area Network User (PANU), Net-work Access Point (NAP) and Generic Networking (GN). Accepting incoming PAN connectionsto any of these modes is disabled by default for security reasons.Access Server can be configured to accept incoming PAN connections and the default settingscan be changed by using the setup application (see section Section 2.4).The Network Access Point mode is the most useful PAN profile mode. You can enable it bysending the enable-pan.wpk file (available on-line at http://bluegiga.com/as/current/enable-pan.wpk) to Access Server by using the Bluetooth Object Push profile. Alternatively, you cancopy the file to the root of a USB memory dongle and insert the dongle to Access Server’s USBport.The device creating the PAN connection decides upon the modes to be used. Access Serverautomatically handles incoming connections. Access Server can also act as a PAN client, but inthis case it must be controlled manually by using the iWRAP interface, described in Chapter 7.3.2.6. Changing the Bluetooth RangeThe transmit power of Access Server is configurable. By default, class 1 (100 meter range) set-tings are used. The settings can be changed down to "class 2" (10 meter range) settings withthe b2b_class2 command, or even lower with the b2b_class3 command. Class 1 settings can berestored with the b2b_class1 command.After b2b_class# is given, it is recommended to reboot Access Server once to restart ObexSenderand other applications connected to the iWRAP server(s).Note: If the operation is successful, you get one Can’t open baseband message with Access Servermodel 2293 and three messages with the 2291 model.3.2.7. BTCLI - iWRAP Command Line Interface UtilityYou can send commands to an iWRAP server by using the btcli application.Usage:btcli [options] commandTo see the command options, enter the btcli --help command.The specified command is sent to an Access Server iWRAP server (the first server at port 10101by default) and all replies are echoed to the standard output. The application waits and printsthe replies for a certain amount of time (10 seconds by default) and exits.The iWRAP commands are described in Chapter 7.3.2.8. serialbluetoothIt is also possible to control the first iWRAP server (at port 10101) through RS-232 with theserialbluetooth application.22
Chapter 3. Using the SystemUsage:serialbluetooth [options]To see the command options, enter the serialbluetooth --help command.Basically, serialbluetooth takes commands from a serial port and forwards them to the iWRAPserver. All the commands available through iWRAP are also available through serial port.There are two exceptions:1. After making an outgoing RFCOMM data call, all input from the serial port is forwardedto the data socket, not to the control socket. To close the data socket, you have to write+++ with a 200ms pause before each character. It is not possible to have two concurrentRFCOMM calls.2. All incoming RFCOMM calls are answered automatically. Again, to close the data socket,write +++ as with the outgoing call.3.3. Compact Flash CardsAccess Server functionality can be extended by using GSM/GPRS, Wi-Fi and GPS CompactFlash cards. The supported Compact Flash cards are listed in Appendix D.3.3.1. Compact Flash GPRS CardsThe operating system automatically identifies the Compact Flash GPRS card when it is inserted.Access Server can use the GPRS card to connect to the GPRS network, or to act as an SMSgateway to send and receive SMS messages.You can enable the GPRS mode and configure its settings, such as the SIM card’s PIN code, byusing the setup application or its WWW interface. For more information, see Section 2.4 anddocumentation for Setup −→ Network settings −→ Enable GPRS interface in Appendix B.GPRS, when enabled, is by default only turned on when needed. If Access Server can access theInternet (or any desired address) by using the default interface nap, it does not activate and usethe GPRS (ppp0) interface.The simplest way to test the GPRS interface is to configure the default interface nap to usedynamic network configuration (the default) and enable GPRS through the setup application,then to disconnect the Ethernet cable, reboot the device with the management console enabled.After the boot, ping an IP address in the Internet, such as 194.100.31.45 (bluegiga.com).The first five or so packets are lost, but after that the GPRS connection should be up. To enablethe interface automatically, just enter ping -c 20 ip-in-internet to /etc/rc.d/rc.local.Note: If you also want to use the Ethernet connection, you must remove it from the default inter-face (nap) bridge and configure its network settings individually using the setup application whilekeeping the default interface network settings in their default (dynamic) state.Using WRAP SMS Gateway Server is documented in Section 3.5.3.If needed for some special use, the Compact Flash GPRS card can also be accessed directly from/dev/ttyS0, a device file which exists if the GPRS card is successfully initialized.23
Chapter 3. Using the System3.3.2. Compact Flash GPS CardThe operating system automatically identifies the Compact Flash GPS card when it is inserted.At that time, the device file /dev/ttyS0 is created and the GPS card can be accessed by usingthat device with the serial port settings the GPS card uses.The supported Compact Flash cards are listed in Appendix D.3.3.3. Compact Flash Wi-Fi CardsAccess Server supports Prism II/III based CF Wi-Fi cards. The supported Compact Flash cardsare listed in Appendix D.By default, Access Server notices when a supported Wi-Fi card is inserted and tries to use it inthe client mode, without encryption. So, if there is an open Wi-Fi Access Point in range, AccessServer will automatically connect to it.To configure Wi-Fi to the Access Point mode, or to change other Wi-Fi settings, use the setupapplication or its WWW interface at Setup −→ Network settings −→ Wi-Fi.Note: Older Compact Flash cards with firmware version 1.4.2 do not work in the Access Point mode.Instead, you will see an error message in the system log (/var/log/messages, viewable at Setup −→Advanced −→ System Information −→ Show system log file).A standard set of command line wireless utilities is provided to fine-tune your Wi-Fi configura-tion:•iwconfig•iwlist•iwprivFor more information on these utilities, see: http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Tools.html3.4. USB Memory Dongles and Compact Flash Memory CardsAccess Server’s persistent memory storage can be extended by using an USB memory dongle ora Compact Flash memory card. These are also used by the Access Server Remote ManagementSystem (see Section 3.5.5) - each time a dongle or memory card is inserted, it is automaticallymounted, and scanned for management packets, which are processed and unmounted.To use the USB dongle or Compact Flash memory card for your own applications, the memorymust be mounted manually by using command:[root@wrap /]$ mount -t vfat device /mnt/usbThe device parameter is a path to the USB dongle or Compact Flash memory card filesystemdevice. For the first dongle inserted after a reboot, it is /dev/sda1 if the dongle is partitioned(which often is the case) and /dev/sda if the dongle has no partition table. The first CompactFlash memory card is typically at /dev/hda1, correspondingly. If you have used several donglesafter reboot, new device file names are created: /dev/sdb1 for the second one, /dev/sdc1 forthe third one, and so on. In the case of memory cards, naming is similar, that is, the second onegets device file name /dev/hdb1.24
Chapter 3. Using the SystemNote: Always remember to unmount the memory dongle or memory card with command:[root@wrap /]$ umount /mnt/usb3.5. ServersAccess Server server applications are started automatically at system power-up or when aniWRAP server or the Internet services daemon needs them. The servers and their purposes aredescribed in Table 3-2.Server Descriptionbluetooth Access Server iWRAP Server, which is described in detail in Chapter 7.finder WRAP Finder Service.obexsender WRAP ObexSender server.smsgw WRAP SMS gateway server, which is described in detail in Section3.5.3. Notice that this server is disabled by default. Use the setupapplication or the chkconfig smsgw on command to enable it.watchdog WRAP user level watchdog.wpkgd WRAP remote management system daemon.crond A daemon to execute scheduled commands. This server is configurablethrough the /var/spool/cron/crontabs/root file or the crontabcommand in the same way as any Linux crond.ftpd Internet File Transfer Protocol Server. You can configure this serverwith the setup application. Notice that this server is disabled bydefault. Use the WWW interface of the setup application or thechkconfig ftpd on command to enable it.udhcpd This server is a DHCP daemon for providing automatic networkconfiguration for clients in the network. Notice that, by default, thisserver is only enabled for the gn interface, used by Bluetooth PANGeneric Networking profile.udhcpcd DHCP client daemon for automatic network configuration.inetd Internet services daemon. Notice that this server is disabled by default.Use the setup application or the chkconfig inetd on command toenable it.httpd Web server, which is described in detail in Section 3.5.7.pppd Point to Point Protocol daemon. iWRAP server uses this server. Thisserver can be used manually over the user serial port (/dev/ttyAT1).snmpd SNMP daemon. This server is available as a separate installationpacket.sshd SSH daemon.syslogd System logging daemon. This server can be configured by using thesetup application.25
Chapter 3. Using the SystemServer Descriptiontelnetd Telnet protocol server. Notice that this server is disabled by default.Use the setup application or the chkconfig telnetd on command toenable it.zcip Zero configuration networking service.ntpd Network Time Protocol (NTP) daemon.Table 3-2. Access Server Servers3.5.1. FinderThe Finder service is a small service, which listens for UDP broadcast queries from Access ServerFinder applications and responses to those queries with identification information (IP address,model, serial number, etc.) about Access Server.The finder command can be used to query Finder service information from Access Servers in thenetwork. With no parameters, finder sends the query using the broadcast address of the defaultinterface (nap). Broadcasting to networks of other interfaces can be done with --interfaceparameter, such as the zero configuration interface nap:9in the following example:[root@wrap root]$ finder --interface nap:9Access Server 2291 (S/N: 0402110112) (build: 3.1)- Hostname: wrap.localdomain- IP: 169.254.30.233 (nap:9), 192.168.161.1 (gn)- Ethernet MAC: 00:07:80:00:03:ed- iWRAP: 10101 00:07:80:80:0b:c3 bt1.2 (W0402110112_1)Access Server 2291 (S/N: 0606221029) (build: 3.1)- Hostname: wrap.localdomain- IP: 169.254.36.138 (nap:9), 192.168.161.1 (gn)- Ethernet MAC: 00:07:80:00:0d:44- iWRAP: 10101 00:07:80:80:0b:c4 bt1.2 (W0606221029_1)[root@wrap root]$3.5.2. ObexSenderThe ObexSender application is automatically started in Access Server. Its purpose is to receivebusiness cards (vCards), images, or other files, and analyze their content and send files backselecting them based on configured keywords found.ObexSender can also make an inquiry for bluetooth devices, and automatically send one or morefiles to all new devices found.ObexSender can be configured with the setup application or by editing the/etc/obexsender.conf file (see Section 2.4).For detailed instructions on using ObexSender, see Chapter 5.3.5.3. SMS Gateway ServerWRAP SMS Gateway Server supports Nokia 20, Nokia 30, or Wavecom WMOD2 compatibleGSM terminals and the supported GSM/GPRS Compact Flash cards for sending and receiving26
Chapter 3. Using the SystemSMS messages. By default, the Compact Flash card is used. The PIN code query of the SIM cardat power-up must be disabled.WRAP SMS Gateway Server is disabled by default. To enable it, use the setup application’sWWW interface, as described in section Section 2.4. Enabling is done at Setup −→ Applications−→ Default bootup applications −→ smsgw.WRAP SMS Gateway Server can be configured to use a modem connected to the user serialport with the setup application or its WWW interface by changing the setting at Setup −→Applications −→ SMS gateway settings −→ Modem device to /dev/ttyAT1 from the default/dev/ttyS0.Note: If you are using the user serial port, ensure you have Bluetooth Serial Port Profile disabled, asthey share the same physical user serial port.Note: To use Nokia terminals, the device must be connected to the user serial port when the serverstarts up. Also, the terminal must be configured to operate in RS-232/AT command. Nokia terminalsare configured with the N20 or N30 Configurator application.For further information on using smsgw, see the makesms example in Section 6.3.1.3.5.4. User Level WatchdogWRAP User Level Watchdog daemon listens on UDP port 4266 for "id timeout" messages. "id"is an ASCII string, without spaces. If "timeout" equals to 0 (zero), the "id" is removed from thelist of processes to wait. If "timeout" is greater than 0 (zero), the "id" is added or updated.When there is no message for "id" received within the "timeout" seconds, the user level watch-dog dies and the kernel watchdog reboots Access Server.The watchdog command can be used to send messages to the watchdog daemon. This is donethrough command watchdog id timeout. For example, watchdog test 5.3.5.5. Remote ManagementAccess Server contains simple tools that provide means for full and secure remote managementof the device.The basic remote management can be performed using the WWW Setup interface, SSH com-mand line access, and SCP and SFTP file transfer protocols.In addition to those, Access Server contains WRAP Remote Management System for transferringmanagement packets over different media to Access Server and automatically sending responsepackets back.The management packets (*.wpk) are automatically processed when they are transferred to theautoinstall directory in Access Server (/tmp/obex by default, but configurable with the setupapplication or WWW interface at Setup −→ Applications −→ wpkgd settings). The easiest wayto transfer a management packet to this directory is to upload it from WWW Setup at Setup −→Advanced settings −→ Upload a software update.3.5.5.1. OverviewWRAP Remote Management System top level architecture is shown in Figure 3-2.27
Chapter 3. Using the SystemFigure 3-2. WRAP Remote Management ArchitectureA management action is performed using the following procedure:1. A customer system prepares the management packet (*.wpk).2. The management packet is delivered to Access Server, to the packaging daemon’s inbox di-rectory. You can currently use Bluetooth, SCP, SFTP and plain FTP to do this. The packet canalso be transmitted using a USB memory dongle, Compact Flash memory card or throughthe WWW Setup interface.3. The Access Server packaging daemon processes the management packet, possibly generat-ing a reply packet.4. (Optional) The reply packet is delivered to the customer system.3.5.5.2. Management Packet Format•The package name must be of format name.wpk, where "name" can be user defined.•Package must be a tar archive that is compressed with gzip (such as files named *.tar.gz or*.tgz).•The package must contain a package information file called wpkg.pif in the package root (thefile contents are described later), otherwise the built-in defaults for wpkg.pif are used.•All other files, if any exist, should be data files, scripts or executables required for the man-agement operation.28
Chapter 3. Using the System3.5.5.3. Management Packet Information File FormatThe management packet information file (wpkg.pif) consists of tags and their data, describedhere:%wpkg-version: 2Contains information for version checking. 2 is currently the only supported version. It is alsothe default value.%wpkg-prepare: [command line[s]]One or more commands (all commands are lines until the next tag is interpreted as a commandline) to execute. Commands may contain parameters, redirections and job control as well.The built-in default value for this is /usr/bin/dpkg -i *.deb || echo ERROR: Installation failed..This enables the special case of creating .wpk packets from .deb packets simply with tar czffoo.wpk foo.deb. (wpkg.pif is not needed in this special case).%wpkg-reply: methodThis value indicates where the generated reply packet is sent. By default, it is sent to where itcame from. Possible values are:•default•file:///path/filename•scp://remote:file•objp://bdaddr/•none%wpkg-format: typeThis value indicates what kind of a reply packet will be generated. Possible values are:•ascii (this is the default value, everything echoed by the prepare-section will be sent).•tgz (all files in the current directory will be sent).•vcf (same as ascii, but assume it is a vCard).•vmg (same as ascii, but assume it is a vMessage).•vnt (same as ascii, but assume it is a vNote).•vcs (same as ascii, but assume it is a vCalendar).•html (same as ascii, but assume it is HTML).%wpkg-auth: authOptional authentication string required by wpkgd.3.5.5.4. Management Operation Example: Hello WorldSee below for the simplest example of wpkg.pif:%wpkg-version: 2%wpkg-prepare:29
Chapter 3. Using the Systemecho Hello worldThis will generate a reply packet containing text "Hello world". You can generate the wpk filesimply by giving the command tar czf hello.wpk wpkg.pif.3.5.5.5. Management Operation Example: Software UpdateSee below for a more complex example of wpkg.pif:%wpkg-version: 2%wpkg-prepare:FOO=‘pwd‘cd /tar xzf ${FOO}/files.tar.gzecho Done.This example will extract files from the included files.tar.gz file. You can generate the wpkfile with command tar czf update.wpk wpkg.pif files.tar.gz.3.5.5.6. Management Operation Example: IPQUERYIn this example, we build a simple packet that can be used with a Bluetooth enabled phone toretrieve the IP address of an Access Server. File wpkg.pif reads:%wpkg-version: 2%wpkg-format: vcf%wpkg-prepare:ipaddr() {echo ‘ifconfig nap | grep "inet addr" | awk -F [:] \\\{print\\$2\\} | awk \\{print\\$1\\}‘}serialno() {echo ‘wrapid | grep Hardware | awk \\{print\\$5\\}‘}echo -e "BEGIN:VCARD\r"echo -e "VERSION:2.1\r"echo -e "N:‘serialno‘\r"echo -e "TEL:‘ipaddr‘\r"echo -e "URL:‘hostname‘\r"echo -e "END:VCARD\r"This example will send the reply back as a vCard (contact card). Please note that you have toinclude all required vCard formatting by yourself. You can generate the wpk file simply givingthe command tar czf ipquery.wpk wpkg.pif.To use this example, send the file ipquery.wpk to the inbox of your Bluetooth phone. Checkthat you have Bluetooth enabled in the phone. Then, from the phone’s inbox, send the fileipquery.wpk over Bluetooth to Access Server.30
Chapter 3. Using the System3.5.5.7. Management with USB Memory Dongle or Compact Flash Memory CardWhen an USB memory dongle or Compact Flash memory card is inserted, Access Server auto-matically tries to mount it (using VFAT type). If the mount is successful, Access Server scans theroot for *.wpk packets. If a packet is found, the WRAP Package daemon handles it. Optionalreply packets are saved back to the root folder (unless otherwise stated in the %wpkg-replytag).3.5.6. FTPIf you enable the FTP server, users can use it to log in anonymously to the /tmp/obex directorywith download access or as root with password buffy to the root directory with full access.The password and other settings can be changed on Access Server with the setup application orby editing the /etc/ftpd.conf file (see Section 2.4).Note: Do not enable FTP because it is insecure. Use SSH (SCP or SFTP) instead. A commonly usedclient with a graphical user interface is, for example, WinSCP (http://winscp.net/).3.5.7. Web ServerThe integrated web server in Access Server supports HTTP/1.0 methods GET and POST, andhas light user authentication capabilities. The content can be either static or dynamic - the WWWserver is CGI/1.1 compatible.The web server is always running and the content (http://wrap-ip-address/) is located in the/var/www/html/ directory in Access Server’s file system.The web server is configured to protect the WWW Setup interface with a username and pass-word. The default username and password can be changed as instructed in Section 2.4. For fur-ther information about using the web server for your own applications, see the web examplesin Section 6.3.1.3.5.8. SNMPA separate software update package is available from Bluegiga Techforum(http://www.bluegiga.com/techforum/). This update adds the Net-SNMP suite ofapplications to Access Server. The current Net-SNMP implementation for Access Server islimited and will be extended in the future. However, it can be used to poll the basic status ofAccess Server.Configuration details can be found and altered in configuration file /etc/snmp/snmpd.conf,which is accessible as described in Section 2.4.For more information about the Net-SNMP suite, see http://net-snmp.sourceforge.net/3.5.9. OpenVPNA separate software update package is available from Bluegiga Techforum(http://www.bluegiga.com/techforum/). This update adds the OpenVPN™, a full-featuredSSL VPN solution, to Access Server.For detailed instructions on using OpenVPN with Access Server, see Section 9.4.For more information about the OpenVPN™, see http://openvpn.net/.31
Chapter 3. Using the System3.5.10. SSHBy default, users can use SSH to log in (or SCP and SFTP to transfer files) as user root withpassword buffy. The password can be changed on Access Server by using command passwdor with the setup application.3.5.11. TelnetIf you enable telnet, users can log in over telnet as user root with password buffy. The pass-word can be changed on Access Server using the command passwd or with the setup applica-tion.Note: Do not enable telnet because it is insecure. Use SSH instead.3.5.12. NTPThe ntpd service uses the standard Network Time Protocol (NTP) to keep Access Server systemtime automatically in sync using a random selection of eight public stratum 2 (NTP secondary)time servers. The service is also configured to answer NTP requests from other devices.The NTP server configuration can be altered by editing its configuration file /etc/ntpd.conf.3.6. UtilitiesAccess Server is basically a small Linux system. Whether logged in from the management con-sole or with SSH, your shell session starts as the root user in the root directory. After that, youhave the option to use most of the standard Linux utilities, briefly listed and described in Table3-3. Most of the commands have a small built-in usage help that can be seen by executing thecommand with the -h or --help parameter.Application Descriptionadduser This command add user to the system.arping This command pings hosts by ARP requests/replies.awk Pattern scanning and processing language.b2b_class1 WRAP baseband module control script (set basebands to class 1).b2b_class2 WRAP baseband module control script (set basebands to class 2).b2b_class3 WRAP baseband module control script (set basebands to shortestpossible range).basename Strip directory and suffix from file names.bash Bourne-Again SHell.btcli WRAP iWRAP Server Command Line Interface utility.btproxy WRAP iWRAP Proxy for Access Servers (test revision).bunzip2 Decompress bzip2-compressed files.bzcat Decompress bzip2-compressed files to stdout.cardctl Monitor and control the state of PCMCIA sockets.cat Concatenate files and print on the standard output.32
Chapter 3. Using the SystemApplication Descriptionchat Automated conversational script with a modem.chgrp Change group ownership.chkconfig Updates and queries runlevel information for system services.chmod Change file access permissions.chown Change file owner and group.chroot Run command or interactive shell with special root directory.clear Clear the terminal screen.cmp Compare two files.cp Copy files and directories.cpio Copy files to and from archives.crontab Maintain crontab files for individual users.cut Remove sections from each line of files.date Print or set the system date and time. Notice that the date commanddoes not store the date into the battery powered real time clock. Usethe hwclock application instead.dd Convert and copy a file.deluser Delete a user from the system.df Report file system disk space usage.dfu WRAP baseband module firmware upgrade tool.dialup WRAP iWRAP helper application.dirname Strip non-directory suffix from file name.dmesg Prints or controls the kernel ring buffer.dpkg A medium-level package manager for (.deb) packages.dpkg-deb Debian package archive (.deb) manipulation tool.du Estimate file space usage.dump_cis Retrieves and parses the Card Information Structures for insertedPCMCIA devices, or optionally, parses CIS information from a file.dun WRAP iWRAP helper application.egrep Print lines matching a pattern.encode_keychange Produce the KeyChange string for SNMPv3.env Run a command in a modified environment.expr Evaluate expressions.false Do nothing, unsuccessfully.fgrep Print lines matching pattern.find Search for files in a directory hierarchy.free Display the amount of free and used memory in the system.ftp Internet file transfer program.gdbserver Remote server for GDB debugger. Available in a separate softwarepackage.33
Chapter 3. Using the SystemApplication Descriptiongetty Opens a tty, prompts for a login name, then invokes /bin/login.grep Print lines matching a pattern.gunzip Expand gzip compressed files.gzip Compress files into gzip format.head Output the first part of files.hexdump A filter which displays the specified files, or the standard input, ifno files are specified, in a user specified format.hostid Print out a unique 32-bit identifier for the machine (not yetimplemented).hostname Show or set the system’s host name.hwclock Query and set the hardware clock.id Print information for username or current user.ide_info IDE device information.ifconfig Configure a network interface.ifport Select the transceiver type for a network interface.ifuser Checks to see if any of the listed hosts or network addresses arerouted through the specified interface.insmod Loads the specified kernel modules into the kernel.ip TCP/IP interface configuration and routing utility.iptables, ip6tables IP packet filter administration.kill Terminate a program.killall Kill processes by name.ln Make links between files.logger Make entries into the system log.login Sign on.ls List directory contents.lsmod List loaded modules.md5sum Compute and check MD5 message digest.mkdir Make directories.mknod Make block or character special files.mktemp Make a temporary file name (unique).modprobe High level handling of loadable modules.more File perusal filter for crt viewing.mount Mount a file system.mv Move (rename) files.net-snmp-config Net-SNMP tool.nslookup Queries the nameserver for IP address of given host.ntpd Network Time Protocol NTP daemon.34
Chapter 3. Using the SystemApplication Descriptionobexbrowser The WRAP obexbrowser. A command line OBEX client interface.obexget The WRAP OBEX tool for retrieving a file from a remote devicewith ObjP/FTP support.obexput The WRAP OBEX tool for sending a file to a remote device withObjP/FTP support.pack_cis Convert a text description of a PCMCIA Card Information Structure(CIS) to its packed binary representation.passwd Update a user’s authentication token(s).picocom Minimal dumb-terminal emulation program. Available in a separatesoftware package.pidof Find a process ID of a running program.ping, ping6 Send ICMP ECHO_REQUEST packets to network hosts.ps Report process status.pwd Print the name of the current/working directory.rb, rx, rz, sb, sx, sz Xmodem, Ymodem, Zmodem file receive and send.rdate Get and possibly set the system date and time from a remote HOST.reboot Reboot the system.renice Alter the priority of running processes.reset Resets the screen.rm Remove files or directories.rmdir Remove empty directories.rmmod Unload loadable modules.route Show / manipulate the IP routing table.scp Secure copy (remote file copy program).scsi_info SCSI device description tool.sed A Stream EDitor.setup The WRAP Setup Application. See Section 2.4.sftp Secure file transfer program.sleep Delay for a specified amount of time.snmp* Set of standard SNMP command line applications.sort Sort lines of text files.ssh, slogin OpenSSH SSH client (remote login program).ssh-keygen SSH authentication key generation, management and conversion.strace Utility to trace system calls and signals. Available in a separatesoftware package.strings Display printable strings in binary file.stty Change and print terminal line settings.su Run a shell with substitute user and group IDs.sulogin Single-user login.35
Chapter 3. Using the SystemApplication Descriptionsupportinfo Output collectively all the system status and configurationinformation.sync Flush filesystem buffers.tail Output the last part of files.tar Tar archiving utility.tcpdump Utility for dumping traffic on a network. Available in a separatesoftware package.telnet User interface to the TELNET protocol.test Check file types and compare values.time Run command and display its resource usage information whenfinished.top Provides a view to processor activity in real time.touch Change file timestamps.tr Translate or delete characters.traceroute Trace the route that IP packets take on their way to the host.true Do nothing, successfully.tty Print the file name of the terminal connected to standard input.uartmode WRAP Uartmode: Change the mode of the user serial port (DTE orDCE).umount Unmount file systems.uname Print system information.uniq Remove duplicate lines from sorted lines.unzip List, test, and extract compressed files in a ZIP archive.uptime Tell how long the system has been running.usleep Sleep some number of microseconds.uudecode Decode a file create by uuencode.uuencode Encode a binary file.wc Print the number of bytes, words, and lines in files.vi A text editor.wget A utility to retrieve files from the World Wide Web.wrapfinder Finds other Access Servers in the network.wrapid Access Server identification program. Shows build and hardwareconfiguration information.which Shows the full path of (shell) commands.whoami Prints the user name associated with the current effective user id.zcat Expand gzip compressed files to the standard output.zcip Zero Configuration Networking application.xargs Build and execute command lines from the standard input.Table 3-3. Access Server Utilities36
Chapter 3. Using the System3.7. Real Time ClockThe system clock is read from the battery operated real time clock during boot. The time be-tween the system time and the real time clock is automatically synchronized when the systemis rebooted using the reboot command. Synchronizing can also be done using the hwclock --systohc --utc command. Give command hwclock --help for more information about the hw-clock utility.3.8. Time ZoneThe default time zone in Access Server is UTC. You can change the timezone by replacingthe file /etc/localtime with the correct file from your desktop Linux system (using your/etc/localtime or a desired zone from /usr/share/zoneinfo).3.9. System Re-Install and UpgradeAccess Server can be re-installed with the latest software version. The latest software updatesand instructions are available at http://www.bluegiga.com/techforum/.Most of the software updates are delivered as a wpk file.The easiest way to install the latest software version is:1. Start Access Server.2. Copy the wpk file or files to an empty USB memory dongle.3. Insert the dongle in Access Server4. One or several LEDs will turn on, and after 10-60 seconds they will all turn off.5. Remove the dongle and reboot Access Server.6. You have now successfully upgraded Access Server.See Section 3.5.5 for detailed descriptions of other options and how to create your own wpk files.37
Chapter 4. SPP-over-IPSPP-over-IP is a special functionality of iWRAP Bluetooth servers running in Access Servers.It offers a transparent way to transmit data from Bluetooth Serial Port Profile (SPP) enableddevices to server computers or PCs. Several transport medium are supported, such as Ethernet,Wi-Fi or and GPRS.4.1. How SPP-over-IP WorksThe SPP-over-IP application enables transparent data transfer between any Bluetooth Serial PortProfile (SPP) complaint device and a server, laptop or desktop connected to the same network.This enables plug n’ play connectivity from a Bluetooth network to any standard TCP/IP basednetwork. See Figure 4-1 for an overview of the application and a brief introduction to its func-tionality.Features of SPP-over-IP are:•Access Server 2291 supports 7 incoming SPP connections.•Access Server 2293 supports 21 incoming SPP connections.•SPP-over-IP can be used over Ethernet, Wi-Fi or GRPS networks.•SPP-over-IP also works over Bluetooth Personal Area Networking (PAN) connections, so notall Access Servers need to be physically (cable) connected to the TCP/IP network, but someAccess Servers can linked using the Bluetooth PAN connection. This is referred to as repeateroperation.•If SPP-over-IP application cannot open the TCP connection to defined IP address and port,the SPP connection will not be accepted.•If the TCP server on PC is closed, all SPP connections will be closed as well.•When Access Server is in its default configuration, it tries to enable sniff power saving modeon all idle Bluetooth connections to minimize power consumption.•SPP-over-IP can also be used to opposite direction, i.e. Access Server opens the Bluetoothconnections to dedicated Bluetooth devices. See Section 4.1.4 for more details.•SPP-over-IP can also be combined with the Tactical Software’s Serial/IP® software. Serial/IPsoftware converts automatically TCP connections to virtual COM ports on the host PC, solegacy applications utilizing COM-ports instead of TCP/IP can also be used.4.1.1. Standard OperationWith the standard configuration, SPP-over-IP works as described below:•Listens for incoming Serial Port Profile (SPP) connections•Takes control of all incoming connections•Opens a TCP connection to the defined IP address and TCP port•Forwards all incoming data from the SPP device to the established TCP connection and viceversa38
Chapter 4. SPP-over-IPFigure 4-1. SPP-over-IP Network ArchitectureAll the server computer needs to do is to listen for incoming TCP connections from AccessServer to a specified TCP port and receive/send the application data.4.1.2. Repeater OperationThe SPP-over-IP application can also be used in a so-called repeater mode. This feature is usefulwhen all Access Servers can not be directly connected to the TCP/IP network, but they can beconnected to other Access Servers by using Bluetooth PAN-connection. PAN enables transmit-ting TCP/IP packets wirelessly over Bluetooth. The figure below illustrates this configuration:Figure 4-2. Repeater Mode in SPP-over-IP4.1.3. SPP-over-IP over GPRSSPP-over-IP software can also be used over GPRS instead of wired Ethernet connection. This39
Chapter 4. SPP-over-IPrequires that Access Server is equipped with a working GSM/GPRS compact flash card. SeeAppendix D for supported cards.Figure 4-3. SPP-over-IP over GPRSNotice when using GPRS:•Data upload rate is around 8-12kbps (depending on GPRS card)•Data download rate is around 32-48kbps (depending on GPRS card)•Data transmission delays can be very high, sometimes even seconds•GPRS connection may be unreliable and break easily. This should be taken account whendesigning the system. If GPRS connection breaks, all the TCP and Bluetooth connections willalso be closed.4.1.4. Opening Connections from Access ServerIn the basic SPP-over-IP use case, Access Server is in passive mode and only accepts incom-ing connections. It is however possible to implement a system where Access Server opens theBluetooth connections to the defined static Bluetooth devices or, alternatively, on ad-hoc basis.In this case, special software must be developed for Access Server, which handles the outgoingconnections and decides where they are opened to. This software can be developed with theAccess Server Software Development Kit (SDK). The software can be written with C, C++ orstandard Linux scripts.40
Chapter 4. SPP-over-IPFigure 4-4. Access Server Opening the Connections4.1.5. SPP-over-IP and COM PortsSPP-over-IP can also be used together with Tactical Software’s Serial/IP® software. Serial/IPsoftware simply converts the TCP connections into virtual COM ports on the host computer.This is very useful in applications, which do not have support for TCP/IP but support COMports instead.Figure 4-5. SPP-over-IP with Serial/IPAn evaluation version of Serial/IP can be downloaded from:http://www.tacticalsoftware.com/products/serialip.htm4.2. Configuring SPP-over-IPThis chapter briefly instructs you to configure SPP-over-IP to work in different network setupsor use cases.41
Chapter 4. SPP-over-IP4.2.1. PreparationsSPP-over-IP is easiest to configure through WWW setup, which allows you to access all thenecessary configurations.First, you must figure out Access Server’s IP address (if it is connected to a TCP/IP network).This is easiest to do with the WRAPFinder software:1. Start the WRAPFinder software2. Scan your network for available Access Servers3. Choose the correct Access Server4. Press the Connect buttonYour web browser opens the WWW setup of the selected Access Server.Figure 4-6. WRAPFinder5. Once the browser window has opened, click the Setup link42
Chapter 4. SPP-over-IPFigure 4-7. WWW Setup Login6. Type in you user name and password and you get access to the main view of the setup:Figure 4-8. WWW Setup Main ViewNote: The "basic" Bluetooth Serial Port Profile must be disabled for SPP-over-IP to work. By default,this is the case. You can verify it by checking that serialport service (which implements the profile) isoff in WWW Setup −→ Applications −→ Default startup Applications (see Figure 4-9).43
Chapter 4. SPP-over-IPFigure 4-9. Checking that Bluetooth Serial Port Profile is disabled.4.2.2. PreparationsSPP-over-IP settings are modified in iWRAP servers’ configuration file/etc/bluetooth.confwhich can be edited by navigating in WWW Setup to Setup −→Bluetooth settings −→ Edit startup script.To enable SPP-over-IP, add lines similar to following to the end of that file (lines starting with #are comments which can be left out):# Forward incoming connection to IP 192.168.42.99 socket 7444SET BLUETOOTH LISTEN 1 192.168.42.99:7444# Add SDP record for Serial Port ProfileSDP ADD SPP 1 "SPP-over-IP"In the example configuration above, RFCOMM channel 1 is used by the SPP-over-IP service.You can, however, use any other free channel as well. The RFCOMM channel must be same inboth SDP ADD (see SDP ADD for details of command syntax) and SET BLUETOOTH LISTEN(see Table 7-1 for details of command syntax) configuration commands.44
Chapter 4. SPP-over-IPThe text "SPP-over-IP" is the name of the service shown in Bluetooth service discovery. Nor-mally, there should be no need to specify a different name, but nobody forces you to use "SPP-over-IP".In the example, connections are forwarded to a server listening for incoming connections to TCPport 7444 in host with IP address 192.168.42.99. You must change these to match your system.See Figure 4-10 for WWW Setup example of configuration.Figure 4-10. SPP-over-IP Configuration Made over WWW SetupOnce you have done your configuration, press the Save button and restart the server so that thesettings take place.4.2.3. Repeater ConfigurationIf you want to configure Access Server also to act as a repeater (see Figure 4-2) you must makesome additional configurations. Add the line below to your Bluetooth startup script (line start-ing with #is comment which can be left out):# Automatically connect to Access Server with PAN-NAP enabledSET CONTROL AUTOEXEC CALL 00:07:80:bf:01 PAN-NAP45
Chapter 4. SPP-over-IPYou must replace the Bluetooth address used in the example (00:07:80:80:bf:01) with the Blue-tooth address of the Access Server, on which you want to receive the PAN connection.Note: The server receiving the PAN connection must have the PAN-NAP profile enabled. This is bydefault not the case, so in setup or its WWW interface, ensure that the setting at −→ Bluetooth settings−→ Bluetooth profiles −→ Enable PAN network access point profile says yes. No other configurationis needed. See Section 3.2.5 for more information on PAN profiles.The Bluetooth PIN codes must be the same in both Access Servers.Figure 4-11. Repeater Configuration4.2.4. Wi-Fi ConfigurationIf Access Servers must be connected to Wi-FI (WLAN) instead of physical Ethernet connection,you also need to make additional configurations through the WWW setup.See Section 3.3.3 for more information.4.2.5. GPRS ConfigurationIf Access Servers must be connected to GPRS network instead of physical Ethernet or Wi-Ficonnection, you also need to make additional configurations through the WWW setup.See Section 3.3.1 for more information.46
Chapter 5. ObexsenderObexsender is one of the built-in applications in Access Server. It is dedicated to Bluetooth prox-imity marketing, content distribution, location based services, and much more. Access Serverplus Obexsender provide the user with a ready platform to start content distribution includingall the necessary Bluetooth functions from discovering the devices to transmitting the content.The user needs to only focus on what, when, and to whom to send the content - rest is takencare of by Access Server and Obexsender.The figure below illustrates a simplified Obexsender network:Figure 5-1. Simplified Obexsender network5.1. Key Features•Automatic device discovery and content push over a Bluetooth connection•18 simultaneous Bluetooth connections with one Access Server•Upload speed even up to 75KB/sec with Bluetooth 2.0+EDR•Content can be stored locally - with external memory even up to 2GB space•Wide networking support: Bluetooth, Ethernet, Wi-Fi, GPRS and EDGE•Secure remote connections over a Virtual Private Networking•Remote file system support•Lots of filtering options, such as device type, or distance from access server•Extensive logging•Interaction between several Access Servers•Content time stamping47
Chapter 5. Obexsender5.2. Use CasesThis chapter describes some possible Obexsender use cases.5.2.1. Content PushThis is the standard functionality in Obexsender. In content push mode, Obexsender is scanningfor devices and pushing it to clients who belong to the target group (not opted out by filtering).Figure 5-2. Obexsender Use Case: Content Push5.2.2. Content PullObexsender can also be configured into a content pull mode. In this mode, the transaction isinitiated by the user. The user can send any file to the server or alternatively a file containingsome specific string such as "MP3" or "NOKIA N73". The server parses the received file and asa response pushes a corresponding file to the user if such exists.48
Chapter 5. ObexsenderFigure 5-3. Obexsender Use Case: Content Pull5.3. ConfigurationThis chapter contains instructions from the most basic Obexsender configuration to the moreadvanced use cases.5.3.1. Getting StartedThe easiest and fastest way to configure Obexsender is through the WWW setup. To do this,your Access Server must be connected to the same network as your PC or, alternatively, youcan also use a direct Ethernet cross cable or a Bluetooth PAN connection (see Section 3.2.5 forinstructions on how to enable PAN). By default, Access Server uses DHCP, so if you connect itto your LAN, it must support DHCP as well.1. Once you have successfully connected Access Server, start the "WRAPFinder" software.WRAPFinder lists all the Access servers in the same network as your PC.If Access Server does not show immediately, you may need to push the Rescan button acouple of times.49
Chapter 5. ObexsenderFigure 5-4. WRAPFinder2. Next, select the correct Access Server and press the Connect button in the WRAPFinderuser interface. An internet browser window opens with the Access Server IP address in theaddress bar.Figure 5-5. Access Server WWW Setup3. Click the Setup link. A login screen is opened. Enter a correct user name and password.50
Chapter 5. ObexsenderFigure 5-6. WWW Setup Main Page4. After a successful login, you get access to the WWW setup main page.Note: At this point, you should check your access server software version. Obexsender works onlywith software version 2.2.0 and newer. At the bottom of the screen you should see a line saying:Access Server, S/N 0511170051 (wrap-2-2) - Copyright © Bluegiga Technologies Inc, 2001-2006If the version is older than "wrap-2-2", you must first update your Access Server. Latest softwarereleases and instructions can be found from www.bluegiga.com/techforum/5.3.2. Updating ObexsenderIf you have software version 2.2.0 in your Access server, you need to update Obexsender to thelatest version. It offers many new, useful and necessary features that include:•Retry delay, scan delay and reply delay•Dump delay•Possibility to save incoming files, i.e. remote requests•Watchdog support•Regexp and Unicode support•Other minor bug fixes and improvementsThe rest of the manual concentrates on the latest Obexsender, but it also covers all the featuresoffered by previous Obexsender. The main menu of latest (at the time of writing) Obexsender isshown in Figure 5-751
Chapter 5. ObexsenderFigure 5-7. Latest Obexsender Main Menu5.3.3. Ensuring Obexsender is EnabledBy default, the Obexsender application is enabled, so as a first task you should of course enableit if. This is quite simply done from the following page in the WWW setup (Figure 5-8): AccessServer - Setup - Applications - Default bootup applicationsObexsender is enabled after a reboot. However, if you have not completed rest of the configura-tion, do not reboot Access Server yet.52
Chapter 5. ObexsenderFigure 5-8. Default Boot-up ApplicationsNote: For Obexsender to start at all, you must define at least one file to be pushed to remote devices.You can do this in:Access Server - Setup - Applications - ObexSender settings - Edit configuration fileFor more information, see Section 5.3.6, chapter "Send these files in this order".5.3.4. Basic Obexsender Configurationconfiguration. As a first step please go the to the WWW setup page in Setup −→ Applications−→ Obexsender settings.On this page (Figure 5-7) you can configure the basic Obexsender settings. See Section B.4.3 fordefault values and detailed descriptions of the settings.5.3.5. Uploading FilesYou can easily upload new content (files) for Obexsender by selecting Upload a new file in theObexsender main menu. All you need to do is browse for the file you want to upload and53
Chapter 5. Obexsenderclick Upload. You will see a confirmation note, for example "File /usr/local/obexsender/Bike.jpguploaded" .At the moment, you can only upload to /usr/local/obexsender directory using WWW setup.If you would like to upload to another directory, you must use secure FTP to accomplish that.(Normal FTP is disabled by default in Access Server for security reasons). For example WinSCP,available from http://www.winscp.org, is a good application that for secure FTP file transmis-sions.5.3.6. Advanced Obexsender ConfigurationSpecifying the content (files) to be sent by ObexSender is done by editing the/etc/obexsender.conf file. The file also contains all configurable ObexSender settings (thesettings covered earlier and some advanced settings).In this section, we will only go through the settings that can not be configured using the WWWinterface.Note: Lines beginning with the hash character "#" are comments and ObexSender will ignore them.Advanced Configuration DirectivesbasebandSpecify which iWRAPs are used for sending/inquiry. By default all basebands in this AccessServer are in use.Syntax: baseband <ip> <port> [password]Example:baseband 127.0.0.1 10101ignoreDon’t send to these Bluetooth devices. The default setting ignore 00:07:80: is recom-mended. It disables sending files to other Bluegiga Access Servers.Syntax: ignore <bdaddr-prefix>Example:ignore 00:07:80:testerAlways send to these devices when found (60s interval). Other timeout settings are ignoredwith these devices.Syntax: tester <bdaddr>Example:tester 00:07:80:80:00:bfscandirObexserver’s directory (for remote requests). This is the directory which ObexSendersearches for remote requests. It should match the directory configured for Obexserver(/tmp/obex/ in default configuration.Syntax: scandir <directory>54
Chapter 5. ObexsenderExample:scandir /tmp/obexfileSpecify full pathname(s) of file(s) to be sent, possibly at given time. If there are no filesspecified, ObexSender does not do inquiry. The files specified are sent in listed order.Syntax: file <filename> [timestamp]Example for sending tp1.gif first, then tp2.gif:file /usr/local/obexsender/tp1.giffile /usr/local/obexsender/tp2.gifTimestamp can be specified as Weekday (Mon/Tue/Wed/Thu/Fri/Sat/Sun), Starthour-Endhour or WeekdayStarthour-Endhour:Example for sending image.jpg on Fridays, image2.jpg every day between 8am and 2pmand image3 only on Tuesdays between 8am and 2pm:file /usr/local/obexsender/image1.jpg Frifile /usr/local/obexsender/image2.jpg 8-14file /usr/local/obexsender/image2.jpg Tue8-14replyThis feature allows you to request specific content from ObexSender. Basic operation is thatyou send a file with needed information to Access Server and you will receive a correspond-ing file in return.The keyword specified is matched for "<content of file from user> + <bd-ad-dr-es-ss>".Keyword is extended regular expression (regex) and case-non-sensitive.Syntax: reply <keyword> <filename>Example for replying with pic.gif if a GIF image is sent to Access Server (in fact thismatches for the string "GIF" found in the image headers; you could use "VCF" for vCards,"JFIF" for JPEG images and so on):reply GIF /usr/local/obexsender/pic.gifExample for replying only to a certain device (its Bluetooth address is already known),ignoring file content (pic.gif is sent back after device sends anything to Access Server):reply 00:07:80:80:00:bf /usr/local/obexsender/pic.gifdelnomatchThis setting applies if you’re using REPLY-feature of ObexSender and you send a file to Ac-cess Server to receive specific content. Now, if the file you sent doesn’t match to ObexSenderconfiguration, the file will be deleted if this settings is set to "Yes". Otherwise the file issaved. Matching files are always deleted. Disable this if you have some other program do-ing ObjP/FTP. By default, this is enabled.Syntax: delnomatch Yes|NoExample of disabling the functionality:delnomatch No55
Chapter 5. ObexsenderverboseDetermines the verbosity level of ObexSender logging. The Level can be from 0 to 4, definedby the count of lines with uncommented term verbose. Level 0 means that there will beminimal logging and level 4 that there will be maximum amount of logging.WarningFull verbose logging (4) should be used only for debugging purposes,since it creates a lot of logs and the flash memory can be filled ratherquickly.Syntax: verboseExample of setting maximum level of ObexSender logging:verboseverboseverboseverbosedumpfileYou can choose to save the information about already served devices, so you can form aso-called "block list". If this block list is saved in flash memory, it will be preserved even ifAccess Server is rebooted. This basically ensures that remote devices don’t receive the samecontent even if Access Server is rebooted.Syntax: dumpfile <filename>Example of dumpfile in default location:dumpfile /usr/local/obexsender/ignore.dumpdumpdelayDetermines how often (in seconds) a dump file is updated. "0" disables this feature. Werecommend to use a rather big value, for example 15min = 900s.WarningUsing a small value here can physically burn the flash memory over time.Syntax: dumpdelay <seconds>Example of setting dumpdelay with recommended value:dumpdelay 900broadcastThis settings tells ObexSender to broadcast already served devices to other ObexSenders(specified using unicast IP address, broadcast IP address or interface name).Syntax: broadcast <unicast-ip>|<broadcast-ip>|<interface>Example of broadcasting to all ObexSender in the same network with the default interface(nap):broadcast nap56
Chapter 5. Obexsender5.3.7. How to Store Files Sent to Access ServerBy default, all files sent over Object Push to Access Server are stored to the /tmp/obex folderand deleted after they have been processed. It is however possible to save the files to anotherdirectory. The following procedure shows how to automatically copy these files to an examplefolder /usr/local/remote_request. (NOTE: you must first create this folder!):1. Create a copier script /usr/local/bin/copier. You can do it for example in theWWW setup -> Advanced settings -> Edit other configuration files and typing here/usr/local/bin/copier. Put the following script into the file:#!/bin/sh# to be called from obexsender: --fork /usr/local/bin/copier# This directory must exist:SAVEDIR="/usr/local/remote_request"/bin/cp "$1" "${SAVEDIR}/$3‘/bin/date "+%s"‘-‘echo $1 | /usr/bin/cut -f 2 -d-‘"2. Make the script executable by giving command chmod a+rx /usr/local/bin/copier at thecommand line interface.3. Edit /etc/bluetooth.conf and append to the end of the file the following line (below theline is in two parts, combine these in the configuration file):SET BLUETOOTH LISTEN 3 "/usr/sbin/obexserver --bdaddr $b --prefix $b-$P---fork /usr/local/bin/copier" 1104. Save changes and restart Access Server.Now all incoming files are copied to the /usr/local/remote_request directory. The format ofthe files is bdaddr-btserverport-timestamp-filename.ext.5.4. Monitoring ObexsenderObexsender creates log about its operation to a specified log file. By default, no log file is speci-fied, so you should do this first with instructions provided in Section 5.3.4.When you choose View log in the Obexsender menu, you can only see the summary ofObexsender action, i.e how many successes, failures and retries have occurred. When youselect the date or Total in the summary view, you will see more details. You will see to whichBluetooth address the content was sent and if the transmission was a failure or success, or iftransmission will be retried later. See some example logging in the figure below:57
Chapter 5. ObexsenderFigure 5-9. Detailed Obexsender Log ViewIf you want to see even more details about how Obexsender is performing, you can increase theverbosity level of logging. See Section 5.3.6, chapter "Be verbose (0-4)". Full verbose logging isusually needed in problem solving only.5.5. Troubleshooting and Known IssuesTroubleshooting:•Obexsender is not sending anything?Make sure you have at least one content file specified in the configuration file(obexsender.conf). See Section 5.3.6, topic "Send these files in this order".Also check that Obexsender is activated, see Section 5.3.3.•Mobiles receive files only to 10-20 meters. Isn’ t Obexsender supposed to work up to 100 meters?Almost all mobile phones are so-called "Class 2" devices, which means that their maximumrange is about 10 meters. In good conditions they can achieve even 30 meters.If you know there are "Class 1" devices (range up to 100 meters) in the area, you can check theRSSI value you have set, which determines the operational range of Obexsender. See sectionSection 5.3.4.58
Chapter 5. ObexsenderKnown issues:•If you enter a non-existing path in "Log file name" configuration, Obexsender will fail to start.•If you have entered a password for the iWRAP (Bluetooth) interface and the same passwordis not set in the Obexsender configuration, Obexsender will fail to start.•If several log files are defined in obexsender.conf, Obexsender will fail to start59
Chapter 6. Software Development Kit6.1. Introduction to SDKThis manual describes how to create and use applications by using Access Server’s SoftwareDevelopment Environment. The relationships between the applications in the Access ServerSoftware Platform are shown in Figure 6-1.Figure 6-1. Relationship Between Customer Applications and Access Server Software6.2. Installing SDKNote: The Software Development Environment can only be installed on a Personal Computer (PC)running the Linux operating system.6.2.1. Access Server Software Development Environment SystemRequirementsThe following hardware and software are required to run the Access Server Development Envi-ronment:60
Chapter 6. Software Development KitA PC with:•CD-ROM drive•The Linux operating system (the SDK has been tested with RedHat Enterprise Linux 3 andabove, Fedora Core 2 and above; Suse and Ubuntu are reported to work too)make and gawk must be installedDevel libraries (especially zlib-devel,e2fsprogs-devel and ncurses-devel) must be in-stalledmodutils-2.4.26 or newer must be installed•300MB of available hard disk spaceAn Ethernet connection to a Local Area Network (also connected to Access Server) is highlyrecommended.Mount the Access Server SDK CD-ROM or ISO image, change the current working directoryto where it is mounted, and run the install script. If the user running install does not haveprivileges to create the directory for the toolchain, normally /usr/local/arm, the install scriptprompts for root’s password.Example (user input is printed like this):$mount /dev/cdrom /mnt/cdrom$ (or mount -o loop /path/to/sdk2.iso /mnt/cdrom)$cd /mnt/cdrom$sh installDuring the installation, the system will prompt you with some questions (described below)regarding the components to install and the paths to install them to. If you are not familiar withLinux, just press enter to these questions to accept the default values. The default values aresuitable for most users and systems.6.2.2. Questions Asked by the Install ScriptAccess Server toolchain directory (default: /usr/local/arm)This is the path where you want the Access Server Software Development tools(arm-linux-gcc, etc.) to be installed.Note: If you change this value, the Access Server tools and libc must be recompiled. The recompila-tion process is complicated and lengthy, and it can also fail, depending on your system. Recompilationis automatically done by the install script, if necessary.Development directory (default: [home_of_current_user]/asdk)This is the path where you want the Access Server Software Development Environment to beinstalled.Development directory owner (default: [current_user])(Asked only if run as root.) This is the development directory owner’s username.61
Chapter 6. Software Development KitNote: If this is not the username of the developer for whom the Software Development Environmentis being installed, the user will not have rights to use the development files and therefore can notdevelop any Access Server software.Install toolchain sources (default: no - unless the tools directory was changed)This value indicates whether the toolchain sources will be installed. The sources are only re-quired if the Access Server tools directory was changed from the default target location in step1.Compile image after installation (default: yes)If set to yes, the install script will compile the Access Server filesystem image to test that theinstallation was successful and that the Development Environment is working correctly.6.3. Creating ApplicationsThe fastest way to start developing Access Server applications is to study, change, and recompilethe example files in the asdk/examples directory.6.3.1. Application ExamplesTo demonstrate the software development features of Access Server, the Access Server SoftwareDevelopment Environment comes with several example applications.6.3.1.1. Installing ExamplesThe compiled example files are located in WPK packets on the Access Server SDK tree in subdi-rectories of directory asdk/examples.The examples can be manually uploaded and installed on Access Server by sending them tothe /tmp/obex directory. The wpkgd server automatically installs them. Uploading can be doneover Bluetooth, SCP, SFTP or WWW Setup −→ Advanced −→ Upload a software update (seeFigure 2-14).6.3.1.2. Running ExamplesThe examples, with their usage and purpose, are described in Table 6-1.Example Usage Purposehelloworld /usr/bin/helloworld The "Hello, world!" application.serial /usr/bin/serial /dev/ttyAT1 "Hello, world!" to the serial port.Notice that /dev/ttyAT1 must befree (no WRAP SMS Gateway orBluetooth Serial Port Profile is usingit).62
Chapter 6. Software Development KitExample Usage Purposeforkserver SET BLUETOOTH LISTEN 11/usr/bin/forkserverThis is the simplest BluetoothRFCOMM server example. Use, forexample, btserver as a client to testthis example. This example waits fora full line from the client, echoes isback and then exits.btlogger SET BLUETOOTH LISTEN 11/usr/bin/btlogger /tmp/logfileThis is a simple BluetoothRFCOMM server example, whichlogs lines received from theconnected client, and answers with"ACK". Use, for example, btserveras a client to test this example.btserver /usr/bin/btserver - for server mode(if no forkserver is running),/usr/bin/btserver <bdaddr ofbtserver in server mode orforkserver> 11 for client modeThis is an advanced iWRAP clientexample, which can run both as anRFCOMM server, when it works asforkserver, or as a client, when itsends "YooHoo" to remote server,waits, displays the response, andquits).ledtest /usr/bin/ledtest I/O: LED example.m2n echo testmessage | /usr/bin/m2n This is a Machine-2-Network (M2N)example. System Logger (syslogd)configuration is needed for actualremote connection. Without it, theexample simulates it locally.www Browse to http://wrap-ip-address/example.htmlDemonstration of the web servercapabilities.makesms Browse tohttp://wrap-ip-address/send.html.Notice that this example assumesthat WRAP SMS Gateway is up andrunning (see Section 3.5.3).This example demonstrates WRAPSMS Gateway by sending SMSmessages with it.setup-helloworld This example demonstrates how toadd a new helloworld submenu tothe WWW Setup, with two menuitems that change the variables in/etc/sysconfig/helloworld file.Table 6-1. Examples, Their Usage and Purpose6.3.2. Creating a New ProjectTo start a new project, you must create a new subdirectory in your Development Environment’sdirectory (asdk/) and add your application source files and Makefile to that directory.A project skeleton can be automatically created by using the Access Server Project AppWizard.63
Chapter 6. Software Development KitJust give the make appwiz APP=dir/to/newapp command in the Development Environment’stop level directory (asdk/). A "hello world" example ANSI C project is then created.To use C++ compiler, replace $(do_link) with $(do_link_cc) in Makefile.The details of the compile process and variables you may need to modify before compiling yourapplication, such as CFLAGS,LDFLAGS and CXXFLAGS, can be seen in file asdk/Rules.mak.Now you have a new project waiting for coding. To compile the project, run make in theasdk/dir/to/newapp directory.The build system also creates the installation packet (hello-timestamp.wpk), which can betransferred to the /tmp/obex directory of Access Server from where it is installed automatically.6.3.3. Building from the Command LineThe Access Server Development Environment uses the ARM port of the GNU bintools andcompilers to build applications. If you are not familiar with Linux development, use the methodexplained in the previous section instead of writing your own makefiles.If you still want to use your own development environment, there are two minor issues to re-member:1. Tools are prefixed with arm-linux-, so for calling the gcc C-compiler, you must call arm-linux-gcc, and so on.2. Tools are located in /usr/local/arm/3.4.5/bin/ directory, which is not in PATH by de-fault.6.3.4. Transferring an Application to Access ServerTo run an application on Access Server, it must first be transferred to it. There are several waysof doing this (see Section 2.3.3). The most convenient ways in conjunction with software devel-opment are discussed in the following subsections.6.3.4.1. Transferring an Application Using SCP or SFTPAn SCP transfer is done with a single command. In the following example, myapp is transferredto the /tmp directory in Access Server:$scp myapp root@<wrap-ip-address>:/tmproot@<wrap-ip-address>’s password: buffy (not echoed back)/path/to/myapp/myapp 100% 20KB 20.0KB/s 00:00$An SFTP transfer is almost similar, but the command procedure resembles an FTP session (FTPcan also be used if the FTP server is enabled):$sftp root@<wrap-ip-address>Connecting to <wrap-ip-address>...root@<wrap-ip-address>’s password: buffy (not echoed back)sftp> cd /tmpsftp> put myappUploading myapp to /dev/shm/tmp/myapp64
Chapter 6. Software Development Kit/path/to/myapp/myapp 100% 20KB 20.0KB/s 00:00sftp> quit$6.3.4.2. Using SSHFSWith SSHFS, the Access Server filesystem can be securely mounted to be a part of the develop-ment host’s filesystem.To download and install SSHFS, visit http://fuse.sourceforge.net/sshfs.html. After installationyou can mount the whole filesystem and copy the myapp application to the /tmp directory inAccess Server by using the following commands:$mkdir mnt$sshfs root@<wrap-ip-address>: mntroot@<wrap-ip-address>’s password: buffy (not echoed back)$cp myapp mnt/tmp$fusermount -u mnt$6.3.4.3. Transferring an Application Using Terminal SoftwareIf your Access Server is not connected to a LAN, you can use terminal software of your choiceto transfer data to Access Server.Access Server contains an X/Y/Zmodem protocol application, which allows you to transferdata over the console using almost any terminal software available:1. Connect your computer to the Access Server management UART using a cross-over serialcable, and start your terminal software (use settings: 115 200bps, 8 data bits, no parity, 1 stopbit).2. Change your working directory to where you want to upload your application, and run theXmodem application with your application name as a parameter.3. Start Xmodem send from your terminal software.Example 6-1. Transfering Files with Xmodem[root@wrap /] cd /tmp[root@wrap /tmp] rx testapprx: ready to receive testapp.now start xmodem (checksum, not CRC) send from your terminal[root@wrap /tmp]If you want to save the application to /usr/local/bin (on the flash file system), you will haveto replace cd /tmp with cd /usr/local/bin (and possibly create the directory, if it does not exist).To examine Access Server directory structure, please see Appendix A.65
Chapter 6. Software Development Kit6.3.4.4. Using NFS MountTo use NFS mount, have a NFS share prepared in your development PC and mount the directoryby using command mount -o nolock <dev-pc-ipaddress>:/nfsshare /mnt/nfs. After this, youcan access the share in directory /mnt/nfs.6.3.5. Running an Application Transferred to Access ServerTo run the application you just transferred to Access Server, you need access to the Access Serverconsole, either using terminal software connected to the Access Server management UART orusing the SSH connection (log in as user root and the root password, which is buffy by default).Having established a connection to Access Server, change the directory to where your applica-tion is located and change file permissions so that it can be executed, then run it.Example 6-2. Running an Application[root@wrap /] cd /tmp[root@wrap /tmp] chmod 755 testapp[root@wrap /tmp] ./testapp6.3.6. Using Debugger (GDB/DDD)You can use GNU debugger GDB and a graphical user interface, such as DDD, for debuggingapplications in Access Server. This requires that you install gdbserver to Access Server. It can beinstalled from a software package located in directory asdk/arch/arm/gpl/gdbserver/You have to compile with debug options and without symbol stripping to make debuggingwork. This can be done by overriding the default CFLAGS variable set in asdk/Rules.mak. Youcan do this by adding lineCFLAGS = -Wall -Os -ggdb -I$(SDKBASE)/includeafter lineinclude /home/user/asdk/Rules.makin MakefileAfter you have compiled your application with these options and transferred your applicationto Access Server, you can start debugging the application as follows:1. Start gdbserver on Access ServerUsage:gdbserver :<port> <your application>Example: gdbserver :6789 ./hello2. Start debugger on the host PC. (This example is for the DDD)Example: ddd --debugger /usr/local/arm/3.4.5/bin/arm-linux-gdb hello3. Create a connection to Access Server.Usage:66
Chapter 6. Software Development Kittarget remote <node IP>:<port>Example: target remote 192.168.42.3:67894. Run the program by using command continue.6.3.7. Native SDKIt is also possible compile applications for Access Server using native toolchain. To use it, copyfiles sdk.iso and sdkmount.wpk from directory lib in the Access Server SDK CD-ROM (or ISOimage) to the root directory of an USB memory dongle, and insert it to Access Server’s USB port.(You can also use Compact Flash memory card for this purpose in similar manner). The nativeSDK is automatically mounted and you can start using the compiler (gcc) in Access Server. Alltools now available can be found in directory /usr/sdk/bin.67
Chapter 7. iWRAP - Bluetooth InterfaceThe Bluetooth service in Access Server is controlled through the TCP socket interface callediWRAP. The first iWRAP server is listening on port 10101. In the case of Access Server 2293, thesecond iWRAP server is listening on port 10102, and the third one is listening on port 10103. Allcommands to an iWRAP server and replies from the server are plain ASCII strings ending inCR+LF ("\r\n"). Commands and replies are not case sensitive.When connecting to a server, you must first wait for the READY. prompt. Do not send any com-mands prior to this. Some replies are broadcast to all clients of the server. If you see somethingthat you have not requested or that is not intended for your client (identified by the link identi-fier), simply ignore the reply.Normally, the iWRAP is protected with the buffy password. The password can be disabledor changed. For more information, see the SET command. If the password is enabled, it mustbe sent first, immediately following the READY. prompt, to the iWRAP server. Otherwise, allcommands will fail.For an example of using the iWRAP, please see the asdk/examples/btsend file in the SDKdirectory.In the following examples, bold lines are commands sent by the client to the iWRAP serverand normal lines are replies received from the iWRAP server by the client.7.1. TermsBluetooth address (bdaddr) consists of six hex digits separated by a colon. For example,"00:07:80:80:bf:01". With commands requiring a Bluetooth address, you can also use theBluetooth friendly name instead.Bluetooth channels are numbered from 1 to 30. In Access Server, the Serial Port Profile is as-signed to channel number two, the Object Push Profile and File Transfer Profile to channel num-ber three, and the LAN Access Profile is on channel number four. The other channels are free foruser applications.Link Identifier (link_id) is a number from 0 to 99. It is used to identify established Bluetoothconnections.7.2. Starting the iWRAP ServersNormally, the iWRAP servers are started automatically upon power-up. You can restart theservers manually (for example, to apply the changes made to the iWRAP settings with the setupapplication without rebooting the system). To restart the servers manually, execute the startupscript with option restart:[root@wrap /] /etc/init.d/bluetooth restartWhen the iWRAP servers start up, they use the settings configured with the setup application.You can put additional iWRAP commands to the /etc/bluetooth.conf file. The commands inthat file are processed as the last task every time the iWRAP server is started.68
7.3. Writing iWRAP ApplicationsThere are two approaches when writing a iWRAP server program (a program accepting incom-ing calls) for Access Server, both having different pros and cons:1. Forklistener2. iWRAP ClientNote: When writing a client program (that is, a program making an outgoing call), you have to useiWRAP.7.3.1. ForklistenerThis is a standard program reading data from standard input and writing output to standardoutput. See the SDK directory examples/forkserver/ for an example of this kind of program.Pros:•Easy to write.•Very robust for simple services.•You do not have to understand Bluetooth or iWRAP.Cons:•Your program is started and stopped for every incoming connection.•If there are multiple connections, it is not possible to communicate to an external programthrough one socket.•You cannot use stdout for debugging; you must use syslog or a log file.•iWRAP’s advanced features are not available: powermodes, MSC, SDP, inquiry, ...To setup a forklistener, see the SET command.7.3.2. iWRAP ClientiWRAP client is a program communicating with the iWRAP server through control and datasockets. See the SDK directory examples/btserver/ for an example of this kind of program.Pros:•The cons with forklistener do not apply.Cons:•More complex than forklistener.•You must have basic knowledge about Bluetooth and iWRAP.For documentation about iWRAP, read this chapter carefully.69
INFO7.4. Commands Controlling iWRAPINFOINFO — Get basic infoSynopsisINFODescriptionINFO is used to retrieve version information on the iWRAP server, in the same format as pre-sented by the READY. prompt when the iWRAP connection is opened.ReplyREADY. (wrap-2-1-0 $Revision: 1.28 $ bt1.2)70
QUITQUIT — Close iWRAP connectionSynopsisQUITDescriptionTo close the connection to the iWRAP server, use the QUIT command.ReplyThere is no reply.ExampleREADY.QUIT71
SETSET — Change parametersSynopsisSET [variable [value] ]DescriptionThe SET command allows you to alter various Bluetooth and iWRAP parameters. The sup-ported variables are listed in Table 7-1. Issuing a SET command without parameters lists thecurrent settings.Variable DescriptionBLUETOOTH BDADDR bdaddr Our bdaddr. This is a read-only value.BLUETOOTH NAME friendly_name You can set your Bluetooth friendly name with thiscommand. Others can request this name with theNAME command. You can use the following metacharacters:$S: Hardware serial number, all ten digits$s: Hardware serial number, last three digits$P: Server port$p: Server port, last digit$H: FQDN$h: hostname$$: $The default value is $S_$p.BLUETOOTH READABLE mode If enabled, some SDP result codes will have literalvalues instead of numeric values.0: No (always use numeric values)1: Yes (literal values)BLUETOOTH CLASS value You can set the class-of-device value with thiscommand.72
SETVariable DescriptionBLUETOOTH LAP value You can set the IAC LAP value with this command.The default value is 9e8b33BLUETOOTH ROLE role {policy{timeout}}You can set the master/slave role switch preferencewith this command. Optionally, you can also set thelink policy and link supervision timeout. The possiblevalues for "role" are:0: allow calling, do not request when answering1: allow calling, request when answering2: do not allow calling, request when answeringThe default link policy is 000f and the default link su-pervision timeout is 7d00. See Bluetooth Specification formore information on these parameters.BLUETOOTH ENCRYPT value This command defines whether to use Bluetoothencryption. To actually enable Bluetooth encryption,the connection must be authenticated.0: No1: YesBLUETOOTH LAP value You can set the IAC LAP value with this command.The default value is 9e8b3373
SETVariable DescriptionBLUETOOTH PAGEMODE mode{page_timeout{page_repetition_mode{scan_activity_intervalscan_activity_window{inquiry_activity_intervalinquiry_activity_window}}}}Pagemode defines whether other devices can find andcall you. There are four different modes:0: No inquiry, no paging1: Inquiry, no paging2: No inquiry, paging3: Inquiry and pagingThe page timeout is given in hex and the default valueis 2000. The default page repetition mode is 2 (R2). Thedefault scan activity is interval 0800 and window 0012(R1). The default inquiry activity is interval 0800 andwindow 0012 (R1).See the Bluetooth Specification for more information onthese parameters.BLUETOOTH AUTOHIDE physicallogicalThis command automatically hides the baseband (setspagemode to 0) if there are more physical ACL linksor logical connections than defined. Value 0 means"don’t care".Default values: 7 0BLUETOOTH AUTH * {authflags} This command removes the default PIN code. If youare making an outgoing connection and the remoteend asks for the PIN, "1234" will be sent.BLUETOOTH AUTH * pin{authflags}This command sets the default PIN code.BLUETOOTH AUTH bdaddr{authflags}This command removes the PIN code for bdaddr.74
SETVariable DescriptionBLUETOOTH AUTH bdaddr pin{authflags}This command sets the PIN code for bdaddr.Authflags are:--NEWPAIR Only if we do not have linkkey yet--REQUEST Request this PIN from remote, do not re-ply with this one--REPLY Reply to remote requests with this PIN--CALL Only if making an outgoing call--ANSWER Only when answering to an incoming call--RFCOMM Call type is RFCOMM (includesFORK/PPP/...)--BNEP Call type is BNEP--L2CAP Call type is L2CAPDefault authflags are all enabled, except for --NEWPAIR.There are three special PINs:-Reject without asking PIN.-- Reject on the connection open, do not check for calltypes.+Accept without asking PIN.BLUETOOTH PAIR bdaddr linkkey With this command, you can manually set the linkkeyfor bdaddr.Note: SET BLUETOOTH AUTH must also be set for avalue to enable encrypted connections with previouslystored link keys.BLUETOOTH PAIR bdaddr With this command, you can manually delete thelinkkey for bdaddr.BLUETOOTH PAIREXPIRE seconds With this command, you can set the expiration time, inseconds, for pairing information.75
SETVariable DescriptionBLUETOOTH LISTEN channel cmd{mem {delay}}This command adds a fork-listener for the channel.When there is an incoming RFCOMM connection tothe channel, the iWRAP server handles the connectionby itself by forking "cmd". At least "mem" kilobytes offree memory must be available, or the connection willbe rejected. After forking, the iWRAP server waits for"delay" timerticks (50ms) before transmitting anydata.The client application must modify both the stdout andstdin pipes and set NOECHO, 8BIT and all other nec-essary modes at the very beginning. The purpose ofthe "delay" parameter is to give the application enoughtime to do this.BLUETOOTH LISTEN channelhost:portThis command adds a forward-listener for the channel.When there is an incoming RFCOMM connection tothe channel, the iWRAP server will forward it tohost:port by using a raw TCP/IP socket.BLUETOOTH LISTEN psm L2CAP This command adds an L2CAP listener for the psm.BLUETOOTH LISTEN channel This command removes a fork/forward/L2CAPlistener from the channel/psm.76
SETVariable DescriptionBLUETOOTH LINK mode params With this command, you can modify the slave’spowermode according to the "mode". "params" areoptional and mode-dependent. The possible valuesfor "mode" are:0: Active.Params: None.1: Park: Round-robin.Params: max_beacon min_beacon sleep_after_unparksleep_after_roundDefaults: 254 160 5 30Sleeps are specified by timerticks (50ms).2: Park: Idle.Params: max_beacon min_beacon max_activeDefaults: 512 384 6max_active is the maximum number of active slaves.3: Sniff: All.Params: max_interval min_interval attempt timeoutDefaults: 640 426 1 84: Sniff: Idle.Params: idle_timeout max_interval min_interval at-tempt timeoutDefaults: 400 640 426 1 32idle_timeout is in timerticks (50ms).See Bluetooth Specification for more information onparams.77
SETVariable DescriptionBLUETOOTH QOS service_typetoken_rate peak_bandwidth latencydelay_variationThis command sets default QoS values for a newconnection. The parameters are in hex. See BluetoothSpecification for more information on params.Defaults: 01 00000000 00000000 000061a8 ffffffffL2CAP TIMEOUT flushto linkto With this command, you can define the FlushTimeoutand LinkTimeout for L2CAP connections. SeeBluetooth Specification for more information on params.Defaults: 65535 40000PPP AUTH Do not require any PPP authentication on incomingconnections.PPP AUTH username password Require specified username:password on incomingPPP connections.PPP CHANNEL channel Our PPP (LAN Access Profile) channel. The iWRAPserver handles this channel internally. If you changethis, remember to modify the SDP record as well. Usezero value to disable the LAN Access Profile.PPP DEFAULTROUTE value This setting controls whether the iWRAP servershould modify the defaultroute setting. There are fourdifferent modes:0: Do no alter defaultroute1: Set defaultroute according to the outgoing PPP2: Set defaultroute according to the incoming PPP3: Set defaultroute according to all PPP callsPPP WINHANDSHAKE seconds Timeout to wait for the Windows RAS handshake.PPP IP ipaddr/mask This command sets the network IP range for PPPclients.78
SETVariable DescriptionPAN ENABLE bitmap This command controls incoming PAN connections.Bitmap:1: Allow incoming PAN-PANU connections.2: Allow incoming PAN-GN connections.4: Allow incoming PAN-NAP connections.8: Enable zeroconf for incoming PAN-PANU connec-tions.16: Enable zeroconf for outgoing PAN-PANU connec-tions.The default value "6" is recommended for most cases.CONTROL AUTOEXEC cmd Run the CALL command, and rerun it when the call isdisconnected. Example: SET CONTROL AUTOEXECCALL bdaddr PAN-NAP PAN-NAPCONTROL PASSWORD Do not require a password from iWRAP clients.CONTROL PASSWORD pass{--LOCAL}Enable password. iWRAP clients must send thispassword before giving any other command. Thepassword is case sensitive.With an optional --LOCAL parameter, clients connect-ing from localhost are accepted without a password.CONTROL PING seconds If this setting is enabled (seconds > 0), the iWRAPserver sends a PING reply to all iWRAP clients. Youhave to reply to it with PONG or the connection willbe closed.CONTROL WRITETIMEOUTtimeticksWith this command, you can set in timeticks (1/20s)how long iWRAP tries to write to the datasocket if it’sblocked before giving up and closing the connections.CONTROL AUTOSAVE whatfilenameIf this setting is enabled, the system automaticallysaves settings to a file when they change. See the SAVEcommand for possible "what" values.link_id MSC value Set MSC for link_id to value. See ETSI TS 101 369(GSM 07.10) for more information.link_id ACTIVE With this command, you can set the powermode for alink_id to active.79
SETVariable Descriptionlink_id PARK params With this command, you can set the powermode forlink_id park. Required "params" are:avg_beacon ormax_beacon min_beaconSee Bluetooth Specification for more information onparams.link_id HOLD params With this command, you can set the link’spowermode to hold. Required "params" are:avgmax minSee Bluetooth Specification for more information onparams.link_id SNIFF params With this command, you can set the powermode for alink_id to sniff. Required "params" are:avg_interval ormax_interval min_interval ormax_interval min_interval attempt ormax_interval min_interval attempt timeoutThe default attempt is 1, the default timeout is 8.See Bluetooth Specification for more information onparams.link_id QOS service_type token_ratepeak_bandwidth latencydelay_variationWith this command, you can set the link’s QoS values.The parameters are in hex.See Bluetooth Specification for more information onparams.link_id MASTER With this command, you can switch the role to master.link_id SLAVE With this command, you can switch the role to slave.Table 7-1. Supported Parameters for iWRAP SET Command80
SETReplyWhen there are parameters, there is no reply.ExampleREADY.SET BLUETOOTH NAME BuffySET BLUETOOTH PAGEMODE 3SET BLUETOOTH READABLE 1SET BLUETOOTH CLASS 020300SET BLUETOOTH ROLE 0SET BLUETOOTH ENCRYPT 0SET BLUETOOTH PAGEMODE 3SET BLUETOOTH AUTH *1234SET BLUETOOTH AUTH 00:07:80:80:bf:01 4242SET BLUETOOTH AUTH *SET BLUETOOTH PAIREXPIRE 600SET BLUETOOTH LISTEN 1 /bin/login 200SET BLUETOOTH LISTEN 2 "my/own/command with parameters" 100 5SET BLUETOOTH LISTEN 3SET PPP DEFAULTROUTE 0SET PPP AUTH buffy willowSET PPP AUTHSET PPP CHANNEL 4SET PPP WINHANDSHAKE 10SET PPP IP 192.168.166.0/24SET 0 MSC 8dSET CONTROL PING 60PINGPONGSET CONTROL PASSWORDSET CONTROL PASSWORD buffy<client reconnects>READY.SETERROR PASSWORD NEEDED.<client reconnects>READY.buffySETSET BLUETOOTH BDADDR 00:07:80:80:bf:01SET BLUETOOTH NAME BuffySET PPP AUTHSET CONTROL PASSWORD buffySET81
SAVESAVE — Save iWRAP settingsSynopsisSAVE {what} {filename}DescriptionThe SAVE command writes the current settings to a file.What SettingsAUTH SET BLUETOOTH AUTH ...PAIR SET BLUETOOTH PAIR ...BTSET SET BLUETOOTH ..., but not AUTH or PAIROTHERSET All but SET BLUETOOTHALL EverythingTable 7-1. SAVE parametersReplyThere is no reply.ExampleREADY.SAVE PAIR /etc/bluetooth.pairSAVE AUTH,PAIR /etc/bluetooth.security82
LOADLOAD — Run iWRAP command scriptSynopsisLOAD {filename}DescriptionThe LOAD command runs commands from a file. This command is usually used with SAVE orSET CONTROL AUTOSAVE commands.ReplyThere is no reply.ExampleREADY.LOAD /etc/bluetooth.securitySET CONTROL AUTOSAVE AUTH,PAIR /etc/bluetooth.security83
PINGPING — Ask if the connection is aliveSynopsisPINGDescriptionThe PING command can be used to check that the connection to the iWRAP server is alive.The iWRAP can also send the PING to the client application. In that case, you must reply withthe PONG command.ReplyPONGExampleREADY.PINGPONGPINGPONG84
PONGPONG — Connection is aliveSynopsisPONGDescriptionThe PONG command has to be sent back if you see a PING reply from the server. If you do notanswer, the connection will be closed after a few seconds.ReplyThere is no reply.ExampleREADY.PINGPONG85
ECHOECHO — Send a message to other iWRAP clientsSynopsisECHO {data}DescriptionThis command broadcasts its parameters to all iWRAP connections, including the one that sentthe command.ReplyECHO dataExampleREADY.ECHO Hello world!ECHO Hello world!86
LOCKLOCK — Lock other iWRAP clientsSynopsisLOCKDescriptionThis command locks all other iWRAP connections, allowing commands only from this one. Thisincludes all the PINGs and PONGs too. Be polite and do not lock it for a long time.ReplyThere is no reply.ExampleREADY.LOCKUNLOCK87
UNLOCKUNLOCK — Unlock other iWRAP clientsSynopsisUNLOCKDescriptionThis command opens the lock created by using the LOCK command.ReplyThere is no reply.ExampleREADY.LOCKUNLOCK88
SHUTDOWNSHUTDOWN — Close iWRAP serverSynopsisSHUTDOWNDescriptionTo close the iWRAP server, you can use the SHUTDOWN command. This also immediatelycloses all active connections.ReplyThere is no reply.ExampleREADY.SHUTDOWN89
SLEEPSLEEP — Wait a secondSynopsisSLEEP {seconds}DescriptionThe SLEEP command waits for a specified number of seconds before processing further com-mands.SLEEP is only usable in rc scripts (/etc/bluetooth.conf).ReplyThere is no reply.ExampleREADY.SLEEP 490
7.5. Finding Bluetooth DevicesINQUIRYINQUIRY — Search for other devicesSynopsisINQUIRY [timeout] [NAME] [LAP {lap}]DescriptionThe INQUIRY command is used to search for other Bluetooth devices. The timeout is defined inunits of 1.25 seconds. The default timeout is 4 units. If an optional NAME parameter is provided,the NAME command will be automatically sent to all found devices. The LAP option specifiesthe used IAC LAP; the default value is 9e8b33 (GIAC).During the inquiry, all devices are listed as soon as they are found by using INQUIRY_PARTIALreplies. If the iWRAP server has cached the friendly name of the device found, it is also dis-played. When the inquiry times out, a summary is displayed indicating how many devices werefound. The summary also repeats the device information.WarningDo not use the NAME parameter in your program. It is for manual testing only.Use separate NAME commands instead.ReplyINQUIRY_PARTIAL bdaddr_of_dev_1 class_of_dev_1 "friendly name" rssiINQUIRY_PARTIAL bdaddr_of_dev_2 class_of_dev_2 "friendly name" rssi...INQUIRY_PARTIAL bdaddr_of_dev_n class_of_dev_n "friendly name" rssiINQUIRY number_of_devices_foundINQUIRY bdaddr_of_dev_1 class_of_dev_1 "friendly name"INQUIRY bdaddr_of_dev_2 class_of_dev_2 "friendly name"...INQUIRY bdaddr_of_dev_n class_of_dev_n "friendly name"ExampleREADY.INQUIRY 10INQUIRY 0INQUIRYINQUIRY_PARTIAL 00:07:80:80:bf:01 120300 "willow" 255INQUIRY_PARTIAL 00:07:80:80:bf:02 520204 "" 255INQUIRY 2INQUIRY 00:07:80:80:bf:01 120300 "willow"INQUIRY 00:07:80:80:bf:02 520204 ""91
INQUIRY92
NAMENAME — Find a friendly nameSynopsisNAME {bdaddr}DescriptionYou can ask for the friendly name of another Bluetooth device with the NAME command.ReplyNAME bdaddr "friendly name"NAME ERROR bdaddr reason_code more_infoExampleREADY.NAME 00:07:80:80:bf:02NAME 00:07:80:80:bf:02 "buffy"NAME 00:07:80:80:bf:01NAME ERROR 00:07:80:80:bf:01 108 HCI_ERR_PAGE_TIMEOUT93
7.6. Making a Bluetooth ConnectionCALLCALL — Connect to other deviceSynopsisCALL {bdaddr} SDPCALL {bdaddr} {psm} L2CAPCALL {bdaddr} {channel} RFCOMMCALL {bdaddr} {uuid} RFCOMMCALL {bdaddr} {channel} PPP [username password]CALL {bdaddr} {uuid} PPP [username password]CALL {bdaddr} {channel} WINPPP [username password]CALL {bdaddr} {uuid} WINPPP [username password]CALL {bdaddr} {channel} FORK {"/full/path/to/command and parameters"}CALL {bdaddr} {uuid} FORK {"/full/path/to/command and parameters"}CALL {bdaddr} {channel} FORK {host:port}CALL {bdaddr} {uuid} FORK {host:port}CALL {bdaddr} {PAN-destUUID} [PAN-srcUUID]DescriptionThe CALL command is used to make a connection to other Bluetooth devices. It returns the linkidentifier (with an immediate reply), which will be used in subsequent commands and replies.Note: Always check for a correct link_id before processing replies further.You can use the special FORK call type to create an RFCOMM connection and automaticallylaunch an application, which gets the RFCOMM connection bound to its standard input andoutput. The client application should modify both the stdout and stdin pipes and set NOECHO,8BIT and all other necessary modes at the very beginning.Note: There can only be one pending CALL at a time. You have to wait for the RINGING event beforeissuing another CALL. The RINGING event comes almost immediately after the CALL. You get theERROR 008 error if you try to establish another call too quickly. In that case, wait for some tens ofmilliseconds and retry. Receiving the CONNECT or NO CARRIER reply may take some time, for example,when the user is keying in the PIN code.Note: PPP is "raw" PPP without any special handshaking. WINPPP is a Windows RAS handshakefollowed by raw PPP. If you are unsure, use WINPPP.ReplyCALL link_idRINGING link_id94
CALLExampleREADY.CALL 00:07:80:80:bf:01 SDPCALL 0RINGING 0CONNECT 0 SDPCALL 00:07:80:80:bf:01 4 PPPCALL 1RINGING 1CONNECT 1 PPPCALL NameOfOtherDevice LAN PPPCALL 1RINGING 1CONNECT 1 PPPCALL 00:07:80:80:bf:02 4 WINPPP buffy willowCALL 2RINGING 2CONNECT 2 PPPCALL 00:07:80:80:bf:01 1 RFCOMMCALL 3RINGING 3CONNECT 3 RFCOMM 1042CALL 00:07:80:80:bf:01 2 FORK /bin/loginCALL 4RINGING 4CONNECT 4 FORKCALL 00:07:80:80:bf:01 PAN-NAPCALL 5RINGING 5CONNECT 5 PAN-NAPCALL 00:07:80:80:bf:02 PAN-NAP PAN-NAPCALL 6RINGING 6CONNECT 6 PAN-NAPCALL 00:07:80:80:bf:02 2 FORK 127.0.0.1:23CALL 7RINGING 7CONNECT 7 FORK95
CONNECTCONNECT — Connected to other deviceSynopsisThis is not a command.DescriptionCONNECT is not a command, but rather a reply broadcast to you when CALL successfully estab-lishes the connection. Remember to check that the link_id matches your CALL.On RFCOMM/L2CAP connections, there is an additional parameter called port. Port refers tothe TCP socket port number, which is used to send and receive data to and from the remotedevice. Connect to the port just like you connected to the iWRAP server. The connection is"raw", which means that no processing of incoming or outgoing data is made.Note: In the case of L2CAP connections, the data is handled as packets. Therefore, both the incomingand outgoing data must follow the "HDR+L2CAPDATA" format, where HDR is two bytes; first thelow byte, and then the high byte of the L2CAPDATA packet length. L2CAPDATA contains the actualL2CAP packet.ReplyCONNECT link_id SDPCONNECT link_id RFCOMM portCONNECT link_id L2CAP portCONNECT link_id PPPCONNECT link_id FORKCONNECT link_id PAN-PANUCONNECT link_id PAN-GNCONNECT link_id PAN-NAPExampleREADY.CALL 00:07:80:80:bf:01 SDPCALL 0RINGING 0CONNECT 0 SDPCALL 00:07:80:80:bf:01 LAN PPPCALL 1RINGING 1CONNECT 1 PPPCALL 00:07:80:80:bf:01 1 RFCOMMCALL 2RINGING 2CONNECT 2 RFCOMM 1042<Client can open socket connection to port 1042>96
CONNECTCALL 00:07:80:80:bf:01 2 FORK /bin/loginCALL 3RINGING 3CONNECT 3 FORKCALL 00:07:80:80:bf:01 PAN-NAPCALL 5RINGING 5CONNECT 5 PAN-NAPCALL 00:07:80:80:bf:02 PAN-NAP PAN-NAPCALL 6RINGING 6CONNECT 6 PAN-NAP97
NO CARRIERNO CARRIER — Disconnected from other deviceSynopsisThis is not a command.DescriptionThe NO CARRIER reply indicates that you or the remote device closed the active connection, orthat your CALL failed for some reason.See Section 7.9 for the list of error codes. Field "more_info" is optional. If present, it gives you ahuman readable error code or some statistics about the closed connection.ReplyNO CARRIER link_id ERROR reasonNO CARRIER link_idExampleREADY.CALL 00:07:80:80:bf:01 4 PPPCALL 0RINGING 0NO CARRIER 0 ERROR 104 HCI_ERR_PAGE_TIMEOUTCALL 00:07:80:80:bf:01 1 RFCOMMCALL 1RINGING 0CONNECT 1 RFCOMM 1042NO CARRIER 1 ERROR 000 IN=42,OUT=66,ELAPSED=6998
RINGRING — Another device is calling youSynopsisThis is not a command.DescriptionThe RING reply indicates an incoming call from a remote device. As with CONNECT, on RF-COMM/L2CAP calls there is an additional "port" parameter. Open a socket to the port, if youwant to serve this call. PPP and PAN calls are handled internally, which means that you do nothave to do anything on them. The iWRAP server closes the connection if nobody grabs the callwithin 30 seconds.Special call type REJECTED is used for information only. It is used if somebody tried to call youbut was rejected, usually because of failing authentication.ReplyRING link_id bdaddr channel PPPRING link_id bdaddr channel RFCOMM portRING link_id bdaddr psm L2CAP portRING link_id bdaddr PAN-PANURING link_id bdaddr PAN-GNRING link_id bdaddr PAN-NAPRING link_id bdaddr REJECTEDExampleREADY.RING 0 00:07:80:80:bf:01 4 PPPRING 1 00:07:80:80:bf:01 1 RFCOMM 1042<Client can open socket connection to port 1042>RING 2 00:07:80:80:bf:01 PAN-GN99
RINGINGRINGING — Call in progressSynopsisThis is not a command.DescriptionThe RINGING reply indicates that a previously initiated outgoing CALL is in the state where anew outgoing CALL can be made.ReplyRINGING link_idExampleREADY.CALL 1 00:07:80:80:bf:01 1 RFCOMM<Making new CALL is not allowed but generates BUSY error>CALL 1<Making new CALL is not allowed but generates BUSY error>RINGING 1<Making new CALL is allowed>CALL 2 00:07:80:80:bf:02 2 RFCOMM<Making new CALL is not allowed but generates BUSY error>CALL 2<Making new CALL is not allowed but generates BUSY error>RINGING 2<Making new CALL is allowed>CONNECT 1 RFCOMM 1042<Client can open socket connection to port 1042>CONNECT 2 RFCOMM 1043<Client can open socket connection to port 1043>100
CLOSECLOSE — DisconnectSynopsisCLOSE {link_id}DescriptionThe CLOSE command closes an active connection started with a CONNECT or RING. Note thatclosing the RFCOMM data socket connection also closes the Bluetooth connection.ReplyThere is no direct reply. NO CARRIER is replied when the connection actually closes.ExampleREADY.CALL 00:07:80:80:bf:01 4 PPPCALL 1RINGING 1CONNECT 1 PPPCLOSE 1NO CARRIER 1 ERROR 000101
LISTLIST — List connectionsSynopsisLISTDescriptionThe LIST command reports active connections and some statistics.ReplyLIST number_of_connectionsLIST link_id status type blocksize bytes_in bytes_out elapsed_time our_mscremote_msc bdaddr channel direction powermode role crypt child_pid hcihandleLIST link_id status type blocksize bytes_in bytes_out elapsed_time our_mscremote_msc bdaddr channel direction powermode role crypt child_pid hcihandle...LIST link_id status type blocksize bytes_in bytes_out elapsed_time our_mscremote_mscbdaddr channel direction powermode role crypt child_pid hcihandleReply ValuesStatus values are:•WAITING. The iWRAP server is waiting for someone to connect to the datasocket createdwith the RFCOMM CONNECT or RING event.•CONNECTED. The data connection is up and running.•CLOSING. The datasocket has been closed, and the Bluetooth connection shutdown is inprogress.Type is SDP, RFCOMM, PPP, PAN-PANU, PAN-GN, PAN-NAP, FORK or L2CAP.Blocksize is the maximum transfer unit of the Bluetooth link; used for statistics only.Bytes_in and bytes_out refer to the numbers of bytes transferred.Elapsed_time is the number of seconds the connection has been up.Msc is the link’s MSC value for both ends.Bdaddr is the Bluetooth address of the connected device.Channel is the service channel of the connection.Direction is either OUTGOING or INCOMING.Powermode is ACTIVE, SNIFF, PARK or HOLD.Role is MASTER or SLAVE.Crypt is PLAIN or ENCRYPTED.Child_pid is the child process ID for types PPP and FORK. The PID is zero for others.102
LISTHcihandle is the HCI handle for this connection.ExampleREADY.LISTLIST 1LIST 0 CONNECTED RFCOMM 666 4242 100 30 8d 8d 00:07:80:80:bf:01 4OUTGOING ACTIVE MASTER PLAIN 0 2a103
STATUSSTATUS — Status of a connectionSynopsisThis is not a command.DescriptionThe STATUS reply is used to inform you about changes in connection status. See also the SETcommand.ReplySTATUS link_id MSC valueExampleREADY.STATUS 0 MSC 8d104
7.7. Service DiscoveryThis section describes the commands used for Bluetooth service discovery and local SDP recordmanipulation. The commands and their replies use SDP UUID and attribute values, which arelisted in the Bluetooth Assigned Numbers documentation. In the commands below, the mostuseful UUID and attribute values can, however, be replaced with keywords listed in Table 7-3.The same keywords are used in the command replies instead of numeric values, if the parameterSET BLUETOOTH READABLE is set to 1.Keyword(s) Value Hex ValueSDP UUID_SDP 0001RFCOMM UUID_RFCOMM 0003OBEX UUID_OBEX 0008BNEP UUID_BNEP 000FL2CAP UUID_L2CAP 0100PUBLICBROWSEGROUP, BROWSE,ROOTUUID_PUBLIC_BROWSE_GROUP 1002SERIALPORT, SPP UUID_SERIALPORT 1101LANACCESS, LAN UUID_LANACCESS 1102DIALUPNETWORKING, DUN UUID_DIALUPNETWORKING 1103OBEXOBJECTPUSH, OBJP, OPP UUID_OBEXOBJECTPUSH 1105OBEXFILETRANSFER, FTP UUID_OBEXFILETRANSFER 1106PAN-PANU, PANU UUID_PANU 1115PAN-NAP, NAP UUID_NAP 1116PAN-GN, GN UUID_GN 1117PROTOCOLDESCRIPTORLIST,DESCLIST, DESCATTR_PROTOCOLDESCRIPTORLIST 0004SERVICENAME, NAME ATTR_SERVICENAME +BASE_LANG_OFFSET0000 +0100SECURITYDESCRIPTION ATTR_SECURITYDESCRIPTION 030ANETACCESSTYPE ATTR_ NETACCESSTYPE 030BMAXNETACCESSRATE ATTR_ MAXNETACCESSRATE 030CTable 7-3. Supported Keywords for Replacing SDP UUIDs or AttributesSDPSEARCHSDPSEARCH — Browse SDP RecordsSynopsisSDPSEARCH {link_id} {uuid}DescriptionThe SDPSEARCH command is used to send a Service Search Request to a connected SDP server,105
SDPSEARCHidentified with link_id. The command only supports searching for one UUID at a time (specifiedwith the uuid parameter, 4 hex digits, or with a keyword), but several requests can be sentduring the same SDP connection. However, you must wait for the reply to the previous replybefore issuing a new SDPSEARCH command.ReplySDPSEARCH link_id number_of_handlesSDPSEARCH link_id handle_1SDPSEARCH link_id handle_2...SDPSEARCH link_id handle_nExampleREADY.CALL 00:07:80:80:bf:01 SDPCALL 0RINGING 0CONNECT 0 SDPSDPSEARCH 0 LANACCESSSDPSEARCH 0 1SDPSEARCH 0 00010000CLOSE 0NO CARRIER 0 ERROR 000106
SDPATTRSDPATTR — Browse SDP RecordsSynopsisSDPATTR {link_id} {handle} {attribute}DescriptionThe SDPATTR command is used to send a Service Attribute Request to a connected SDP server,identified with the link_id. The command supports requesting for one attribute value (specifiedwith the attribute parameter, 4 hex digits, or a keyword) in one previously retrieved serviceentry (specified with the handle parameter, 8 hex digits), but several requests can be sent duringthe same SDP connection. However, you must wait for the reply to the previous reply beforeissuing a new SDPATTR command.The reply contains the response from the SDP server in encoded form. The code characters aredescribed in Table 7-1.Char DescriptionI Unsigned integer (2, 4, or 8 hexadecimal digits) follows. This is often ahandle, attribute, or attribute value. Attribute values are shown as text ifBLUETOOTH READABLE is set to 1.I Signed integer byte (2 hexadecimal digits) follows.U UUID (4 or 8 hexadecimal digits) follows. Shown as text if BLUETOOTHREADABLE is set to 1.S String follows.B Boolean follows.< Start of sequence.> End of sequence.A Alternative follows.R Universal Resource Locator follows.Table 7-1. SDP Response Formatting CharactersReplySDPATTR link_id infoExampleREADY.CALL 00:07:80:80:bf:01 SDPCALL 0CONNECT 0 SDPSDPSEARCH 0 LANSDPSEARCH 0 1SDPSEARCH 0 00010000SDPATTR 0 00010000 DESCLIST107
SDPATTRSDPATTR 0 < I 0004 < < U 0100 > < U 0003 I 04 > > >CLOSE 0NO CARRIER 0 ERROR 000108
SDPQUERYSDPQUERY — Browse SDP RecordsSynopsisSDPQUERY {link_id} {uuid} {attribute}DescriptionThe SDPQUERY command is used to send a Service Search Attribute Request to a connectedSDP server, identified with the link_id. The command supports requesting for one attributevalue (specified with the attribute parameter, 4 hex digits, or a keyword) in all service entriescontaining one UUID (specified with the uuid parameter, 4 hex digits, or a keyword), but severalrequests can be sent during the same SDP connection. However, you must wait for the reply tothe previous reply before issuing a new SDPQUERY command.ReplySDPQUERY link_id infoExampleREADY.CALL 00:07:80:80:bf:01 SDPCALL 0RINGING 0CONNECT 0 SDPSDPQUERY 0 LAN DESCLISTSDPQUERY0<<I0004<<U0100><U0003I04>>>>SDPQUERY 0 1102 0100SDPQUERY 0 < < I 0100 S "Lan Access using PPP" > >CLOSE 0NO CARRIER 0 ERROR 000109
SDP bdaddrSDP bdaddr — Check devices SDPSynopsisSDP {bdaddr} {uuid}DescriptionThe SDP bddaddr command is the most useful command for retrieving SDP information fromthe remote device. The command opens the SDP connection, makes the SDP query, closes theconnection and replies to the client in encrypted form. The format is described with the SD-PATTR command.ReplySDP bdaddr 0 ERROR reasonSDP bdaddr number_of_entriesSDP bdaddr infoSDP bdaddr info...SDP bdaddr infoExampleREADY.SDP 00:07:80:80:bf:01 SERIALPORTSDP 00:07:80:80:bf:01 1SDP 00:07:80:80:bf:01 < I SERVICENAME S "Serial Port" >< I PROTOCOLDESCRIPTORLIST < < U 0100 > < U RFCOMM I 0b > > >110
SDP ADDSDP ADD — Add entry to local SDPSynopsisSDP ADD {uuid [:uuid2]} {channel} {description}DescriptionThis command adds a new entry to Access Server’s SDP record.ReplySDP handleSDP handle ERROR reasonExampleREADY.SDP ADD LANACCESS 4 "Lan access"SDP 65536SDP ADD SERIALPORT 10 "Serial port"SDP 65537SDP ADD PAN-NAP 0 "PAN Network Access Point"SDP 65538SDP ADD L2CAP:1201 4099 "Private L2CAP for networking"SDP 65539111
SDP DELSDP DEL — Delete entry for local SDPSynopsisSDP DEL {handle}DescriptionThis command deletes one entry from Access Server’s SDP record.ReplyThere is no reply.ExampleREADY.SDP DEL 65537112
SDP LISTSDP LIST — List local SDPSynopsisSDP LISTDescriptionThis command lists Access Server’s SDP record entries.ReplySDP number_of_entriesSDP handle uuid channel descriptionSDP handle uuid channel description...SDP handle uuid channel descriptionExampleREADY.SDP LISTSDP 1SDP 65536 LANACCESS 4 "Lan access"113
Chapter 7. iWRAP - Bluetooth Interface7.8. Example SessionsOutgoing RFCOMM Call:READY.CALL 00:07:80:80:bf:01 1 RFCOMMCALL 2RINGING 2CONNECT 2 RFCOMM 1042STATUS 2 MSC 8d<Client opens socket connection to port 1042 and transfers data>CLOSE 2NO CARRIER 2 ERROR 000Incoming RFCOMM Call:READY.RING 2 00:07:80:80:bf:01 1 RFCOMM 1042STATUS 2 MSC 8d<Client opens socket connection to port 1042 and transfers data>NO CARRIER 2 ERROR 0007.9. Error CodesSome commands may reply with an error code. The human-readable name of the error is dis-played, if the SET BLUETOOTH READABLE setting has value 1. Error code 8 indicates that theiWRAP server is busy executing a number of commands; there can be several client applicationsusing the stack. Just wait a few seconds and try again. Other error codes indicate unexpected,but often only temporary, communication problems.You can analyze the error from the numeric code. Values bigger than or equal to 900 are iWRAPerrors, described in Table 7-5.Code Textual Form Reason900 SERVICE_NOT_FOUND Tried to CALL a device whose SDPrecords do not include the requestedservice.901 ALREADY_CONNECTED Tried to CALL a device and a servicechannel that is already connected.902 OUT_OF_HANDLES Tried to CALL, but there are too manyopen connections.903 INVALID_ADDRESS_<addr> Tried to CALL a device with a friendlyname that could not be found with theinquiry.904 REJECTED An incoming call was rejected by theiWRAP server.905 BUSY Tried to issue SDPATTR, but anotherSDP request was in progress.114
Chapter 7. iWRAP - Bluetooth InterfaceCode Textual Form Reason906 BUSY Tried to issue SDPQUERY, but anotherSDP request was in progress.907 NOT_CONNECTED Tried to CLOSE a connection handlethat is not active.908 BUSY Tried to issue SDPSEARCH, butanother SDP request was in progress.909 INVALID_ADDRESS Tried to NAME a device with a friendlyname that cannot be found with theinquiry.90a BUSY Tried to issue NAME, but anotherNAME was in progress.Table 7-5. iWRAP ErrorsOther error codes can be analyzed as follows. For example, NO CARRIER ERROR 465: The num-ber 465 is hexadecimal, the sum of 0x400 and 0x65, where 0x400 is a mask, which means that thisis an RFCOMM level error. 0x65 (decimal 101) means that the RFCOMM error was a connectiontimeout.Mask Error level0x100 HCI0x200 L2CAP0x300 SDP0x400 RFCOMMTable 7-6. Errors MasksThe error codes for each mask are listed in the following tables.HCI Error CodeHCI_SUCCESS 0HCI_ERR_UNKNOWN_COMMAND 1HCI_ERR_NOCONNECTION 2HCI_ERR_HARDWARE_FAIL 3HCI_ERR_PAGE_TIMEOUT 4HCI_ERR_AUTHENTICATION_FAILED 5HCI_ERR_KEY_MISSING 6HCI_ERR_MEMORY_FULL 7HCI_ERR_CONNECTION_TIMEOUT 8HCI_ERR_MAX_NUM_CONNECTIONS 9HCI_ERR_MAX_NUM_SCO_CONNECTIONS 10HCI_ERR_ACL_CONN_ALREADY_EXISTS 11HCI_ERR_COMMAND_DISALLOWED 12115
Chapter 7. iWRAP - Bluetooth InterfaceHCI Error CodeHCI_ERR_HOST_REJECTED_0D 13HCI_ERR_HOST_REJECTED_0E 14HCI_ERR_HOST_REJECTED_0F 15HCI_ERR_HOST_TIMEOUT 16HCI_ERR_UNSUPPORTED_PARAM_VALUE 17HCI_ERR_INVALID_HCI_PARAMETER_VALUE 18HCI_ERR_OTHER_END_TERMINATE_13 19HCI_ERR_OTHER_END_TERMINATE_14 20HCI_ERR_OTHER_END_TERMINATE_15 21HCI_ERR_CONNECTION_TERMINATE_LOCALLY 22HCI_ERR_REPEATED_ATTEMPTS 23HCI_ERR_PARING_NOT_ALLOWED 24HCI_ERR_UNKNOWN_LMP_PDU 25HCI_ERR_UNSUPPORTED_REMOTE_FEATURE 26HCI_ERR_SCO_OFFSET_REJECTED 27HCI_ERR_SCO_INTERVAL_REJECTED 28HCI_ERR_SCO_AIR_MODE_REJECTED 29HCI_ERR_INVALID_LMP_PARAMETERS 30HCI_ERR_UNSPECIFIED_ERROR 31HCI_ERR_UNSUPPORTED_LMP_PARAMETER_VAL 32HCI_ERR_ROLE_CHANGE_NOT_ALLOWED 33HCI_ERR_LMP_RESPONSE_TIMEOUT 34HCI_ERR_LMP_ERROR_TRANSACTION_COLLISION 35HCI_ERR_LMP_PDU_NOT_ALLOWED 36HCI_ERR_ENCRYPTION_MODE_NOT_ACCEPTABLE 37HCI_ERR_UNIT_KEY_USED 38HCI_ERR_QOS_NOT_SUPPORTED 39HCI_ERR_INSTANT_PASSED 40HCI_ERR_PAIRING_WITH_UNIT_KEY_NOT_SUPP 41HCI_ERR_ILLEGAL_HANDLE 100HCI_ERR_TIMEOUT 101HCI_ERR_OUTOFSYNC 102HCI_ERR_NO_DESCRIPTOR 103Table 7-7. HCI Error CodesL2CAP Error CodeL2CAP_NO_CAUSE 0L2CAP_ERR_PENDING 1L2CAP_ERR_REFUS_INV_PSM 2116
Chapter 7. iWRAP - Bluetooth InterfaceL2CAP Error CodeL2CAP_ERR_REFUS_SEC_BLOCK 3L2CAP_ERR_REFUS_NO_RESOURCE 4L2CAP_ERR_TIMEOUT_EXTERNAL 0xeeTable 7-8. L2CAP Error CodesSDP Error CodeSDP_ERR_RESERVED 0SDP_ERR_UNSUPPORTED_SDP_VERSION 1SDP_INVALID_SERVICE_RECORD_HANDLE 2SDP_INVALID_REQUEST_SYNTAX 3SDP_INVALID_PDU_SIZE 4SDP_INVALID_CONTINUATION_STATE 5SDP_INSUFFICIENT_RESOURCES 6SDP_ERR_UNHANDLED_CODE 100SDP_ERR_TIMEOUT 101SDP_ERR_NOTFOUND 102SDP_INVALID_RESPONSE_SYNTAX 103SDP_NOT_FOUND (not really an error) 200Table 7-9. SDP Error CodesRFCOMM Error CodeRFCOMM_SUCCESS 0RFCOMM_ERR_NORESOURCES 1RFCOMM_ERR_ILL_PARAMETER 2RFCOMM_ERR_REJECTED (Connection setup was rejected by remote side) 100RFCOMM_ERR_TIMEOUT (Connection timed out) 101RFCOMM_ERR_NSC (Non supported command received) 102RFCOMM_ERR_ILLPARAMETER 103Table 7-10. RFCOMM Error CodesIf the problems persist after restarting the communication parties, please contact Bluegiga Tech-nologies as instructed in Section 1.2.117
Chapter 8. I/O APIThe Bluegiga I/O API defines how to access Access Server’s LEDs, buzzer, and general purposeI/O.8.1. Led and Buzzer APIAccess Server’s LEDs and buzzer can be accessed through the /dev/led device. You can checkthe status of the LEDs and the buzzer with the cat /dev/led command and set LEDs or the buzzerwith the echo abcde > /dev/led command. An upper case letter means that the LED or buzzeris ON, a lower case letter means that the LED or buzzer is OFF. Letter "a" is the buzzer, letters"b".."e" are LEDs 1..4.Example:[root@wrap /] echo abCDe > /dev/led8.2. GPIO APIThe Digital I/O pins of Access Server can be controlled write-only by using the /dev/io devicein the same way as the /dev/led device for LEDs and buzzer described above.The letter-to-I/O mapping of the 16 pins is as follows, when looking at the connector:hgfedcbaXijklmnoX is the ground pin (and cannot be set).o is the voltage sense pin (user can use any voltage from 3.3V to 5.0V).The I/O must first be enabled by using the echo Z > /dev/io command. After that, pins can bedriven up by echoing the corresponding upper case letter (A-N) or down by echoing a lowercase letter (a-n) to the /dev/io device.Example:[root@wrap /] echo ZaBcD > /dev/io118
Chapter 9. Advanced Use Cases for Access ServerThis chapter will give you advanced use cases for Access Server. The cases listed here are not sotrivial, the simple cases are already listed mostly in Chapter 7.9.1. Making Access Server SecureTBA9.2. Saving Bluetooth Pairing Information PermanentlyBy default, Access Server discards pairing information after 30 minutes and does not store pair-ing data permanently. Therefore, rebooting of Access Server removes all pairing information.To increase the pairing data timeout and to automatically store the pairing data to the per-manent storage and to automatically reload the information at reboot, append the followingiWRAP commands to the end of /etc/bluetooth.conf file (Setup −→ Bluetooth settings −→Edit startup script in WWW Setup):# Set pairing data timeout to ~370 days (in seconds)# Note: timeout counter is restarted at rebootSET BLUETOOTH PAIREXPIRE 32000000# Automatically load the pairing dataLOAD /etc/bluetooth.security$p# Automatically save the pairing dataSET CONTROL AUTOSAVE AUTH,PAIR /etc/bluetooth.security$pNote: Do not forget $p from the filename. It is replaced with the Bluetooth baseband number. Ona multiradio Access Server, forgetting it will make the security data to be overwritten by the otherBluetooth processes.Note: Pairing must be done between each Bluetooth device pairs. There is no way of making a singlepairing between a device and all three basebands of the WRAP 2293 Access Server.9.3. Digital PenAccess Server will support most of the digital pens. The examples below are for Nokia DigitalPen SU-1B but they should apply to other pens too.To setup Access Server for digital pens you have to give following iWRAP commands. The bestway to do this is to append the following line to /etc/bluetooth.conf file (Setup −→ Bluetoothsettings −→ Edit startup script in WWW Setup):# Load Digital Pen emulation commandsLOAD /etc/bluetooth.penThe /etc/bluetooth.pen must then be created (in WWW Setup, you can do it at Setup −→Advanced settings −→ Edit other configuration files). It should contain the lines following theexample below:# Emulate a phoneSET BLUETOOTH CLASS 500204119
Chapter 9. Advanced Use Cases for Access ServerSET BLUETOOTH LISTEN 1 "*/usr/sbin/dun"SDP ADD DUN 1 "Digital Pen DUN"# Add two pens and their pin codesSET BLUETOOTH AUTH 00:07:cf:51:f6:8e 9079 --REPLYSET BLUETOOTH AUTH 00:07:cf:51:d5:2b 6603 --REPLY# Note: See pen’s manual for correct bluetooth address and pin code# Optionally reject all other incoming connectionsSET BLUETOOTH AUTH *- --NEWPAIRAfter these settings you can pair and use the digital pen with Access Server just like you woulduse it with a phone. Both modes, receiving pictures to Access Server, and external server viadialup, are supported.9.4. OpenVPNThis chapter explains how to create a secure network between your Access Server and a PCrunning Windows OS. This is done using Virtual Private Networking (VPN) and the particularsoftware in use is OpenVPN, which is open source software and is available for everyone with-out charge. VPN creates a secure tunnel between Access Server and a PC, which enables you,for example, to control a GPRS connected Access Server in a remote location.9.4.1. PrerequisitesFirst, download OpenVPN from http://openvpn.se. A normal OpenVPN version using plaincommand line interface is available in http://openvpn.net/download.html. The basic instruc-tions naturally apply for both versions, since the actual software is the same. OpenVPN GUI isonly available for Windows OS.For Access Server, you must download the OpenVPN installation packet fromwww.bluegiga.com/techforum. If you do not have access to the Tech forum, you can apply foraccess in the same site. In the Tech forum, go to Access Server -> Downloads, where you canfind the installation packet called openvpn-2.0.8-1.wpk. Access Server is a Linux system, andonly command line interface is provided at this point.This guide relies on material provided in http://openvpn.net/. If you want more specificinformation on features described here or other features OpenVPN provides, please visithttp://openvpn.net/howto.html.9.4.2. Installing OpenVPNIn Windows, execute the installation file and wait until it is complete. There should be no needfor reboot. After this, the OpenVPN icon appears in the system tray. Right-click the icon andyou can see the available options120
Chapter 9. Advanced Use Cases for Access ServerFigure 9-1. OpenVPN GUI Options MenuIn Access Server, the easiest way to install OpenVPN is through the WWW setup. Just enter theserver IP address in you web browser and log in. If you do not know the IP address, you canuse the WRAPfinder application to find out the IP address. WRAPfinder is located in the CDprovided with the server.When in WWW setup, go to Advanced settings -> Upload a software update. There you canchoose the openvpn-2.0.8-1.wpk installation packet and upload it to the server. After this youcan go back to the Advanced settings page and choose List installed software components. If youcan see openvpn in this list, the installation is complete.9.4.3. Creating Certificates and KeysIn this chapter, we create the necessary files to ensure privacy in the VPN, i.e. we will establisha Public Key Infrastructure (PKI). The PKI consists of:•A master Certificate Authority (CA) certificate and key which is used to sign each of the serverand client certificates.•A separate certificate (also known as a public key) and private key for the server and eachclient.OpenVPN uses bi-directional authentication, which means that both server and client will au-thenticate each other using certificates before connection is considered safe.To create the files we will use a set of scripts bundled with OpenVPN for Windows. To see howthe same thing is done in Linux, see http://openvpn.net/howto.html#pki.In Windows, open up a Command Prompt window and go to \ProgramFiles\OpenVPN\easy-rsa. Run the following batch file to copy configuration files into place(this will overwrite any existing vars.bat and openssl.cnf files):init-configNow, edit the vars file (called vars.bat on Windows) and set the KEY_COUNTRY,KEY_PROVINCE,KEY_CITY,KEY_ORG, and KEY_EMAIL parameters. Do not leave any of these parameters blank.varsclean-allbuild-ca121
Chapter 9. Advanced Use Cases for Access ServerThe build-ca builds the certificate authority (CA) certificate and key by invoking the interactiveopenssl command:ai:easy-rsa # ./build-caGenerating a 1024 bit RSA private key............++++++...........++++++writing new private key to ’ca.key’-----You are about to be asked to enter information that will be incorporatedinto your certificate request.What you are about to enter is what is called a Distinguished Name or a DN.There are quite a few fields but you can leave some blankFor some fields there will be a default value,If you enter ’.’, the field will be left blank.-----Country Name (2 letter code) [FI]:State or Province Name (full name) [NA]:Locality Name (eg, city) [ESPOO]:Organization Name (eg, company) [OpenVPN-TEST]:Organizational Unit Name (eg, section) []:Common Name (eg, your name or your server’s hostname) []:OpenVPN-CAEmail Address [me@myhost.mydomain]:Note: In the above sequence, the most queried parameters were defaulted to the values set in thevars or vars.bat files. The only parameter which must be explicitly entered is the Common Name. Inthe example above, we have used "OpenVPN-CA".Next, we will generate a certificate and private key for the server:build-key-server serverAs in the previous step, most parameters can be defaulted. When the Common Name is queried,enter "server". Two other queries require positive responses, "Sign the certificate? [y/n]" and "1out of 1 certificate requests certified, commit? [y/n]".Generating client certificates is very similar to the previous step:build-key clientIf you want to use many clients, then you could use, for example, the following commands:build-key client1build-key client2build-key client3In this case, remember that for each client, make sure to type the appropriate Common Namewhen prompted, i.e. "client1", "client2", or "client3". Always use a unique common name foreach client.Next we’ll create Diffie Hellman parameters that must be generated for the OpenVPN server:122
Chapter 9. Advanced Use Cases for Access Serverbuild-dhThe output is as follows:ai:easy-rsa # ./build-dhGenerating DH parameters, 1024 bit long safe prime, generator 2This is going to take a long time.................+..............................................................+.............+.................+...............................................Now you can find the generated keys and certificates in the keys subdirectory. The final step inthe key generation process is to copy all files to the machines which need them, taking care tocopy secret files (server.key and client.key) over a secure channel.9.4.4. Creating Configuration FilesBoth the server and client devices must have certain configuration files for OpenVPN to deter-mine, for example, which IP addresses to use. In this chapter, we will create a basic configurationfile for OpenVPN server and client. We’ll make the PC as server and Access Server as the client.An example configuration files can be found here: http://openvpn.net/howto.html#examples.In our example, we use most of the setting described in these files.Note: The configuration files can be named, for example, server.conf and client.conf in a Linuxsystem. On Windows they would be named server.ovpn and client.ovpn, where the file extensionis different.9.4.4.1. Server Configuration FileThere are lots of configuration options that can be used with OpenVPN, but this guide onlycovers the basic approach to set up a working VPN with minimal effort. The lines needed in theserver configuration file are listed below. After each line, an explanation follows, see Figure 9-2:port 1194•Determines the TCP or UDP port that OpenVPN should listen to. For multiple OpenVPNinstances on the same machine, you’ll need to use a different port for each one. Make sureyour firewall allows traffic through these ports.proto udp•Determines whether to use TCP or UDP. We have chosen UDP in our application.dev tun123
Chapter 9. Advanced Use Cases for Access Server•Determines whether to use routed IP channel (tun) or an Ethernet tunnel, i.e. Ethernet bridg-ing (tap). ’tap’ creates a virtual Ethernet adapter, while ’tun’ device is a virtual point-to-pointIP link. We have chosen ’tun’ because of its better efficiency and scalability.ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"•This is a so-called master Certificate Authority (CA) certificate. This will be placed in both theserver and client devices, it’s the same for all devices. Since the server is a Windows machine,we need to use double backslashes ( \\ ) in pathnames. In Linux system one slash ( / ) is used.cert "C:\\Program Files\\OpenVPN\\config\\server.crt"•This is the certificate (a.k.a public key) for the server device.key "C:\\Program Files\\OpenVPN\\config\\server.key"•This is the private key for the server device and it should be kept secret.dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"•This file refers to Diffie-Hellman key exchange, which is a cryptographic protocol that allowstwo devices that have no prior knowledge of each other to establish a shared secret key overan insecure connection.server 172.30.203.0 255.255.255.0•Here we create the VPN subnet. In this example, the server will take 172.30.203.1 for itself, therest will be left for clients to use. Each client will be able to reach the server on 172.30.203.1.ifconfig-pool-persist C:\\Program Files\\OpenVPN\\config\\Logs\\ipp.txt•This file maintains a record of client <-> virtual IP address associations. If OpenVPN goesdown or is restarted, reconnecting clients can be assigned the same virtual IP address thatwas previously assigned.keepalive 10 120•This feature causes ping-like messages to be sent back and forth over the link so that each sideknows when the other side has gone down. The default parameter "10 120" makes ping occurevery 10 seconds and remote peer is assumed down if no ping is received within 120 seconds.124
Chapter 9. Advanced Use Cases for Access Serverpersist-key•Persist features try to avoid accessing certain resources on restart that may no longer be ac-cessible.persist-tun•See above.status C:\\Program Files\\OpenVPN\\config\\Logs\\openvpn-status.log•OpenVPN outputs a short status description to this file showing current connections. This fileis truncated and rewritten every minute.verb 3•This sets the verbosity level of the log file.•0 is silent, except for fatal errors•4 is reasonable for general use•5 and 6 can help to debug connection problems•9 is extremely verbosetls-timeout 4•Packet retransmit timeout on TLS control channel if no acknowledgment from remote endwithin n seconds (n = 4 in this example).125
Chapter 9. Advanced Use Cases for Access ServerFigure 9-2. Server Configuration File9.4.4.2. Client Configuration FileJust like with the server configuration file, we’ll describe here the basic client settings needed inour example setup, see Figure 9-3:client•Here we specify that we are a client and that we will be pulling certain config file directivesfrom the server.dev tun•This setting is the same as in the server configuration file. Use the same setting you’re usingin the server.proto udp•This setting is the same as in the server configuration file. Use the same setting you’re usingin the server.remote 10.1.1.35 1194126
Chapter 9. Advanced Use Cases for Access Server•This setting configures the hostname/IP and port of the server.resolv-retry infinite•Keep trying indefinitely to resolve the host name of the OpenVPN server. Very useful onmachines which are not permanently connected to the internet, such as laptops.nobind•Most clients don’t need to bind to a specific local port number.persist-key•This setting is the same as in the server configuration file. Use the same setting you’re usingin the server.persist-tun•This setting is the same as in the server configuration file. Use the same setting you’re usingin the server.ca /usr/local/openvpn/conf/ca.crt•This is the same ca.crt file as in the server. See server config file descriptions for more infor-mation.cert /usr/local/openvpn/conf/client.crt•This is the certificate (a.k.a public key) for the client device.key /usr/local/openvpn/conf/client.key•This is the private key for the client device.verb 3•Sets the verbosity level of the log file.127
Chapter 9. Advanced Use Cases for Access ServerFigure 9-3. Client Configuration File9.4.5. Starting up VPNFirst, place the configuration files in the client and server. Like in the examples, the locationfor these files can be, for example, C:\Program Files\OpenVPN\config in Windows and/usr/local/openvpn/config in Linux. Next, copy the authentication files ( ca.crt,server.crt,server.key,client.crt and client.key) into the same directories.9.4.5.1. Starting up the ServerThe OpenVPN server must be accessible from the internet:•open UDP port 1194 on the firewall (or the TCP/UDP port you’ve configured), or•set up a port forward rule to forward UDP port 1194 from the firewall/gateway to the machinerunning the OpenVPN server•make sure TUN/TAP device is allowed access through firewallsTo start the OpenVPN server right-click on the .ovpn file on Windows and choose "Start Open-VPN on this config file" or by right-clicking the GUI icon on taskbar and start correct config filefrom there. It’s also possible to start from command line:openvpn [server_config_file]Where "server_config_file" is in our Windows examples is server.ovpn.128
Chapter 9. Advanced Use Cases for Access ServerA normal server startup should look like this (output will vary across platforms):Sun Feb 6 20:46:38 2005 OpenVPN 2.0_rc12 i686-suse-linux [SSL] [LZO] [EPOLL] built on Feb 5 2005Sun Feb 6 20:46:38 2005 Diffie-Hellman initialized with 1024 bit keySun Feb 6 20:46:38 2005 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]Sun Feb 6 20:46:38 2005 TUN/TAP device tun1 openedSun Feb 6 20:46:38 2005 /sbin/ifconfig tun1 10.8.0.1 pointopoint 10.8.0.2 mtu 1500Sun Feb 6 20:46:38 2005 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2Sun Feb 6 20:46:38 2005 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:23 ET:0 EL:0 AF:3/1 ]Sun Feb 6 20:46:38 2005 UDPv4 link local (bound): [undef]:1194Sun Feb 6 20:46:38 2005 UDPv4 link remote: [undef]Sun Feb 6 20:46:38 2005 MULTI: multi_init called, r=256 v=256Sun Feb 6 20:46:38 2005 IFCONFIG POOL: base=10.8.0.4 size=62Sun Feb 6 20:46:38 2005 IFCONFIG POOL LISTSun Feb 6 20:46:38 2005 Initialization Sequence Completed9.4.5.2. Starting up the ClientWe’ll start the client from Linux command line:openvpn [client_config_file]Where "client_config_file" is in our examples client.conf.A normal client startup looks similar to the server output and should end with the "InitializationSequence Completed" message.Now, try a ping across the VPN from the client:ping 10.8.0.1If the ping succeeds, you have a functioning VPN.129
Chapter 10. Certification Information and WEEE ComplianceAccess Server is CE approved and Bluetooth qualified v. 2.0 + EDR. It has been measured againstthe following specification standards: ETSI EN 300 328 v1.6.1 / EN 301 489-1/17 / EN 60950-1/ FCC parts 15.247, 15.209, 15.207, 15.109 and 15.107. Supported Bluetooth profiles are: GAP,SDAP, LAN client and server, SPP A and B, FTP client and server, ObjP client and server, PAN-PANU, PAN-GN and PAN-NAP.Hereby, Bluegiga Technologies declares that this Access Server is in compliance with the essen-tial requirements and other relevant provisions of Directive 1999/5/EC.This device complies with Part 15 of the FCC Rules.The device operation is subject to the following two conditions:1. This device may not cause harmful interference, and2. This device must accept any interference received, including interference that may causeundesired operation.This equipment has been tested and found to comply with the limits for a Class B digital device,pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protec-tion against harmful interference in a residential installation. This equipment generates, uses,and can radiate radio frequency energy and, if not installed and used in accordance with theinstructions, may cause harmful interference to radio communications. However, there is noguarantee that interference will not occur in a particular installation.If this equipment does cause harmful interference to radio or television reception, which can bedetermined by turning the equipment off and on, the user is encouraged to try to correct theinterference by one or more of the following measures:•Reorient or relocate the receiving antenna•Increase the distance between the equipment and receiver•Connect the equipment into an outlet on a circuit different from that to which the receiver isconnected•Consult the dealer or an experienced radio or television technician for helpWarningChanges or modifications made to this equipment not expressly approved byBluegiga Technologies Inc. may void the FCC authorization to operate thisequipment.The radiated output power of Access Server is far below the FCC radio frequency exposurelimits. Nevertheless, Access Server should be used in such a manner that the potential for humancontact during normal operation is minimized.To meet the FCC’s exposure rules and regulations:•The antenna(s) used for this transmitter must be installed to provide a separation distance ofat least 20 cm from all the persons.130
Chapter 10. Certification Information and WEEE Compliance•Any transmitter installed in the CF card slot must not exceed 4 W of e.i.r.p. To check if aparticular equipment complies with this restriction, you need to know its FCC ID numberand visit the searching engine in the FCC web site in the following Internet address,where you can find the output power by the equipment in the grant of equipment:https://gullfoss2.fcc.gov/prod/oet/cf/eas/reports/GenericSearch.cfmIf this link does not work properly, please visit the FCC website (http://www.fcc.gov/) andfollow the following steps to find the searching engine:FCC website −→ Office of Engineering Technology −→ Equipment Authorization ElectronicFiling −→ Generic SearchPlease notice that the output power listed in the grant uses different units depending on thetype of the equipment, e.g.:1. The output power for 802.11a/b/g/h equipment or similar equipment approved under§15.247 or §15.407 is listed as Conducted RF power. §15.247 or §15.407 limit the e.i.r.p. to4 W, so this restriction is fulfilled.2. The output power for Part 22 cellular equipment is listed as e.r.p. The relationship betweene.r.p. and e.i.r.p. is the following one:e.i.r.p. = 1.64 x e.r.p.3. The output power for Part 24 PCS equipment is listed as e.i.r.p.4. For other type of equipment, please consult the distributor in order to assure the restrictionis fulfilled.Note: Definitions:Effective Radiated Power (e.r.p.) (in a given direction): The product of the power supplied to theantenna and its gain relative to half-wave dipole in a given direction.Equivalent Isotropically Radiated Power (e.i.r.p.) (in a given direction): The product of the powersupplied to the antenna and its gain relative to an isotropic antenna.The table below is excerpted from Table 1B of 47 CFR 1.1310 titled Limits for Maximum Permis-sible Exposure (MPE), Limits for General Population/Uncontrolled Exposure:Frequency Range (MHz) Power Density (mW/cm2)300 - 1500 f/15001500 - 100000 1.0Table 10-1. Excerpt of Table 1B of 47 CFR 1.1310The equipment WRAP Access Server equipment transmits in the 2400 - 2483.5 MHz frequencyrange, so the applicable MPE limit is 1 mW/cm2. The equipment can be provided with up to 4Bluetooth modules WT11# (FCC ID: QOQWT11):Under the conditions stated above MPE limits can be guaranteed as the calculation below shows:Example 10-1. 15.247 or 15.407 Compact Flash Card with maximum allowed e.i.r.p. of 4 WUsing Equation from page 18 of OET Bulletin 65, Edition 97-01:SCompact Flash card = Prad (e.i.r.p.) Compact Flash card / 4πR2= 4000 mW/4π(20 cm)2131
Chapter 10. Certification Information and WEEE ComplianceSCompact Flash card = 0.795774 mW/cm2STotal = S Bluetooth + S Compact Flash card = 0.003481 mW/cm2+ 0.795774 mW/cm2STotal = 0.799255 mW/cm2< 1 mW/cm2Example 10-2. Part 22 Compact Flash Card with maximum e.r.p. of 1.5 W (Category excludedof MPE evaluation according to §2.1091)Using Equation from page 18 of OET Bulletin 65, Edition 97-01 and considering that e.i.r.p. =1.64 x e.r.p.:SCompact Flash card = Prad (e.i.r.p.) Compact Flash card /4πR2= 1500 x 1.64 mW/4π(20 cm)2SCompact Flash card = 0.489401 mW/cm2STotal = S Bluetooth + S Compact Flash card = 0.003481 mW/cm2+ 0.489401 mW/cm2STotal = 0.492882 mW/cm2< 1 mW/cm2Example 10-3. Part 24 Compact Flash Card with maximum e.r.p. of 3 W (Category excluded ofMPE evaluation according to §2.1091)Using Equation from page 18 of OET Bulletin 65, Edition 97-01 and considering that e.i.r.p. =1.64 x e.r.p.:SCompact Flash card = Prad (e.i.r.p.) Compact Flash card /4πR2= 3000 x 1.64 mW / 4π(20cm)2SCompact Flash card = 0.978803 mW/cm2STotal = S Bluetooth + S Compact Flash card = 0.003481 mW/cm2+ 0.978803 mW/cm2STotal = 0.982284 mW/cm2< 1 mW/cm2WEEE ComplianceThe crossed-out wheeled bin means that within the European Union the product must be takento separate collection at the product end-of-life. Do not dispose of these products as unsortedmunicipal waste.132
Appendix A. Directory StructureDirectory Tree Type Note============== ==== ====/ f whole filesystem is root writable|-- bin f|-- boot f|-- dev r| ‘-- shm r ramdisk| |-- etc r resolv.conf| |-- tmp r /tmp| | |-- obex r obexserver dir| ‘-- var r ramdisk part of /var| |-- lock r| | ‘-- subsys r| |-- log r| |-- run r| ‘-- empty r|-- etc f system config and init scripts| |-- init.d -> rc.d/init.d l| |-- ppp f| | ‘-- peers f| |-- rc.d f| | |-- init.d f| | ‘-- rc3.d f| |-- rc3.d -> rc.d/rc3.d l| |-- ssh f| ‘-- sysconfig f|-- lib f system libraries| |-- iptables f| |-- pppd f| ‘-- modules f| ‘-- [module directories] f|-- mnt f mount points| |-- nfs f empty mount point| ‘-- usb f empty mount point|-- proc p proc filesystem|-- root f home directory of root|-- sbin f|-- sys p sys filesystem|-- tmp -> dev/shm/tmp l temporary data (ramdisk)|-- usr f| |-- bin f| |-- lib f| | ‘-- gconv f| |-- libexec f| |-- local f mount point for second flash| |-- sbin f| ‘-- share f| |-- tabset f| ‘-- terminfo f| |-- a f133
Appendix A. Directory Structure| |-- l f| |-- v f| ‘-- x f‘-- var f|-- empty -> ../dev/shm/var/empty f|-- lib f| |-- b2b f| |-- dpkg f| ‘-- info f| ‘-- setup f|-- lock -> ../dev/shm/var/lock l|-- log -> ../dev/shm/var/log l log files|-- run -> ../dev/shm/var/run l|-- spool f| ‘-- cron f| ‘-- crontabs f|-- tmp -> ../dev/shm/var/tmp l‘-- www f|-- cgi-bin f‘-- html f WWW pagesTypes=====f = FLASH filesystem, read/write, files will be saved on power-downr = RAM filesystem, read/write, files will be lost on power-downl = symbolic linkp = proc/sys filesystem, can be used to configure Linux134
Appendix B. Setup OptionsB.1. Security settingsSubmenu containing most important security settings, like passwords.1. Root password [$1$rUj/KWS1$v3FZcBP.6HiN4f5PaATMq1]Password of "root" user, shown in encrypted form. The default is "buffy".To change the password, clear the field, enter a new password and click Save.Saving an empty field keeps the old password.Please note that the new password is shown in plain text only right afteryou have saved it. Later it is only shown encrypted, and there is no wayto decrypt it. You must either remember it or change it again tosomething you do remember.2. iWRAP password [buffy]The password required to be entered before any commands when communicatingwith iWRAP (the Bluetooth server). The default is "buffy".To change the password, clear the field, enter a new password and click Save.Saving an empty field keeps the old password.Please note that the new password is shown in plain text only right afteryou have saved it. Later it is only shown encrypted, and there is no wayto decrypt it. You must either remember it or change it again tosomething you do remember.Use "-" to disable iWRAP password.3. Do not require iWRAP password from local clients [Yes]Ask iWRAP password only from remote clients, not from local (127.0.0.1).4. Bluetooth PIN code []This PIN code used when establishing connections. Up to 16 characters aresignificant.If there is no default PIN code set, Access Server does not requirea PIN code when establishing connections.However, if there is no default PIN code set, but the other devicerequests a PIN code, "1234" is replied.5. wpkgd autoinstall password []This is optional password to authenticate wpk autoinstall packets (wpkpackets sent to the autoinstall directory, /tmp/obex by default).The password is shown encrypted here, if set. By default, it is not set.To change the password, clear the field, enter a new password and click Save.Please note that the new password is shown in plain text only right after135
Appendix B. Setup Optionsyou have saved it. Later it is only shown encrypted, and there is no wayto decrypt it. You must either remember it or change it again tosomething you do remember.Use "-" do disable the password.The password must match the authentication parameter in the "wpkg.pif"file in the wpk packet. Otherwise the packet is not processed.Syntax in the "wpkg.pif" file:%wpkg-auth: auth6. wpkgd hotplug password []This is optional password to authenticate wpk installation packetsautomatically run from USB memory dongles or Compact Flash memory cards.The password is shown encrypted here, if set. By default, it is not set.To change the password, clear the field, enter a new password and click Save.Please note that the new password is shown in plain text only right afteryou have saved it. Later it is only shown encrypted, and there is no wayto decrypt it. You must either remember it or change it again tosomething you do remember.Use "-" to disable the password.The password must match the authentication parameter in the "wpkg.pif"file in the wpk packet. Otherwise the packet is not processed.Syntax in the "wpkg.pif" file:%wpkg-auth: auth7. Root user password for FTP [buffy]Password of the "root" user for FTP connections.8. Allow anonymous FTP login [Yes]Whether "anonymous" FTP login is allowed or not.9. WWW passwords [/etc/httpd.conf]Access to WWW pages served by Access Server can be restricted using theconfiguration file "httpd.conf", editable from here.The file consists of lines in format "/dir:username:password". Thisspecifies that to view the WWW page at address "http://as-ip/dir", youmust enter username "username" and password "password".More than one username can be defined for the same "/dir"by adding multiple lines.By default, this file specifies that only user "root" with password"buffy" is allowed to access the WWW Setup.136
Appendix B. Setup OptionsB.2. Generic settingsSubmenu containing generic settings.1. Root password [$1$rUj/KWS1$v3FZcBP.6HiN4f5PaATMq1]Password of "root" user, shown in encrypted form. The default is "buffy".To change the password, clear the field, enter a new password and click Save.Saving an empty field keeps the old password.Please note that the new password is shown in plain text only right afteryou have saved it. Later it is only shown encrypted, and there is no wayto decrypt it. You must either remember it or change it again tosomething you do remember.2. Use local syslog service [Yes]This option determines whether the System Logger (syslogd) logslocally to /var/log/messages or not.Set this to No if you want to log to a remote syslog server.3. IP address of the remote syslog server [192.168.42.1]The IP address of the device in the network to which the System Loggershould log to.The remote device must be configured to accept syslogd connections fromthis Access Server. See the system logger documentation on the remote devicefor more information on how to configure that.B.3. Network settingsSubmenu containing network settings.1. Hostname of the unit [wrap]The hostname of Access Server. Local applications will see thisname. This name may be changed by dynamic network configuration.2. Domain of the unit [localdomain]The domain name of Access Server. Local applications will see thisname. This name may be changed by dynamic network configuration.3. Enable Ethernet cable interface [Yes]Set this option to Yes if you want to have the Ethernet cable interfaceenabled.If you don’t use this interface, you may disable it to slightly increasesecurity and system boot speed.4. Enable Wi-Fi interface [Yes]Set this option to Yes if you want to have the Wi-Fi interface enabled(you can use the Wi-Fi interface with a supported Compact Flash Wi-Ficard or USB Wi-Fi dongle).If you don’t use this interface, you may disable it to slightly increase137
Appendix B. Setup Optionssecurity and system boot speed.5. Enable GPRS interface [No]Set this option to Yes if you want to have the GPRS interface enabled.To use the interface, a supported Compact Flash GPRS card or a serial GPRSmodem must be attached to Access Server.6. Time server (rdate) []Hostname or IP address of the time server to be connected at system boot toretrieve correct time using the Time Protocol (RFC 868).NTP client is running by default, so rdate should not be needed at all.7. Zeroconf interface [nap]Defines the interface in which Zeroconf is running.Possible interface names are "nap", "gn" and "none".B.3.1. Default interface settingsDefault interface settings. By default, Ethernet and BluetoothPAN-NAP interfaces are assigned to this interface.1. Use dynamic network configuration [Yes]This option determines whether or not automatic configuration of the defaultnetwork interface (nap) using DHCP should be attempted at boot. If set tono, you have to manually enter IP address and other network settings.2. IP address [192.168.42.3]The IP address of Access Server.3. Subnet mask [255.255.255.0]The network mask of Access Server.4. IP address of the default gateway [192.168.42.254]The IP address of the default gateway in the LAN to which Access Serveris connected.5. List of name server IPs [192.168.42.1 192.168.42.2]The IP address(es) of the name servers, separated by space.B.3.2. Ethernet cable settingsEthernet cable settings.1. Assign to default interface [Yes]Assigns Ethernet (eth0) to default interface (nap) with settingsspecified in Default interface settings.Do NOT set this to No if you don’t know what you are doing. Thereis a high risk that you end up with invalid network settings if youdo so.If you need to set a static IP address to Access Server, do itin the Default interface settings.138
Appendix B. Setup Options2. Use dynamic network configuration [Yes]Use dynamic network configuration (DHCP) on Ethernet interface whenit is not assigned to the default interface.3. IP address [192.168.43.3]IP address of the Ethernet interface when it is not assigned to thedefault interface and dynamic network configuration is not in use.4. Subnet mask [255.255.255.0]Network mask of the Ethernet interface when it is not assigned to thedefault interface and dynamic network configuration is not in use.B.3.3. Wi-Fi settingsWi-Fi settings.1. Act as a Wi-Fi Access Point [No]This option defines whether Access Server acts as a Wi-Fi AccessPoint when Wi-Fi is enabled.2. ESSID []Access point network name (Service Set ID).3. Nickname []The nickname, or station name.4. WEP encryption key []WEP encryption key for Wi-Fi.Examples:10 hex digits: "abcdef1234"26 hex digits: "1234567890abcdef1234567890"or "1234-5678-90ab-cdef-1234-5678-90"5 ASCII characters: "s:abcde"13 ASCII characters: "s:abcdefghijklm"5. Extra commands for Access Point mode [/etc/sysconfig/ifup-wlan0]Extra commands for Access Point mode.6. Assign to default interface [No]Assigns Wi-Fi to default interface with settings specified inDefault interface settings.7. Use dynamic network configuration [Yes]Use dynamic network configuration (DHCP) for Wi-Fi interface.8. IP address [192.168.44.3]IP address of Wi-Fi interface.9. Subnet mask [255.255.255.0]Subnet mask of Wi-Fi interface.139
Appendix B. Setup OptionsB.3.4. GPRS settingsGPRS settings.1. Dial on demand [Yes]If this option is set to Yes, the GPRS link is not opened at boot time butwhen there is data to be transferred.2. SIM card PIN code []PIN code of the SIM card in the GPRS modem.3. Username [blue]Username for GPRS network. Contact your GSM operator for correct value.Some examples:Elisa/Finland: blueSonera/Finland: blueWataniya/Kuwait: blueEtisalat/UAE: MnetSee also: http://www.kh-gps.de/gprsset.htm4. Password [giga]Password for GPRS network. Contact your GSM operator for correct value.Some examples:Elisa/Finland: gigaSonera/Finland: gigaWataniya/Kuwait: gigaEtisalat/UAE: MnetSee also: http://www.kh-gps.de/gprsset.htm5. Internet APN [internet]Internet APN for GPRS network. Contact your GSM operator for correct value.Some examples:Elisa/Finland: internetSonera/Finland: internetWataniya/Kuwait: action.wataniya.comEtisalat/UAE: mnetSee also: http://www.kh-gps.de/gprsset.htm6. Extra parameters for pppd []Optional extra parameters for pppd. Use only if you know what you are doing.140
Appendix B. Setup OptionsB.4. ApplicationsSubmenu containing settings of various applications.1. Default startup applications []Change which applications are to be started at startup and which don’t.B.4.1. wpkgd settingsSubmenu containing settings for wpkgd application.1. wpkgd’s autoinstall directory [/tmp/obex]wpkgd will automatically check this directory for wpk files containingsoftware update packets.Use "/tmp/obex" if you want to allow updates via Bluetooth Object Push.Use empty to disable autoinstall.2. Password for autoinstall packages []This is optional password to authenticate wpk autoinstall packets (wpkpackets sent to the autoinstall directory, /tmp/obex by default).The password is shown encrypted here, if set. By default, it is not set.To change the password, clear the field, enter a new password and click Save.Please note that the new password is shown in plain text only right afteryou have saved it. Later it is only shown encrypted, and there is no wayto decrypt it. You must either remember it or change it again tosomething you do remember.Use "-" do disable the password.The password must match the authentication parameter in the "wpkg.pif"file in the wpk packet. Otherwise the packet is not processed.Syntax in the "wpkg.pif" file:%wpkg-auth: auth3. Delete processed autoinstall packages [Yes]If this option is set Yes, the wpk autoinstall packets are deletedafter they have been processed.4. Process hotplug packages [Yes]If this option is set to Yes, wpk packets are automatically processedfrom USB memory sticks or Compact Flash memory cards when they areplugged into Access Server.5. Password for hotplug packages []This is optional password to authenticate wpk installation packetsautomatically run from USB memory dongles or Compact Flash memory cards.The password is shown encrypted here, if set. By default, it is not set.To change the password, clear the field, enter a new password and click Save.141
Appendix B. Setup OptionsPlease note that the new password is shown in plain text only right afteryou have saved it. Later it is only shown encrypted, and there is no wayto decrypt it. You must either remember it or change it again tosomething you do remember.Use "-" to disable the password.The password must match the authentication parameter in the "wpkg.pif"file in the wpk packet. Otherwise the packet is not processed.Syntax in the "wpkg.pif" file:%wpkg-auth: auth6. Delete processed hotplug packages [No]If this option is set Yes, the wpk packets are deletedafter they have been processed.7. Extra parameters for wpkgd []Optional extra command line parameters for wpkgd.Please see wpkgd --help for detailed information on the options.B.4.2. FTP server settingsSubmenu containing settings for FTP server application.1. Root user password [buffy]Password of the "root" user for FTP connections.2. Root user directory [/]Root directory of the "root" user for FTP connections.3. Root user instances [5]Maximum number of simultaneous logins of the "root" user for FTPconnections.4. Allow anonymous login [Yes]Whether "anonymous" FTP login is allowed or not.5. Anonymous user password [*]Password of the "anonymous" user for FTP connections.Use "*" to allow everything (aka anonymous login).6. Anonymous user directory [/tmp/obex]Root directory of the "anonymous" user for FTP connections.7. Anonymous user instances [5]Maximum number of simultaneous logins of the "anonymous" user for FTPconnections.8. Allow anonymous user to do everything [No]Whether "anonymous" user is allowed to do everything (all below) or not.142
Appendix B. Setup Options9. Allow anonymous user to download [Yes]Whether "anonymous" user is allowed to download files or not.10. Allow anonymous user to upload [No]Whether "anonymous" user is allowed to upload files and make directoriesor not.11. Allow anonymous user to overwrite [No]Whether "anonymous" user is allowed to overwrite existing files or not.12. Allow anonymous user to multiple login [No]Whether "anonymous" user is allowed to multiple logins or not.13. Allow anonymous user to erase [No]Whether "anonymous" user is allowed to erase files and directories or not.14. Edit configuration file [/etc/ftpd.conf]Edit the self documented configuration file of the FTP server. Here youcan change more advanced settings.B.4.3. ObexSender settingsSubmenu containing settings for ObexSender application.1. Bluetooth friendly name [W$S_$p]The name shown when this device is found when inquired about by otherBluetooth devices. Following meta tags are available:$S : Hardware serial number, all ten digits$s : Hardware serial number, last three digits$P : Server port$p : Server port, last digit$H : Fully Qualified Domain Name (FQDN)$h : hostname$$ : $For example, "Server_$p" would set the Bluetooth friendly name as"Server_1" for 1st baseband, "Server_2" for 2nd baseband and"Server_3" for 3rd baseband.2. Delay between inquiries [10]Delay between inquiries (Bluetooth device discoveries) in seconds.3. Delay between reply scans [10]Determines how often (in seconds) OBEX incoming directory (/tmp/obex)is scanned for remote requests. A low value increases CPU usage.4. If previous was ok, timeout before sending again [36000]If a file has been successfully sent to a device, this timeout(in seconds) defines when content can be sent again to the same device.5. If previous was reject, timeout before trying again [86400]If a file transmission to a device has failed or user has declined143
Appendix B. Setup Optionsthe file, this timeout (in seconds) defines when ObexSender cansend content to the same device again.6. Delay between retrying call [120]When user doesn’t accept or reject the file, ObexSender will try tosend the file again. This setting determines the timeout (in seconds)before resend occurs. Default value is 120 seconds.If you wish to disable this feature you can use the same value as in"ok delay" or "reject delay", i.e. the two previous settings.7. Delay after scanning [5]When a remote request from user has been received, this settingdetermines how long (in seconds) ObexSender will wait until theresponse file is sent back to the user.Default value is 5 seconds, because some mobile phones are notable to receive files over Bluetooth until at least 5 secondshas passed from sending.8. Delay between multiple files [40]If ObexSender has been configured to send multiple files, thisconfiguration sets the delay (in seconds) between the filetransmissions.9. Minimum RSSI value before sending [-65]The working range of ObexSender can be configured or limited withthis setting. When ObexSender searches for devices, the RSSI(Receiver Signal Strength Indicator) value is also measured.This value ranges from -128 to -1.-128 means the signal strength is very weak. A connection attempt wouldvery likely fail.-65 means the signal strength is ok. Connection can be created.With Class 2 devices, like most mobile phones, this means thephone is 10-20 meters away. A Class 1 device can be even morethan 100 meters away.-30 to -1 means the signal is very strong. The devices are most likelyvery close to each other (less than a meter away).10. Logfile name [-]Defines the path and name of the ObexSender log file(for example "/usr/local/obexsender/obexsender.log").Log file contains information about successful and unsuccessfultransmissions, timestamps and information about sent files.You can also use an IP address of a log server, which must be anotherAccess Server running ObexSender.Type "-" to use syslog.11. Log prefix [-]144
Appendix B. Setup OptionsThis prefix is put in front of every event in the log file.Type "-" for none (default).12. If sending was failure, log it too [Yes]If this is enabled failed transmissions will be logged too.13. Register to watchdog daemon [Yes]If this is enabled, ObexSender will reboot Access Serverautomatically if Bluetooth basebands have stopped responding.14. iWRAP password [-]iWRAP password. "-" for none (default).15. Edit configuration file [/etc/obexsender.conf]This link opens ObexSender configuration file(/etc/obexsender.conf) and allows you to edit it manually.It also allows you to change the settings that are notconfigurable with Setup application.16. Upload a new file [/usr/local/obexsender]This link allows you to upload files into the ObexSender file directory.17. List files [/usr/local/obexsender]This link allows you to browse files on the ObexSender file system.18. View log [-]This link allows you to view ObexSender log file if it exists.By default a summary of the logged events is displayed.Detailed information is available by clicking the date links.B.4.3.1. Delete log (confirm)This link will delete the current log file after confirmation.1. Delete log now! [/bin/true]Delete ObexSender log file immediately!WARNING: There is no confirmation for this!B.4.4. SMS gateway settingsSubmenu containing settings for SMS gateway application.1. Modem device [/dev/ttyS0]Modem device for SMS gateway./dev/ttyAT1 for user uart/dev/ttyS0 for CF slot2. Log file name [-]The file to which the SMS gateway (smsgw) logs all traffic. Use /dev/nullfor none, - for syslog, /var/log/smsgw.log if you want to save thisinformation. Be careful, however, not to fill the RAM file system (use a145
Appendix B. Setup Optionscron job to free disk space from time to time).3. SMSC number [+358405202000]SMSC number. Contact your local GSM operator if you don’t know the correctvalue.+358405202000 for Sonera/Finland+358508771010 for Elisa/Finland4. Edit configuration file [/etc/smsgw.conf]Edit the self documented configuration file of the SMS gateway.B.5. Bluetooth settingsSubmenu containing all Bluetooth related settings.1. iWRAP password [buffy]The password required to be entered before any commands when communicatingwith iWRAP (the Bluetooth server). The default is "buffy".To change the password, clear the field, enter a new password and click Save.Saving an empty field keeps the old password.Please note that the new password is shown in plain text only right afteryou have saved it. Later it is only shown encrypted, and there is no wayto decrypt it. You must either remember it or change it again tosomething you do remember.Use "-" to disable iWRAP password.2. Do not require iWRAP password from local clients [Yes]Ask iWRAP password only from remote clients, not from local (127.0.0.1).3. Friendly name [W$S_$p]The name shown when this device is found when inquired about by otherBluetooth devices. Following meta tags are available:$S : Hardware serial number, all ten digits$s : Hardware serial number, last three digits$P : Server port$p : Server port, last digit$H : Fully Qualified Domain Name (FQDN)$h : hostname$$ : $For example, "Server_$p" would set the Bluetooth friendly name as"Server_1" for 1st baseband, "Server_2" for 2nd baseband and"Server_3" for 3rd baseband.4. Connectable and discoverable mode [3]This setting specifies whether this device is connectable and/ordiscoverable or not by other Bluetooth devices.146
Appendix B. Setup OptionsWhen a device is connectable, other Bluetooth devices can make a Bluetoothconnection to it. Before making a connection, the calling device must knowthe Bluetooth address of the device it is connecting to. The Bluetoothaddresses can be found by making an inquiry. When a device is discoverable,it shows up in inquiries. Possible values for all combinations of thesesettings are:0 : Not connectable, not discoverable1 : Not connectable, discoverable2 : Connectable, not discoverable3 : Connectable and discoverable (default)5. Master/slave role switch policy [1]This setting specifies how local Bluetooth device should decideit’s role. When a Bluetooth device calls another Bluetooth device,it is master by default and the answering device is slave. When theconnection is being built, a role switch can be made. Normally,access point devices need to be the master, and therefore theyrequire a master-slave switch when a new device is connecting.This is also how Access Server is configured by default. OtherwiseAccess server couldn’t host the maximum number of slaves (7).Other possible combinations are:0 : Allow switch when calling, don’t request it when answering1 : Allow switch when calling, request it when answering (default)2 : Don’t allow switch when calling, request it when answeringIf you have problems with connecting to Access Server, it might bebecause your client device does not support the master/slave switch.In this case, set this setting to 0.6. Default PIN code []This PIN code used when establishing connections. Up to 16 characters aresignificant.If there is no default PIN code set, Access Server does not requirea PIN code when establishing connections.However, if there is no default PIN code set, but the other devicerequests a PIN code, "1234" is replied.7. Power save mode and parameters [4]The power save mode used by default for all connections. Possible settingsare:0 : Active.1 : Park: Round-robin.2 : Park: Idle.3 : Sniff: All4 : Sniff: Idle (default)."Active" means that no power saving is in use."Sniff: All" means that the connections are kept in sniff mode always.147
Appendix B. Setup Options"Sniff: Idle" means that a connection is switched to sniff mode afterit has not transmitted data for some time (2 seconds by default).When data transmission resumes, switch to active mode is made.Park modes are generally not useful. See User’s and Developer’s Guideand Bluetooth specification for more information.8. Use literal replies in SDP [Yes]If enabled, some SDP result codes will have literal values instead ofnumeric values.9. Optional command line parameters []Optional extra command line startup parameters for the iWRAP servers.10. Edit startup script [/etc/bluetooth.conf]Opens iWRAP configuration file (/etc/bluetooth.conf) for editing.You can append extra iWRAP commands to that file. iWRAP servers processthe file each time they start. See the User’s and Developer’s Guidefor iWRAP command reference.B.5.1. Bluetooth profilesSubmenu for the settings of all supported Bluetooth profiles.1. Enable lan access profile [No]Whether or not the LAN Access Profile is enabled.2. Enable PAN user profile [No]Whether or not the PAN User Profile is enabled.3. Enable PAN generic networking profile [No]Whether or not the PAN Generic Networking Profile is enabled.4. Enable PAN network access point profile [No]Whether or not the PAN Network Access Point Profile is enabled.5. Enable object push profile [Yes]Whether or not the Object Push Profile is enabled.6. Enable file transfer profile [Yes]Whether or not the File Transfer Profile is enabled.B.5.1.1. Lan access profile settingsSubmenu containing LAN Access Profile settings.1. Login name and password []The login name and password required from LAN access clients. Must be enteredas a single string, separated with a space. For example: guest buffyIf empty (default), no login is required.2. Service name (shown in SDP) [Lan Access]148
Appendix B. Setup OptionsThe name of the LAN Access Profile service shown in the Service Discovery.3. Defaultroute modification policy [0]How the LAN Access Profile should modify the defaultroute in routing tables:0: Do not alter defaultroute (default)1: When acting as a LAP client, set defaultroute according to the LAP server2: When acting as a LAP server, set defaultroute according to the LAP client3: Set defaultroute according to the LAP server/client connected4. First IP for LAP clients [192.168.160.0]This defines the C-class of IP addresses to be used in point-to-pointconnections between Access Server and LAP clients.Full C-class is required: use "x.y.z.0".B.5.1.2. PAN user profile settingsSubmenu containing Personal Area Network User Profile settings.1. Service name (shown in SDP) [PAN User]The name of the PAN User Profile service shown in the Service Discovery.2. Enable zeroconf when calling [No]Enable ZeroConf protocol for outgoing PANU connections.3. Enable zeroconf when answering [No]Enable ZeroConf protocol for incoming PANU connections.B.5.1.3. PAN generic networking profile settingsSubmenu containing Personal Area Network Generic Networking Profilesettings.1. Service name (shown in SDP) [Generic Networking]The name of the PAN Generic Networking Profile service shown inthe Service Discovery.2. Use dynamic network configuration for local IP address [No]Whether or not DHCP is used for configuring local IP Address. Enable only ifyou are connecting this PAN-GN to another PAN-GN that will provide the IPconfiguration.3. Local GN interface IP address [192.168.161.1]The IP address for the local GN interface.4. Local GN interface subnet mask [255.255.255.0]The netmask for the local GN interface.5. Start DHCP server for remote users [Yes]Whether or not this device should start DHCP for remote devices connectingto this PAN-GN. Disabled if "Use dynamic network configuration for local IPaddress" is used.6. First IP for lease block [192.168.161.2]149
Appendix B. Setup OptionsFirst IP address of the lease block.7. Last IP for lease block [192.168.161.254]Last IP address of the lease block.8. Subnet of lease block [255.255.255.0]Subnet mask of the lease block.9. Lease time [86400]Lease time in seconds.B.5.1.4. PAN network access point profile settingsSubmenu containing Personal Area Network Network Access Point Profilesettings.1. Service name (shown in SDP) [Network Access]The name of the Bluetooth PAN Network Access Point Profile serviceshown in the Service Discovery.B.5.1.5. Serial port profile settingsSubmenu containing the Bluetooth Serial Port Profile settings.The profile itself is enabled and disabled by switching "serialport"application "on" or "off" from the menu:Setup -> Applications -> Default bootup applications.1. Act as the calling device [No]Whether this device should act as the calling device (DevA) or the answeringdevice (DevB).2. BPS rate [115200]The bits-per-second rate of the connection. Possible values are:300, 1200, 2400, 4800, 9600, 19200, 38400, 57600, 115200, 230400, and 460800.3. Data bits [8]The number of data bits in the connection. Possible values are:5, 6, 7, and 8.4. Parity [0]The parity bit setting of the connection. Possible values are:0: No Parity (default)1: Odd Parity2: Even Parity5. Stop bits [1]The number of stop bits in the connection. Possible values are 1 and 2.6. Hardware flow control (RTS/CTS) [Yes]Whether or not the hardware flow control is used.7. Software flow control (XON/XOFF) [No]Whether or not the software flow control is used.150
Appendix B. Setup Options8. Bluetooth address of the remote device [00:07:80:80:bf:01]The Bluetooth address of the device to be contacted. If the local deviceis configured as DevA, this is the DevB it tries to connect.9. Service channel [2]In DevA (call) mode: The Bluetooth RFCOMM channel of the remote device.In DevB (answer) mode: The Bluetooth RFCOMM channel of the local device.10. Service name (shown in SDP) [Serial Port]The name of the Bluetooth Serial Port Profile service shown in the ServiceDiscovery.11. Optional command line parameters []Optional extra parameters for the Access Server Serial Port profileapplication. Currently the supported parameters are:--device dev Device, if not the user port (/dev/ttyS0 for CF Card)--msc Enables transmitting of DCD/DSR Modem Status Control signals.--nobuffer Discard data if no Bluetooth connection, do not buffer it.B.5.1.6. Object push profile settingsThis submenu contains Bluetooth Object Push Profile settings.1. Service name (shown in SDP) [Object Push]The name of the Object Push Profile service shown in the Service Discovery.B.5.1.7. File tranfer profile settingsThis submenu contains Bluetooth File Transfer Profile settings.1. Service name (shown in SDP) [File Transfer]The name of the File Transfer Profile shown in the Service Discovery.B.6. Advanced settingsSubmenu containing advanced settings of Access Server.1. System startup script [/etc/rc.d/rc.local]This is the last initialization script executed at system startup.By default, the script /etc/rc.d/rc.local just turns off all LEDs toindicate the startup has finished. If you want to initialize somethingautomatically at every boot, or start up your own applications,you should add the required commands to this file.Remember to start your programs to the background. Example:/usr/local/bin/myapp &If you do not start the programs to the backgroud, you will not ableto access the management console using a serial cable.2. Default user profile [/etc/profile]151
Appendix B. Setup OptionsEdit the file containing the default user profile settings.3. WWW passwords [/etc/httpd.conf]Access to WWW pages served by Access Server can be restricted using theconfiguration file "httpd.conf", editable from here.The file consists of lines in format "/dir:username:password". Thisspecifies that to view the WWW page at address "http://as-ip/dir", youmust enter username "username" and password "password".More than one username can be defined for the same "/dir"by adding multiple lines.By default, this file specifies that only user "root" with password"buffy" is allowed to access the WWW Setup.4. Setup access [/etc/setup.conf]The "/etc/setup.conf" file can be used to give different access rights todifferent users of the WWW Setup.The file consist of lines in following format:example.tag +user1 +user2 -user3 -user4This will allow (+) access to tag "example.tag" for "user1" and "user2"and denies (-) access from "user3" and "user4". You can find the tagsfrom the output ofSetup -> Advanced -> System Information -> Collect info for support requestFor example, the tag of this setting is advanced.setupconf. If youhave created another user "guest" in /etc/httpd.conf that can access"/setup", you can deny that user from changing the Setup access settingswith following line in this file:advanced.setupconf -guest5. Edit other configuration files []From this menu you can edit any files located in Access Server file system.You can for example create "/var/spool/cron/crontabs/root" file forconfiguring the cron daemon.6. Browse files []Browse files stored in Access Server.7. Find other Access Servers [/usr/sbin/finder]Find other Access Servers.8. Inquiry for Bluetooth devices [/usr/bin/btcli inquiry]Inquiry for other Bluetooth devices.9. Upload a software update [/tmp/obex]Upload a software update file (*.wpk).Access Server supports a special management packet format (wpk), which152
Appendix B. Setup Optionscan be used to update Access Server software components or to installcustom software and configuration files. Please consult User’s andDeveloper’s Guide for more information.B.6.1. System informationThis submenu contains tools to retrieve system status information.1. Hardware informationDisplays hardware and software identification information (output ofcommand "wrapid").2. List installed software components [/usr/bin/dpkg -l]Lists currenty installed software components and their version numbers.3. List running processes [/bin/ps ww]Lists running processes.4. List memory status [/usr/bin/free]Lists memory status.5. List free disk space [/bin/df -h]Lists free disk space.6. Show system log file [/var/log/messages]Shows system log file.7. Show system boot log file [/var/log/dmesg]Shows system boot log.8. Collect info for support request [/usr/sbin/supportinfo]This page contains collectively all the system status and configurationinformation.Include this information when sending a support request tosupport@bluegiga.comWARNING: All classified information, like passwords, should be automaticallyexcluded. It is still recommended to manually check that all such informationis really removed.B.6.2. Reboot system (confirm)Reboot Access Server. Confirmation will be asked.1. Reboot now! [/sbin/reboot]Reboot Access Server immediately!WARNING: There is no confirmation for this!B.7. Summary of Setup OptionsSecurity settingsRoot password [$1$rUj/KWS1$v3FZcBP.6HiN4f5PaATMq1]153
Appendix B. Setup OptionsiWRAP password [buffy]Do not require iWRAP password from local clients [Yes]Bluetooth PIN code []wpkgd autoinstall password []wpkgd hotplug password []Root user password for FTP [buffy]Allow anonymous FTP login [Yes]WWW passwords [/etc/httpd.conf]Generic settingsRoot password [$1$rUj/KWS1$v3FZcBP.6HiN4f5PaATMq1]Use local syslog service [Yes]IP address of the remote syslog server [192.168.42.1]Network settingsHostname of the unit [wrap]Domain of the unit [localdomain]Default interface settingsUse dynamic network configuration [Yes]IP address [192.168.42.3]Subnet mask [255.255.255.0]IP address of the default gateway [192.168.42.254]List of name server IPs [192.168.42.1 192.168.42.2]Enable Ethernet cable interface [Yes]Ethernet cable settingsAssign to default interface [Yes]Use dynamic network configuration [Yes]IP address [192.168.43.3]Subnet mask [255.255.255.0]Enable Wi-Fi interface [Yes]Wi-Fi settingsAct as a Wi-Fi Access Point [No]ESSID []Nickname []WEP encryption key []Extra commands for Access Point mode [/etc/sysconfig/ifup-wlan0]Assign to default interface [No]Use dynamic network configuration [Yes]IP address [192.168.44.3]Subnet mask [255.255.255.0]Enable GPRS interface [No]GPRS settingsDial on demand [Yes]SIM card PIN code []Username [blue]Password [giga]Internet APN [internet]Extra parameters for pppd []Time server (rdate) []Zeroconf interface [nap]ApplicationsDefault startup applications []154
Appendix B. Setup Optionswpkgd settingswpkgd’s autoinstall directory [/tmp/obex]Password for autoinstall packages []Delete processed autoinstall packages [Yes]Process hotplug packages [Yes]Password for hotplug packages []Delete processed hotplug packages [No]Extra parameters for wpkgd []FTP server settingsRoot user password [buffy]Root user directory [/]Root user instances [5]Allow anonymous login [Yes]Anonymous user password [*]Anonymous user directory [/tmp/obex]Anonymous user instances [5]Allow anonymous user to do everything [No]Allow anonymous user to download [Yes]Allow anonymous user to upload [No]Allow anonymous user to overwrite [No]Allow anonymous user to multiple login [No]Allow anonymous user to erase [No]Edit configuration file [/etc/ftpd.conf]ObexSender settingsBluetooth friendly name [W$S_$p]Delay between inquiries [10]Delay between reply scans [10]If previous was ok, timeout before sending again [36000]If previous was reject, timeout before trying again [86400]Delay between retrying call [120]Delay after scanning [5]Delay between multiple files [40]Minimum RSSI value before sending [-65]Logfile name [-]Log prefix [-]If sending was failure, log it too [Yes]Register to watchdog daemon [Yes]iWRAP password [-]Edit configuration file [/etc/obexsender.conf]Upload a new file [/usr/local/obexsender]List files [/usr/local/obexsender]View log [-]Delete log (confirm)Delete log now! [/bin/true]SMS gateway settingsModem device [/dev/ttyS0]Log file name [-]SMSC number [+358405202000]Edit configuration file [/etc/smsgw.conf]Bluetooth settingsiWRAP password [buffy]Do not require iWRAP password from local clients [Yes]155
Appendix B. Setup OptionsFriendly name [W$S_$p]Connectable and discoverable mode [3]Master/slave role switch policy [1]Default PIN code []Power save mode and parameters [4]Use literal replies in SDP [Yes]Optional command line parameters []Edit startup script [/etc/bluetooth.conf]Bluetooth profilesEnable lan access profile [No]Lan access profile settingsLogin name and password []Service name (shown in SDP) [Lan Access]Defaultroute modification policy [0]First IP for LAP clients [192.168.160.0]Enable PAN user profile [No]PAN user profile settingsService name (shown in SDP) [PAN User]Enable zeroconf when calling [No]Enable zeroconf when answering [No]Enable PAN generic networking profile [No]PAN generic networking profile settingsService name (shown in SDP) [Generic Networking]Use dynamic network configuration for local IP address [No]Local GN interface IP address [192.168.161.1]Local GN interface subnet mask [255.255.255.0]Start DHCP server for remote users [Yes]First IP for lease block [192.168.161.2]Last IP for lease block [192.168.161.254]Subnet of lease block [255.255.255.0]Lease time [86400]Enable PAN network access point profile [No]PAN network access point profile settingsService name (shown in SDP) [Network Access]Serial port profile settingsAct as the calling device [No]BPS rate [115200]Data bits [8]Parity [0]Stop bits [1]Hardware flow control (RTS/CTS) [Yes]Software flow control (XON/XOFF) [No]Bluetooth address of the remote device [00:07:80:80:bf:01]Service channel [2]Service name (shown in SDP) [Serial Port]Optional command line parameters []Enable object push profile [Yes]Object push profile settingsService name (shown in SDP) [Object Push]Enable file transfer profile [Yes]File tranfer profile settingsService name (shown in SDP) [File Transfer]156
Appendix B. Setup OptionsAdvanced settingsSystem startup script [/etc/rc.d/rc.local]Default user profile [/etc/profile]WWW passwords [/etc/httpd.conf]Setup access [/etc/setup.conf]Edit other configuration files []Browse files []Find other Access Servers [/usr/sbin/finder]Inquiry for Bluetooth devices [/usr/bin/btcli inquiry]Upload a software update [/tmp/obex]System informationHardware informationList installed software components [/usr/bin/dpkg -l]List running processes [/bin/ps ww]List memory status [/usr/bin/free]List free disk space [/bin/df -h]Show system log file [/var/log/messages]Show system boot log file [/var/log/dmesg]Collect info for support request [/usr/sbin/supportinfo]Reboot system (confirm)Reboot now! [/sbin/reboot]157
Appendix C. Open Source Software LicensesSome Access Server software components are licensed under the terms and conditions of one ormore open source licenses, listed in Table C-1 below.LicenseAppreviationDescription URLCMU/UCD Carnegie Mellon University & Regentsof the University of California’s BSDstyle license (in net-snmp)GPL1 GNU General Public License Version 1,February 1989http://www.fsf.org/licenses/info/GPLv1.htmlGPL2 GNU General Public License Version 2,June 1991http://www.opensource.org/licenses/gpl-license.phpGPL2+ GNU General Public License Version 2or laterhttp://www.opensource.org/licenses/gpl-license.phpLGPL2 GNU Library General Public LicenseVersion 2, June 1991http://www.gnu.org/copyleft/lgpl.htmlLGPL2.1 GNU Lesser General Public LicenseVersion 2.1, February 1999http://www.opensource.org/licenses/lgpl-license.phpBSD Revised BSD License (without theadvertising clause)http://www.opensource.org/licenses/bsd-license.phpBSDorig Original BSD License (with theadvertising clause)http://www.fsf.org/licenses/info/BSD_4Clause.htmlMIT MIT License (only one version exist,also known as X11 style license)MPL1.1 Mozilla Public License Version 1.1 http://www.mozilla.org/MPL/OpenSSL OpenSSL License (similar to BSDorig) http://www.openssl.org/source/license.htmlSSLeay SSLeay License (similar to BSDorig) http://www.openssl.org/source/license.htmlZLIB ZLIB License (only one version exist) http://www.gzip.org/zlib/zlib_license.htmlTable C-1. Open Source Licenses in Access Server Software ComponentsThe details of the open source software components and the license under which they aredistributed are listed below in Table C-2. Software components not listed are licensed underBluegiga’s License Agreement.Software Component Version License Source URLDas U-Boot 1.0.0 andgit-060720GPL2 http://sourceforge.net/projects/u-boot/The bootloader. Initialized system, holds system configuration, loads and launches the Linuxkernel.158
Appendix C. Open Source Software LicensesSoftware Component Version License Source URLKernelLinux kernel 2.6.17 GPL2 http://www.kernel.org/The Access Server kernel, responsible for resource allocation, low-level hardware interfaces,security etc.kernel at91 patches 2.6.17 GPL2 http://maxim.org.za/AT91RM9200/2.6/ARM-Linux patches for the Linux kernel.Userlandbash 2.05b GPL1 &GPL2http://www.gnu.org/software/bash/bash.htmlGNU Project’s Bourne Again SHell, interactive shell with Bourne shell syntax.binutils 2.15 GPL2 &LGPL2http://www.gnu.org/software/binutils/GNU Binutils, collection of binary tools, like GNU linker and GNU assembler.bridge-utils 0.9.6 GPL2 http://bridge.sourceforge.net/Linux Ethernet bridging utilities, needed to manage bridging for WRAP Bluetooth PANprofiles and WLAN Access Point functionality.busybox 1.2.1 GPL2+ http://www.busybox.net/Provides tens of general userland utilities.bzip2 1.0.3 GPLorig http://www.bzip.org/Compression library.crosstool 0.42 GPL2 http://kegel.com/crosstool/GCC build script.e3 2.6.2 GPL2 http://www.sax.de/~adlibit/Small text editor with different keybindings.ed 0.2 GPL2 http://www.gnu.org/software/ed/ed.htmlAn 8-bit clean, POSIX-compliant line editor.gcc 3.4.5 GPL2 &LGPL2http://gcc.gnu.org/GNU C/C++ compiler and related tools.gdb 6.4 GPL2 &LGPL2http://www.gnu.org/software/gdb/gdb.htmlGNU debugger.glibc 2.3.6 GPL2 &LGPL2.1http://www.gnu.org/software/libc/libc.htmlGNU C Library.hostap-utils 0.3.7 GPL2 http://hostap.epitest.fi/Utility programs for managing hostap-driver.iptables 1.3.4 GPL2 http://www.netfilter.org/159
Appendix C. Open Source Software LicensesSoftware Component Version License Source URLAdministration tool for the Linux kernel IP packet filter.make 3.81 GPL2 http://www.gnu.org/software/make/The Make.maradns 1.2.0.07.6 BSD http://www.maradns.org/DNS server.libpcap 0.9.4 BSD http://www.tcpdump.org/Provides portable framework for low-level network monitoring. Needed by tcpdump.lrzsz 0.12.20 GPL2 http://www.ohse.de/uwe/software/lrzsz.htmlProvides X/Y/Zmodem download/upload tools.ncurses 5.3 MIT http://www.gnu.org/software/ncurses/ncurses.htmlLibrary for displaying and updating text on text-only terminals.netkit-ftp 0.17 BSDorig ftp://ftp.uk.linux.org/pub/linux/Networking/netkit/FTP client application.net-snmp 5.2.rc4 CMU/USD& BSDhttp://www.net-snmp.org/Suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4and IPv6.ntpclient 2003_194 GPL2 http://doolittle.faludi.com/ntpclient/NTP (RFC-1305) client.openssl 0.9.8a OpenSSL& SSLeayhttp://www.openssl.org/Toolkit implementing SSL v2/v3, TLS v1 and general purpose cryptography library.openssh 4.5p1 BSD http://www.openssh.com/OpenSSH suite; server and client utilities.openvpn 2.0.5 GPL2 http://openvpn.net/An Open Source VPN daemon.pcmciautils 012 GPL2 http://kernel.org/pub/linux/utils/kernel/pcmcia/pcmcia.htmlA suite of userspace tools for PCMCIA support in the Linux 2.6 kernel.perl 5.8.8 GPL2 http://www.perl.org/A programming language.picocom 1.4 GPL2 http://efault.net/npat/hacks/picocom/Minimal dumb-terminal emulation program.ppp 2.4.3 BSD &BSDorig &GPL2 &ZLIBhttp://ppp.samba.org/160
Appendix C. Open Source Software LicensesSoftware Component Version License Source URLPoint-to-Point Protocol userland driver.ppp-dhcpc for pppd2.4.2GPL2 ben at netservers.co.ukDHCP plugin for PPP.readline 4.3 GPL2 http://cnswww.cns.cwru.edu/php/chet/readline/rltop.htmlGNU Readline library, providing set of functions for use by applications that allow users toedit command lines as they are typed in.strace 4.5.14 GPL2 http://www.liacs.nl/~wichert/strace/System call trace, i.e. a debugging tool.stupid-ftpd 1.4beta GPL2 http://stupid-ftpd.sourceforge.net/Simple FTP server.sysfsutils 2.0.0 GPL2 http://linux-diag.sourceforge.net/Sysfsutils.htmlThese are a set of utilites built upon sysfs, a new virtual filesystem in Linux kernel versions2.5+ that exposes a system’s device tree.termcap 2.0.8 GPL2 https://www.redhat.com/fedora/Basic system library needed to access the termcap database.tftp-hpa 0.42 BSD http://www.kernel.org/pub/software/network/tftp/TFTP client and server.tcpdump 3.9.4 BSD http://www.tcpdump.org/Utility to monitor network traffic.wireless_tools 28 GPL2 http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Tools.htmlPackage containing utilities to manage Wireless LAN specific parameters.zlib 1.2.3 ZLIB http://www.gzip.org/zlib/General purpose compression library.Table C-2. Access Server Open Source Software Components and Their Licences161
Appendix D. Supported HardwareConnector Type Card NoteCF GPRS Enfora GSM/GPRS CompactFlash Card (GSM 0110)Multislot class 8.CF GPRS Anycom GS-320 Tri-BandGPRS CF CardMultislot class 10.CF GPRS AudioVox RTM 8000 Multislot class 8, "same" HWas Fujitsu.CF GPRS Fujitsu Siemens Connect2Air3GSMMultislot class 8, "same" HWas Audiovox.CF GPS Pretec CompactGPS™CF WiFi Ambicom WirelessCompactFlash Card(WL1100C-CF)Supports both client andaccess point modesCF WiFi D-Link Air Wireless NetworkDCF-660WSeen shipping with 1.7.4firmware (can be access pointwithout upgrade)CF WiFi Linksys Instant WirelessWCF-12CF WiFi SMC Networks WLAN EZConnectDoes not support firmwareupgradeCF Memory Any vendor If you find a card that doesnot work, please contact<support@bluegiga.com>.USB EDGE/GPRS/GSMFalcom Samba 75 Seen as modem device/dev/ttyACM0USB Memory Any vendor If you find a dongle that doesnot work, please contact<support@bluegiga.com>.Table D-1. Supported Hardware by Access Server162

Navigation menu