Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
C ON T E N T S Preface xi Audience Purpose xii xii Organization xii Conventions xiii Related Publications xv Obtaining Documentation xv Cisco.
Contents CHAPTER 2 Preparing for Installation 2-1 Safety information 2-2 FCC Safety Compliance Statement Safety Guidelines 2-2 Warnings 2-2 Unpacking the Client Adapter Package Contents 2-3 System Requirements 2-3 2-4 Site Requirements 2-5 For Infrastructure Devices For Client Devices 2-5 CHAPTER 3 2-2 Installing the Client Adapter 2-5 3-1 Inserting a Client Adapter 3-2 Inserting a PC-Cardbus Card 3-2 Inserting a PCI Card 3-3 Changing the Bracket 3-3 Inserting the Card 3-4 Assembling the Ante
Contents CHAPTER 5 Configuring the Client Adapter Overview 5-1 5-2 Setting General Parameters 5-3 Setting Advanced Parameters 5-6 Setting Security Parameters 5-13 Overview of Security Features 5-14 Static WEP Keys 5-15 EAP (with Dynamic WEP Keys) 5-15 WPA and WPA2 5-18 CCKM Fast Secure Roaming 5-18 Reporting Access Points that Fail LEAP Authentication 5-19 Additional WEP Key Security Features 5-20 Synchronizing Security Features 5-20 Enabling Static WEP 5-24 Enabling WPA/WPA2 Passphrase 5-26 Enabl
Contents Using LEAP or EAP-FAST with an Automatically Prompted Login After Profile Activation or Card Insertion 6-5 After a Reboot or Logon 6-6 After Your EAP-FAST Password Expires 6-7 Using LEAP or EAP-FAST with a Manually Prompted Login After Profile Activation 6-8 After a Reboot, Logon, or Card Insertion 6-9 After Your EAP-FAST Password Expires 6-11 6-8 Using LEAP or EAP-FAST with a Saved Username and Password After Profile Activation or Card Insertion 6-12 After a Reboot or Logon 6-12 After Your EAP-
Contents Select Profile 8-8 Show Connection Status CHAPTER 9 Routine Procedures 8-9 9-1 Removing a Client Adapter 9-2 Removing a PC-Cardbus Card Removing a PCI Card 9-2 9-2 Client Adapter Software Procedures 9-3 Upgrading the Client Adapter Software 9-3 Uninstalling the Client Adapter Software 9-6 ADU Procedures 9-7 Opening ADU 9-7 Exiting ADU 9-7 Finding the Version of ADU 9-8 Viewing Client Adapter Information 9-8 Accessing Online Help 9-9 ASTU Procedures 9-9 Enabling or Disabling Your Client Ada
Contents APPENDIX A Technical Specifications APPENDIX B Translated Safety Warnings A-1 B-1 Explosive Device Proximity Warning Antenna Installation Warning Warning for Laptop Users APPENDIX B-2 B-3 B-4 Declarations of Conformity and Regulatory Information C C-1 Manufacturer’s Federal Communication Commission Declaration of Conformity Statement C-2 Department of Communications – Canada C-3 Canadian Compliance Statement C-3 European Community, Switzerland, Norway, Iceland, and Liechtenstein
Contents APPENDIX E Configuring the Client Adapter through the Windows XP Operating System E-1 Overview E-2 Overview of Security Features E-2 Static WEP Keys E-2 EAP (with Dynamic WEP Keys) E-3 WPA E-4 Configuring the Client Adapter E-5 Enabling EAP-TLS Authentication E-10 Enabling PEAP Authentication E-13 Enabling PEAP (EAP-MSCHAP V2) E-14 Enabling PEAP (EAP-GTC) E-16 APPENDIX F Associating to an Access Point Using Windows XP E-18 Viewing the Current Status of Your Client Adapter E-18 Performin
Contents Cisco Aironet 802.
Preface The preface provides an overview of the Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide, references related publications, and explains how to obtain other documentation and technical assistance, if necessary.
Preface Audience Audience This publication is for the person responsible for installing, configuring, and maintaining a Cisco Aironet IEEE 802.11a/b/g Wireless LAN Client Adapter (CB21AG or PI21AG) on a computer running the Microsoft Windows 2000 or XP operating system. This person should be familiar with computing devices and with network terms and concepts. Note Windows 2000 and XP are the only supported operating systems.
Preface Conventions • Appendix A, “Technical Specifications,” lists the physical, radio, power, and regulatory specifications for the client adapters. • Appendix B, “Translated Safety Warnings,” provides translations of client adapter safety warnings in nine languages. • Appendix C, “Declarations of Conformity and Regulatory Information,” provides declarations of conformity and regulatory information for the client adapters.
Preface Conventions Varoitus Tämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa ruumiinvammaan. Ennen kuin työskentelet minkään laitteiston parissa, ota selvää sähkökytkentöihin liittyvistä vaaroista ja tavanomaisista onnettomuuksien ehkäisykeinoista. (Tässä julkaisussa esiintyvien varoitusten käännökset löydät liitteestä "Translated Safety Warnings" (käännetyt turvallisuutta koskevat varoitukset).) Attention Ce symbole d’avertissement indique un danger.
Preface Related Publications Related Publications For more information about Cisco Aironet CB21AG and PI21AG Wireless LAN Client Adapters for Windows, refer to the following publication: • Release Notes for Cisco Aironet 802.11a/b/g Client Adapters (CB21AG and PI21AG) Install Wizard For more information about related Cisco Aironet products, refer to the publications for your infrastructure device. You can find Cisco Aironet technical documentation at this URL: http://www.cisco.
Preface Cisco Product Security Overview Ordering Documentation You can find instructions for ordering documentation at this URL: http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm You can order Cisco documentation in these ways: • Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Ordering tool: http://www.cisco.com/en/US/partner/ordering/ • Nonregistered Cisco.
Preface Obtaining Technical Assistance Reporting Security Problems in Cisco Products Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all vulnerabilities quickly. If you think that you might have identified a vulnerability in a Cisco product, contact PSIRT: Tip • Emergencies — security-alert@cisco.com • Nonemergencies — psirt@cisco.
Preface Obtaining Technical Assistance Note Use the Cisco Product Identification (CPI) tool to locate your product serial number before submitting a web or phone request for service. You can access the CPI tool from the Cisco Technical Support Website by clicking the Tools & Resources link under Documentation & Tools. Choose Cisco Product Identification Tool from the Alphabetical Index drop-down list, or click the Cisco Product Identification Tool link under Alerts & RMAs.
Preface Obtaining Additional Publications and Information Obtaining Additional Publications and Information Information about Cisco products, technologies, and network solutions is available from various online and printed sources. • Cisco Marketplace provides a variety of Cisco books, reference guides, and logo merchandise. Visit Cisco Marketplace, the company store, at this URL: http://www.cisco.
Preface Obtaining Additional Publications and Information Cisco Aironet 802.
C H A P T E R 1 Product Overview This chapter describes the Cisco Aironet CB21AG and PI21AG client adapters and illustrates their role in a wireless network. The following topics are covered in this chapter: • Introduction to the Client Adapters, page 1-2 • Hardware Components, page 1-3 • Software Components, page 1-4 • Network Configurations Using Client Adapters, page 1-5 Cisco Aironet 802.
Chapter 1 Product Overview Introduction to the Client Adapters Introduction to the Client Adapters The Cisco Aironet IEEE 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) are radio modules that provide wireless data communications among fixed, portable, and mobile devices within both wireless and wired network infrastructures. The client adapters are fully compatible when used in devices supporting “plug-and-play” (PnP) technology.
Chapter 1 Product Overview Hardware Components Hardware Components The client adapters have three major hardware components: a radio, a radio antenna, and two LEDs. Radio The client adapters contain a dual-band radio that is both IEEE 802.11a and 802.11b/g compliant. The radio uses both direct-sequence spread spectrum (DSSS) technology and orthogonal frequency division multiplexing (OFDM) technology for client applications in the 2.
Chapter 1 Product Overview Software Components Software Components The client adapters have two major software components: a driver and client utilities. These components are installed together by running a single executable Install Wizard file that is available from Cisco.com. This file can be run on Windows 2000 or XP and can be used only with CB21AG and PI21AG client adapters. Note Chapter 3 provides instructions on using the Install Wizard to install these software components.
Chapter 1 Product Overview Network Configurations Using Client Adapters Network Configurations Using Client Adapters Client adapters can be used in a variety of network configurations. In some configurations, access points provide connections to your network or act as repeaters to increase wireless communication range. The maximum communication range is based on how you configure your wireless network.
Chapter 1 Product Overview Network Configurations Using Client Adapters Wireless Infrastructure with Workstations Accessing a Wired LAN A microcellular network can be created by placing two or more access points on a LAN. Figure 1-2 shows a microcellular network with workstations accessing a wired LAN through several access points.
C H A P T E R 2 Preparing for Installation This chapter provides information that you need to know before installing a client adapter. The following topics are covered in this chapter: • Safety information, page 2-2 • Unpacking the Client Adapter, page 2-3 • System Requirements, page 2-4 • Site Requirements, page 2-5 Cisco Aironet 802.
Chapter 2 Preparing for Installation Safety information Safety information Follow the guidelines in this section to ensure proper operation and safe use of the client adapter. FCC Safety Compliance Statement The FCC, with its action in ET Docket 96-8, has adopted a safety standard for human exposure to RF electromagnetic energy emitted by FCC-certified equipment.
Chapter 2 Preparing for Installation Unpacking the Client Adapter Warning This device has been tested and complies with FCC RF Exposure (SAR) limits in typical laptop computer configurations and this device can be used in desktop or laptop computers with side mounted PC Card slots that can provide at least 0.394 in (1 cm) separation distance from the antenna to the body of the user or a nearby person. Thin laptop computers may need special attention to maintain antenna spacing while operating.
Chapter 2 Preparing for Installation System Requirements System Requirements In addition to the items shipped with the client adapter, you also need the following items in order to install and use the adapter: • One of the following computing devices running Windows 2000 or XP: – Laptop or notebook computer equipped with a 32-bit Cardbus slot – Desktop personal computer equipped with an empty PCI expansion slot Note Cisco recommends a 300-MHz (or greater) processor.
Chapter 2 Preparing for Installation Site Requirements Site Requirements This section discusses the site requirements for both infrastructure and client devices. For Infrastructure Devices Because of differences in component configuration, placement, and physical environment, every network application is a unique installation.
Chapter 2 Preparing for Installation Site Requirements Cisco Aironet 802.
C H A P T E R 3 Installing the Client Adapter This chapter provides instructions for installing the client adapter. The following topics are covered in this chapter: • Inserting a Client Adapter, page 3-2 • Installing the Client Adapter Software, page 3-9 • Installing a Microsoft Hot Fix for Group Policy Delay, page 3-20 Cisco Aironet 802.
Chapter 3 Installing the Client Adapter Inserting a Client Adapter Inserting a Client Adapter This section provides instructions for inserting a PC-Cardbus card or PCI card into your computer. Caution These procedures and the physical connections they describe apply generally to conventional Cardbus slots and PCI expansion slots. In cases of custom or nonconventional equipment, be alert to possible differences in Cardbus slot and PCI expansion slot configurations.
Chapter 3 Installing the Client Adapter Inserting a Client Adapter Step 4 If the Found New Hardware Wizard window appears, click Cancel. If you do not click Cancel, the wizard will attempt to install software for the client adapter but will be unable to find it. Note Step 5 Go to the “Installing the Client Adapter Software” section on page 3-9.
Chapter 3 Installing the Client Adapter Inserting a Client Adapter Step 2 Slide the bracket away from the card; then tilt the bracket to free the antenna cable. Caution Do not pull on the antenna cable or detach it from the PCI card. The antenna is meant to be permanently attached to the card. Step 3 Hold the low-profile bracket to the card so that the LEDs slip through their corresponding holes on the bracket.
Chapter 3 Installing the Client Adapter Inserting a Client Adapter Figure 3-3 STATUS ACTIVITY 2 Inserting a PCI Card into a PC 3 1 95582 STATUS ACTIVITY 1 Antenna cable 2 LEDs 3 Card edge connector Step 6 Tilt the card to enable the LEDs to slip through the opening in the CPU back panel. See the enlarged view in Figure 3-3. Step 7 Press the card into the empty slot until its connector is firmly seated.
Chapter 3 Installing the Client Adapter Inserting a Client Adapter Figure 3-4 Inserting the Antenna into Its Base 1 2 95584 3 1 Antenna 2 Notch 3 Antenna base Step 3 Press the antenna cable into the receptacle on the top of the base as shown in Figure 3-4. Step 4 Press the antenna straight down into the receptacle until it clicks into place.
Chapter 3 Installing the Client Adapter Inserting a Client Adapter Follow the steps below to position the PCI card’s antenna on a flat horizontal surface or to mount it to a wall. Step 1 Step 2 Perform one of the following: • If you want to use the antenna on a flat horizontal surface, position the antenna so it is pointing straight up. Then go to Step 7. • If you want to mount the antenna to a wall, go to Step 2. Drill two holes in the wall that are 1.09 in. (2.8 cm) apart.
Chapter 3 Installing the Client Adapter Inserting a Client Adapter Mounting the Antenna 95595 Figure 3-6 Step 6 The antenna rotates 90 degrees from its base. For optimal reception, position the antenna so it is pointing straight up (see Figure 3-7). Rotating the Antenna 95596 Figure 3-7 Step 7 Boot up your PC. The green LED lights when the card is inserted properly. Step 8 If the Found New Hardware Wizard window appears, click Cancel.
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Installing the Client Adapter Software This section describes how to install Cisco Aironet CB21AG or PI21AG client adapter driver and utilities from a single executable file named WinClient-802.11a-b-g-Ins-Wizard-vx.exe, where x represents the release number. Follow these steps to install these client adapter software components on a computer running Windows 2000 or XP.
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Step 8 Click the file again to download it. Step 9 Save the file to your computer’s hard drive. Step 10 Use Windows Explorer to find the file. Step 11 Double-click the file. The “Starting InstallShield Wizard” message appears followed by the Preparing Setup window (see Figure 3-8) and the Cisco Aironet Installation Program window (see Figure 3-9). Figure 3-8 Preparing Setup Window Cisco Aironet 802.
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Figure 3-9 Step 12 Cisco Aironet Installation Program Window Click Next. The Setup Type window appears (see Figure 3-10). Cisco Aironet 802.
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Figure 3-10 Step 13 Choose one of the following options: Note Step 14 Setup Type Window To ensure compatibility among software components, Cisco recommends that you install the client utilities and driver. • Install Client Utilities and Driver—Installs the client adapter driver and client utilities. • Install Driver Only—Installs only the client adapter driver. If you choose this option, click Next and go to Step 26.
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Figure 3-11 Step 15 Check the Install Cisco Aironet Site Survey Utility check box if you want to install a utility that helps you to determine the best placement of infrastructure devices within your wireless network. Click Next. Note Step 16 Install Cisco Aironet Site Survey Utility Window The site survey utility is a stand-alone application, separate from ADU, that runs from an executable file.
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Figure 3-12 Step 17 Perform one of the following: • If you chose the first option in Step 13, click Next to install the client utility files in the C:\Program Files\Cisco Aironet directory. Note • If you want to install the client utilities in a different directory, click Browse, choose a different directory, click OK, and click Next.
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Figure 3-13 Step 19 Click Next to add program icons to the Cisco Aironet program folder. Note Step 20 Select Program Folder Window If you want to specify a different program folder, choose a folder from the Existing Folders list or type a new folder name in the Program Folder field and click Next. If your computer is running Windows 2000, go to Step 26.
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Figure 3-14 Step 21 IMPORTANT: Please Read! Window Read the information displayed and click Next. The Choose Configuration Tool window appears (see Figure 3-15). Cisco Aironet 802.
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Figure 3-15 Step 22 Choose Configuration Tool Window Choose one of the following options: • Cisco Aironet Desktop Utility (ADU)—Enables you to configure your client adapter using ADU. • Third-Party Tool—Enables you to configure your client adapter using a third-party tool such as the Microsoft Wireless Configuration Manager in Windows XP. Table 3-1 compares Windows XP and ADU client adapter features.
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Table 3-1 Comparison of Windows XP and ADU Client Adapter Features Feature Windows XP ADU Static WEP Yes Yes LEAP or EAP-FAST authentication with dynamic WEP No Yes EAP-TLS or PEAP authentication Yes Yes Limited Extensive No Yes Security Status and statistics Status window Statistics window (transmit & receive) Note If you choose Cisco Aironet Desktop Utility (ADU) above, the Microsoft Wireless Configurati
Chapter 3 Installing the Client Adapter Installing the Client Adapter Software Step 25 Check the Enable Cisco Aironet System Tray Utility (ASTU) check box if you want to be able to use ASTU even though you have chosen to configure your client adapter through a third-party tool instead of ADU and click Next. Step 26 When prompted to insert your client adapter, click OK. The Setup Status window appears (see Figure 3-17).
Chapter 3 Installing the Client Adapter Installing a Microsoft Hot Fix for Group Policy Delay e. Choose Use the following IP address and enter the IP address, subnet mask, and default gateway address of your computer (which can be obtained from your system administrator). f. • Click OK to close each open window. Windows XP a. Double-click My Computer, Control Panel, and Network Connections. b. Right-click Wireless Network Connection x (where x represents the number of the connection). c.
Chapter 3 Installing the Client Adapter Installing a Microsoft Hot Fix for Group Policy Delay Note Step 1 You must be a registered Cisco customer and log into Cisco.com in order to download the hot fix. If you are unable to access the hot fix from Cisco.com, contact Microsoft Support to obtain it. The Windows 2000 support page provides the contact information: http://support.microsoft.com/oas/default.aspx?&c1=508&gprid=7274& Use your computer’s web browser to access the following URL: http://www.cisco.
Chapter 3 Installing the Client Adapter Installing a Microsoft Hot Fix for Group Policy Delay Cisco Aironet 802.
C H A P T E R 4 Using the Profile Manager This chapter explains how to use the ADU profile manager feature to create and manage profiles for your client adapter.
Chapter 4 Using the Profile Manager Overview of Profile Manager Overview of Profile Manager The ADU profile manager feature enables you to create and manage up to 16 profiles (or saved configurations) for your client adapter. These profiles enable you to use your client adapter in different locations, each of which requires different configuration settings. For example, you may want to set up profiles for using your client adapter at the office, at home, and in public areas such as airports.
Chapter 4 Using the Profile Manager Opening Profile Manager Table 4-1 provides a description of the status fields on the Cisco Aironet Desktop Utility (Profile Management) window. Table 4-1 Description of Status Fields on Profile Management Window Field Description Network Type The type of network that is configured for the selected profile. Value: Infrastructure or Ad Hoc Note Security Mode Refer to the Network Type parameter in Table 5-3 for instructions on setting the network type.
Chapter 4 Using the Profile Manager Creating a New Profile Creating a New Profile Follow the steps below to create a new profile. Step 1 Perform one of the following: • If you want to create a new profile from scratch, click New on the Cisco Aironet Desktop Utility (Profile Management) window. Then go to Step 4. • If you want to find an available network and create a profile based on it, click Scan on the Cisco Aironet Desktop Utility (Profile Management) window.
Chapter 4 Using the Profile Manager Creating a New Profile Table 4-2 Description of Fields on Available Infrastructure and Ad Hoc Networks Window Field Description Network Name (SSID) The service set identifier (SSID) indicates the name of an available wireless network. The icons to the left of the SSIDs provide information on network type and link status. Icon Description An available infrastructure network. The infrastructure network to which your client adapter is currently associated.
Chapter 4 Using the Profile Manager Creating a New Profile Figure 4-3 Note Step 5 If you are creating a profile after scanning for an available network, the SSID of the network appears in the SSID1 field. Perform one of the following: • If you want this profile to use the default values, click OK. The profile is added to the profiles list on the Cisco Aironet Desktop Utility (Profile Management) window.
Chapter 4 Using the Profile Manager Including a Profile in Auto Profile Selection Including a Profile in Auto Profile Selection After you have created profiles for your client adapter, you can choose to include them in the profile manager’s auto profile selection feature. Then when auto profile selection is enabled, the client adapter automatically selects a profile from the list of profiles that were included in auto profile selection and uses it to establish a connection to the network.
Chapter 4 Using the Profile Manager Including a Profile in Auto Profile Selection Step 3 The profiles that you created are listed in the Available Profiles box. Highlight each one that you want to include in auto profile selection and click the Add button. The profiles appear in the Auto Selected Profiles box. The following rules apply to auto profile selection: • You must include at least two profiles in the Auto Selected Profiles box.
Chapter 4 Using the Profile Manager Selecting the Active Profile Selecting the Active Profile Follow the steps below to specify the profile that the client adapter is to use. Note You can use ASTU instead of the ADU Profile Manager to select the active profile. Refer to Chapter 8 for instructions. Step 1 Open ADU and click the Profile Management tab. The Cisco Aironet Desktop Utility (Profile Management) window appears (see Figure 4-1).
Chapter 4 Using the Profile Manager Modifying a Profile Modifying a Profile Follow the steps in the appropriate section below to edit or delete an existing profile. Editing a Profile Step 1 Open ADU and click the Profile Management tab. The Cisco Aironet Desktop Utility (Profile Management) window appears (see Figure 4-1). Step 2 In the profiles list, select the profile that you want to edit. Step 3 Click Modify.
Chapter 4 Using the Profile Manager Importing and Exporting Profiles Importing a Profile Step 1 If the profile that you want to import is on a floppy disk, insert the disk into your computer’s floppy drive. Step 2 Open ADU and click the Profile Management tab. The Cisco Aironet Desktop Utility (Profile Management) window appears (see Figure 4-1). Step 3 Click Import. The Import Profile window appears (see Figure 4-5).
Chapter 4 Using the Profile Manager Importing and Exporting Profiles Figure 4-6 Export Profile Window The profile name appears in the File name box . Step 5 Choose a directory (such as your computer’s floppy disk drive or a location on the network) from the Save in drop-down box. Note The default location is the directory where ADU is installed (such as C:\Program Files\Cisco Aironet). Step 6 Click Save. The profile is exported to the specified location.
C H A P T E R 5 Configuring the Client Adapter This chapter explains how to set the configuration parameters for a specific profile. The following topics are covered in this chapter: • Overview, page 5-2 • Setting General Parameters, page 5-3 • Setting Advanced Parameters, page 5-6 • Setting Security Parameters, page 5-13 • Enabling Wi-Fi Multimedia, page 5-51 • Setting Roaming Parameters in the Windows Control Panel, page 5-55 Cisco Aironet 802.
Chapter 5 Configuring the Client Adapter Overview Overview When you choose to create a new profile or modify an existing profile on the Cisco Aironet Desktop Utility (Profile Management) window, the Profile Management windows appear. These windows enable you to set the configuration parameters for that profile. Note If you do not change any of the configuration parameters for a newly created profile, the default values are used.
Chapter 5 Configuring the Client Adapter Setting General Parameters Setting General Parameters The Profile Management (General) window (see Figure 5-1) enables you to set parameters that prepare the client adapter for use in a wireless network. This window appears after you click New or Modify on the Cisco Aironet Desktop Utility (Profile Management) window. Figure 5-1 Profile Management (General) Window Table 5-2 lists and describes the client adapter’s general parameters.
Chapter 5 Configuring the Client Adapter Setting General Parameters Table 5-2 Profile Management General Parameters Parameter Description Profile Name The name assigned to the configuration profile. Range: You can key in up to 32 ASCII characters. Client Name A logical name for your workstation. It enables an administrator to ascertain which devices are connected to the access point without having to memorize every MAC address. This name is included in the access point’s list of connected devices.
Chapter 5 Configuring the Client Adapter Setting General Parameters Table 5-2 Profile Management General Parameters (continued) Parameter Description SSID2 An optional SSID that identifies a second distinct network and enables the client adapter to roam to that network without having to be reconfigured. Range: You can key in up to 32 ASCII characters (case sensitive). Default: A blank field SSID3 Note If a profile specifies more than one SSID, it cannot be included in auto profile selection.
Chapter 5 Configuring the Client Adapter Setting Advanced Parameters Setting Advanced Parameters The Profile Management (Advanced) window (see Figure 5-2) enables you to set parameters that control how the client adapter operates within an infrastructure or ad hoc network. To open this window, click the Advanced tab from any Profile Management window. Figure 5-2 Profile Management (Advanced) Window Table 5-3 lists and describes the client adapter’s advanced parameters.
Chapter 5 Configuring the Client Adapter Setting Advanced Parameters Table 5-3 Profile Management Advanced Parameters Parameter Description Transmit Power Level Specifies the preferred power level at which your client adapter transmits. Although the adapter supports up to 100 mW, the transmit power level that is actually used is limited to the maximum value allowed by your country’s regulatory agency (FCC in the U.S., DOC in Canada, ETSI in Europe, TELEC in Japan, etc.).
Chapter 5 Configuring the Client Adapter Setting Advanced Parameters Table 5-3 Profile Management Advanced Parameters (continued) Parameter Description Power Save Mode Sets your client adapter to its optimum power consumption setting.
Chapter 5 Configuring the Client Adapter Setting Advanced Parameters Table 5-3 Profile Management Advanced Parameters (continued) Parameter Description Network Type Specifies the type of network in which your client adapter is installed. Options: Infrastructure or Ad Hoc Default: Infrastructure 802.11b Preamble Network Type Description Ad Hoc Often referred to as peer to peer.
Chapter 5 Configuring the Client Adapter Setting Advanced Parameters Table 5-3 Profile Management Advanced Parameters (continued) Parameter Description Wireless Mode Specifies the frequency and rate at which your client adapter should transmit packets to or receive packets from access points. Options: 5 GHz 54 Mbps, 2.4 GHz 54 Mbps, and 2.
Chapter 5 Configuring the Client Adapter Setting Advanced Parameters Table 5-3 Profile Management Advanced Parameters (continued) Parameter Description Channel Specifies the channel that your client adapter uses for communications in a 2.4-GHz ad hoc network. The available channels conform to the IEEE 802.11 Standard for your regulatory domain. The channel of the client adapter must be set to match the channel used by the other clients in the wireless network.
Chapter 5 Configuring the Client Adapter Setting Advanced Parameters Table 5-3 Profile Management Advanced Parameters (continued) Parameter Description 802.11 Authentication Mode Specifies how your client adapter attempts to authenticate to an access point. Open and shared authentication do not rely on a RADIUS server on your network. Options: Auto, Open, or Shared Default: Open 802.
Chapter 5 Configuring the Client Adapter Setting Security Parameters If this profile is configured for use in an infrastructure network and you want to specify up to four access points to which the client adapter should attempt to associate, click Preferred APs. The Preferred Access Points window appears (see Figure 5-3).
Chapter 5 Configuring the Client Adapter Setting Security Parameters Figure 5-4 Profile Management (Security) Window This window is different from the other Profile Management windows in that it includes many security features, each of which involves a number of steps. In addition, the security features themselves are complex and need to be understood before they are implemented. Therefore, this section provides an overview of the security features as well as procedures for enabling them.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Static WEP Keys Each device (or profile) within your wireless network can be assigned up to four static WEP keys. If a device receives a packet that is not encrypted with the appropriate key (as the WEP keys of all devices that are to communicate with each other must match), the device discards the packet and never delivers it to the intended receiver.
Chapter 5 Configuring the Client Adapter Setting Security Parameters The client adapter uses the username, password, and PAC to perform mutual authentication with the RADIUS server through the access point. The username and password need to be re-entered each time the client adapter is inserted or the Windows device is rebooted unless you configure your adapter to use saved EAP-FAST credentials. PACs are created by Cisco Secure ACS and are identified by an ID.
Chapter 5 Configuring the Client Adapter Setting Security Parameters • PEAP (EAP-GTC)—This PEAP authentication type is designed to support One-Time Password (OTP), Windows NT or 2000 domain, and LDAP user databases over a wireless LAN. It is based on EAP-TLS authentication but uses a password instead of a client certificate for authentication. PEAP (EAP-GTC) uses a dynamic session-based WEP key derived from the client adapter and RADIUS server to encrypt data.
Chapter 5 Configuring the Client Adapter Setting Security Parameters WPA and WPA2 Wi-Fi Protected Access (WPA) and WPA2 are standards-based security solutions from the Wi-Fi Alliance that provide data protection and access control for wireless LAN systems. WPA is compatible with the IEEE 802.11i standard but was implemented prior to the standard’s ratification; WPA2 is the Wi-Fi Alliance’s implementation of the ratified IEEE 802.11i standard.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Note If you want to enable CCKM fast secure roaming on the client adapter, you must choose the WPA/WPA2/CCKM security option on the Profile Management (Security) window, regardless of whether you want the adapter to use WPA or WPA2. The configuration of the access point to which your client adapter associates determines whether CCKM will be used with 802.1x, WPA, or WPA2. Note Access points must use Cisco IOS Release 12.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Additional WEP Key Security Features The three security features discussed in this section (MIC, TKIP, and broadcast key rotation) are designed to prevent sophisticated attacks on your wireless network’s WEP keys. These features do not need to be enabled on the client adapter; they are supported automatically in the client adapter software. However, they must be enabled on the access point.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Table 5-4 Client and Access Point Security Settings (continued) Security Feature Client Setting Access Point Setting WPA or WPA2 passphrase (or WPA or WPA2 pre-shared key) Choose WPA/WPA2 Passphrase and enter the passphrase Choose a cipher suite, enable Open Authentication and WPA for the SSID, and enter a WPA pre-shared key Note To allow both WPA and non-WPA clients to use the SSID, enable optional WPA.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Table 5-4 Client and Access Point Security Settings (continued) Security Feature Client Setting Access Point Setting EAP-TLS authentication If using ADU to configure card Choose 802.1x and EAP-TLS; then Set up and enable WEP and enable set EAP-TLS settings Open with EAP Authentication for the SSID If using Windows XP to configure card Choose Enable network access control using IEEE 802.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Table 5-4 Client and Access Point Security Settings (continued) Security Feature Client Setting Access Point Setting PEAP authentication with WPA or WPA2 If using ADU to configure card Choose WPA/WPA2/CCKM and PEAP (EAP-GTC) or PEAP (EAP-MSCHAP V2); then set PEAP settings For WPA, choose a cipher suite that includes TKIP; then enable WPA and Open with EAP Authentication for the SSID For WPA2, choose a cipher suite that includes AE
Chapter 5 Configuring the Client Adapter Setting Security Parameters Table 5-4 Client and Access Point Security Settings (continued) Security Feature Client Setting Access Point Setting TKIP No settings required; automatically Set up and enable WEP, set TKIP to enabled Cisco or check the Enable Per Packet Keying check box, and set Use Aironet Extensions to Yes Broadcast key rotation Enable LEAP, EAP-FAST, EAP-TLS, PEAP (EAP-GTC), or PEAP (EAP-MSCHAP V2) Set up and enable WEP and set Broadcast WE
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 3 Choose one of the following WEP key entry methods: • Hexadecimal (0-9, A-F)—Specifies that the WEP key will be entered in hexadecimal characters, which include 0-9, A-F, and a-f. • ASCII Text (all keyboard characters)—Specifies that the WEP key will be entered in ASCII text, which includes alpha characters, numbers, and punctuation marks.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 8 Perform one of the following to set the Allow Association to Mixed Cells parameter, which indicates whether the client adapter can associate to an access point that allows both WEP and non-WEP associations: • Check the Allow Association to Mixed Cells check box if the access point to which the client adapter is to associate (or the VLAN to which the client will be assigned) has WEP set to Optional.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 3 Obtain the WPA/WPA2 passphrase for the access point (in an infrastructure network) or other clients (in an ad hoc network) from your system administrator and enter it in the WPA/WPA2 passphrase field. Follow the guidelines below to enter a passphrase: • WPA/WPA2 passphrases must contain 8 to 63 ASCII text characters or 64 hexadecimal characters.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Follow the steps below to enable LEAP authentication for this profile. Step 1 Step 2 Perform one of the following on the Profile Management (Security) window: • If you want to enable LEAP without WPA or WPA2, choose 802.1x under Set Security Options and LEAP in the 802.1x EAP Type drop-down box.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 3 Step 4 Choose one of the following LEAP username and password setting options: • Use Temporary User Name and Password—Requires you to enter the LEAP username and password each time the computer reboots in order to authenticate and gain access to the network. • Use Saved User Name and Password—Does not require you to enter a LEAP username and password each time the computer reboots.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 9 Step 10 Perform one of the following to set the Allow Association to Mixed Cells parameter, which indicates whether the client adapter can associate to an access point that allows both WEP and non-WEP associations: • Check the Allow Association to Mixed Cells check box if the access point to which the client adapter is to associate (or the VLAN to which the client will be assigned) has WEP set to Optional.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Enabling EAP-FAST Before you can enable EAP-FAST authentication, your network devices must meet the following requirements: • To use EAP-FAST authentication with WPA2, client adapters must use the software included in Install Wizard 2.0 or later. • Access points to which your client adapter may attempt to authenticate must use the following firmware versions or later: 11.23T (340 and 350 series access points), 11.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Figure 5-8 Step 3 EAP-FAST Settings Window Choose one of the following EAP-FAST username and password setting options: • Use Temporary User Name and Password—Requires you to enter the EAP-FAST username and password each time the computer reboots in order to authenticate and gain access to the network. • Use Saved User Name and Password—Does not require you to enter an EAP-FAST username and password each time the computer reboots.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 4 Perform one of the following: • If you chose Use Temporary User Name and Password in Step 3, choose one of the following options: – Use Windows User Name and Password—Causes your Windows username and password to also serve as your EAP-FAST username and password, giving you only one set of credentials to remember. After you log in, the authentication process begins automatically. This option is the default setting.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 9 Note LDAP user databases support only manual PAC provisioning while Cisco Secure ACS internal, Cisco Secure ODBC, and Windows NT/2000/2003 domain user databases support both automatic and manual PAC provisioning. Note Provisioning occurs only upon initial negotiation of the PAC or upon PAC expiration. After the PAC is provisioned, it serves as the per-user key by which authentication transactions are secured.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Figure 5-9 b. c. Select EAP-FAST PAC Window Choose one of these PAC store options to determine where the imported PAC file will be stored and to whom it will be accessible: • Global—PACs that are stored in the global PAC store can be accessed and used by any user at any logon stage.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Figure 5-10 Import EAP-FAST PAC File Window d. Find the location of the PAC file in the Look in box. The default location is C:\Program Files\Cisco Aironet. e. Click the PAC file (*.pac) so that it appears in the File name box at the bottom of the window. Note The filename and extension of a PAC file is determined by the PAC authority that issues it, but the standard file extension is pac. f. Click Open. g.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Note Step 11 h. If you try to import a PAC file with the same PAC ID as a previously imported PAC file, you are asked if you want to update the existing PAC. If you click Yes, the existing PAC is replaced by the new one from the imported file. i. If the PAC file was imported successfully, the following message appears: “EAP-FAST PAC file was imported and ready for use.” Click OK to return to the Select EAP-FAST PAC window. j.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 13 If you want to change the value of the Group Policy Delay parameter, enter a new value or use the up and down arrows to select a value between 0 and 65535 seconds. (Microsoft supports only values between 30 and 600 seconds. The default value is 60 seconds.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Enabling EAP-TLS or PEAP Before you can enable EAP-TLS or PEAP authentication, your network devices must meet the following requirements: • You must have a valid Windows username and password, and the password cannot be blank. • The appropriate certificates must be installed on your computer. EAP-TLS requires both a Certificate Authority (CA) certificate and a user certificate while PEAP requires only a CA certificate.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Enabling EAP-TLS Follow the steps below to enable EAP-TLS authentication for this profile. Step 1 Step 2 Perform one of the following on the Profile Management (Security) window: • If you want to enable EAP-TLS without WPA or WPA2, choose 802.1x under Set Security Options and EAP-TLS in the 802.1x EAP Type drop-down box.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 3 Check the Use Machine Information For Domain Logon check box if you want the client to attempt to log into a domain using machine authentication with a machine certificate and machine credentials rather than user authentication. Doing so enables your computer to connect to the network prior to user logon. The default setting is unchecked.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 11 If you want to change the value of the Group Policy Delay parameter, enter a new value or use the up and down arrows to select a value between 0 and 65535 seconds. (Microsoft supports only values between 30 and 600 seconds. The default value is 60 seconds.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Figure 5-13 Step 3 Define PEAP (EAP-GTC) Configuration Window Check the Use Machine Information For Domain Logon check box if you want the client to attempt to log into a domain using machine authentication with user credentials rather than user authentication. Doing so enables your computer to connect to the network prior to user logon. The default setting is checked.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 6 Perform one of the following to specify the username that will be used for inner PEAP tunnel authentication: • If you want your Windows username to also serve as your PEAP username, check the Use Windows User Name check box. This option gives you only one username to remember. Note • If you chose the Static Password option in Step 5, the check box reads Use Windows User Name and Password.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 10 Step 11 Perform one of the following to set the Allow Association to Mixed Cells parameter, which indicates whether the client adapter can associate to an access point that allows both WEP and non-WEP associations: • Check the Allow Association to Mixed Cells check box if the access point to which the client adapter is to associate (or the VLAN to which the client will be assigned) has WEP set to Optional.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Enabling PEAP (EAP-MSCHAP V2) Follow the steps below to enable PEAP (EAP-MSCHAP V2) for this profile. Step 1 Step 2 Perform one of the following: • If you want to enable PEAP (EAP-MSCHAP V2) without WPA or WPA2, choose 802.1x under Set Security Options and PEAP (EAP-MSCHAP V2) in the 802.1x EAP Type drop-down box.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 3 Check the Use Machine Information For Domain Logon check box if you want the client to attempt to log into a domain using machine authentication with user credentials rather than user authentication. Doing so enables your computer to connect to the network prior to user logon. The default setting is checked. Note If you do not check the Use Machine Information For Domain Logon check box, machine authentication is not performed.
Chapter 5 Configuring the Client Adapter Setting Security Parameters c. If the Login Name field is not filled in automatically, enter your username with nothing after it (for example, jsmith). Note d. Some RADIUS servers require that the same name be entered for both the inner and outer PEAP tunnels. That is, the same name may need to be entered in both the Login Name field and the User Name field on the Define PEAP (EAP-MSCHAP V2) Configuration window.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Enabling PEAP (EAP-MSCHAP V2) Machine Authentication with Machine Credentials The Host Based EAP option in the 802.1x EAP Type drop-down box on the Profile Management (Security) window enables client adapters that are configured through ADU to attempt to log into a domain using PEAP (EAP-MSCHAP V2) machine authentication with machine credentials. Doing so enables your computer to connect to the network prior to user logon.
Chapter 5 Configuring the Client Adapter Setting Security Parameters Step 5 Click Start > Settings > Control Panel > Network and Dial-up Connections or Network Connections. Step 6 Right-click your wireless connection. Step 7 Click Properties. The Connection Properties window appears. Step 8 Perform one of the following: • On Windows 2000, click the Authentication tab.
Chapter 5 Configuring the Client Adapter Enabling Wi-Fi Multimedia Disabling Static WEP, WPA/WPA2 Passphrase, or EAP To disable static WEP, WPA/WPA2 passphrase, or EAP authentication [LEAP, EAP-FAST, EAP-TLS, PEAP (EAP-GTC), or PEAP (EAP-MSCHAP V2)] for a particular profile, choose None on the Profile Management (Security) window and click OK. Note Choosing any security option other than Pre-Shared Key (Static WEP) on the Profile Management (Security) window disables static WEP automatically.
Chapter 5 Configuring the Client Adapter Enabling Wi-Fi Multimedia Figure 5-17 Wireless Cisco Connection Properties Window Step 4 If the QoS Packet Scheduler is already installed, it is included in the list of components that this connection uses. If it appears in the list, go to Step 8. Otherwise, go to the next step to install it. Step 5 Click Install. The Select Network Component Type window appears (see Figure 5-18). Cisco Aironet 802.
Chapter 5 Configuring the Client Adapter Enabling Wi-Fi Multimedia Figure 5-18 Step 6 Select Network Component Type Window Choose Service and click Add. The Select Network Service window appears (see Figure 5-19). Figure 5-19 Select Network Service Window Step 7 Click QoS Packet Scheduler and OK. The Wireless Cisco Connection Properties window reappears, and the QoS Packet Scheduler is included in the list of connections. Step 8 Check the QoS Packet Scheduler check box if it is not checked.
Chapter 5 Configuring the Client Adapter Enabling Wi-Fi Multimedia Enabling the QoS Packet Scheduler on Windows XP Follow these steps to enable the QoS Packet Scheduler on a computer running Windows XP. Step 1 Click Control Panel. Step 2 Double-click Network Connections. Step 3 Right-click your wireless network connection. Step 4 Click Properties. The Wireless Network Connection Properties window appears (see Figure 5-20).
Chapter 5 Configuring the Client Adapter Setting Roaming Parameters in the Windows Control Panel Setting Roaming Parameters in the Windows Control Panel The Cisco Aironet 802.11a/b/g Wireless Adapter Properties window (see Figure 5-21) in the Windows Control Panel enables you to set two parameters that regulate the client adapter’s roaming capabilities. Figure 5-21 Cisco Aironet 802.11a/b/g Wireless Adapter Properties Window Follow these steps to access the roaming parameters.
Chapter 5 Configuring the Client Adapter Setting Roaming Parameters in the Windows Control Panel Table 5-5 Roaming Parameters (in the Windows Control Panel) Parameter Description BSS Aging Interval The amount of time (in seconds) that the client keeps an access point in its roaming scanlist after it can no longer communicate to that device. The higher the value, the greater the number of access points to which the client may roam.
C H A P T E R 6 Using EAP Authentication This chapter explains the sequence of events that occurs and the actions you must take when a profile that is set for EAP authentication is activated.
Chapter 6 Using EAP Authentication Overview Overview This chapter explains the sequence of events that occurs after you (or auto profile selection) activate a profile that uses EAP authentication or you eject and reinsert the client adapter, reboot the computer, log on while this profile is active, or are informed that your password has expired or is invalid.
Chapter 6 Using EAP Authentication Using LEAP or EAP-FAST with the Windows Username and Password This window provides information about the status of LEAP or EAP-FAST authentication. Table 6-1 lists and explains the stages of LEAP or EAP-FAST authentication. As each stage is completed, a status message (such as Success) appears in the Status field. If any error messages appear, refer to the “Error Messages” section on page 10-12 for an explanation and the recommended action to take.
Chapter 6 Using EAP Authentication Using LEAP or EAP-FAST with the Windows Username and Password 3. If your client adapter authenticates, the window shows that each stage was successful and then disappears. ASTU and the Link Status field on the ADU Current Status window show Authenticated. If the authentication attempt fails, an error message appears after the authentication timeout period has expired. Refer to the “Error Messages” section on page 10-12 for the necessary action to take.
Chapter 6 Using EAP Authentication Using LEAP or EAP-FAST with an Automatically Prompted Login Figure 6-2 Please Change Password Window Step 2 Enter your new password in both the New Password and Verify New Password fields and click OK. Step 3 If prompted, log off and on again in order to update your local cached account with your new password.
Chapter 6 Using EAP Authentication Using LEAP or EAP-FAST with an Automatically Prompted Login Figure 6-3 Enter Wireless Network Password Window The LEAP or EAP-FAST Authentication Status window appears. Step 2 If your profile is configured for EAP-FAST and a message appears asking if you want to auto-provision a PAC, click Yes. Step 3 If your client adapter authenticates, the LEAP or EAP -FAST Authentication Status window shows that each stage was successful and then disappears.
Chapter 6 Using EAP Authentication Using LEAP or EAP-FAST with an Automatically Prompted Login Figure 6-4 Enter Wireless Network Password Window The LEAP or EAP-FAST Authentication Status window appears. Step 3 If your profile is configured for EAP-FAST and a message appears asking if you want to auto-provision a PAC, click Yes. Step 4 If your client adapter authenticates, the window shows that each stage was successful and then disappears. The logon or boot-up process completes.
Chapter 6 Using EAP Authentication Using LEAP or EAP-FAST with a Manually Prompted Login Figure 6-5 Please Change Password Window Step 2 Enter your new password in both the New Password and Verify New Password fields. Step 3 Click OK. The client adapter should authenticate using your new password.
Chapter 6 Using EAP Authentication Using LEAP or EAP-FAST with a Manually Prompted Login Figure 6-6 Enter Wireless Network Password Window The LEAP or EAP-FAST Authentication Status window appears. Step 2 If your profile is configured for EAP-FAST and a message appears asking if you want to auto-provision a PAC, click Yes. Step 3 If your client adapter authenticates, the window shows that each stage was successful and then disappears.
Chapter 6 Using EAP Authentication Using LEAP or EAP-FAST with a Manually Prompted Login Figure 6-7 Step 3 Action Drop-Down Menu When the Enter Wireless Network Password window appears (see Figure 6-8), enter your LEAP or EAP-FAST username and password and click OK. The domain name can be entered in the Log On To field; it is optional. Figure 6-8 Enter Wireless Network Password Window Cisco Aironet 802.
Chapter 6 Using EAP Authentication Using LEAP or EAP-FAST with a Manually Prompted Login The LEAP or EAP-FAST Authentication Status window appears. Step 4 If your profile is configured for EAP-FAST and a message appears asking if you want to auto-provision a PAC, click Yes. Step 5 If your client adapter authenticates, the window shows that each stage was successful and then disappears. ASTU and the Link Status field on the ADU Current Status window show Authenticated.
Chapter 6 Using EAP Authentication Using LEAP or EAP-FAST with a Saved Username and Password Using LEAP or EAP-FAST with a Saved Username and Password After Profile Activation or Card Insertion After you (or auto profile selection) activate a profile that uses LEAP or EAP-FAST authentication with a saved LEAP or EAP-FAST username and password or you eject and reinsert the client adapter while this profile is active, the following events occur: 1.
Chapter 6 Using EAP Authentication Using EAP-TLS After Your EAP-FAST Password Expires If the EAP-FAST password for your current profile expires or becomes invalid, follow these steps to change your password. Step 1 When the Please Change Password window appears (see Figure 6-10) to indicate that your password is invalid, enter your old password in the Old Password field. Figure 6-10 Please Change Password Window Step 2 Enter your new password in both the New Password and Verify New Password fields.
Chapter 6 Using EAP Authentication Using PEAP (EAP-GTC) Using PEAP (EAP-GTC) After you (or auto profile selection) activate a profile that uses PEAP (EAP-GTC) authentication or you eject and reinsert the client adapter, reboot the computer, or log on while this profile is active, follow the steps in one of the sections below to EAP authenticate. Choose the section appropriate for your user database.
Chapter 6 Using EAP Authentication Using PEAP (EAP-MSCHAP V2) Using PEAP (EAP-MSCHAP V2) After you (or auto profile selection) activate a profile that uses PEAP (EAP-MSCHAP V2) authentication or you eject and reinsert the client adapter, reboot the computer, or log on while this profile is active, the EAP authentication process begins automatically.
Chapter 6 Using EAP Authentication Restarting the Authentication Process Cisco Aironet 802.
C H A P T E R 7 Viewing Status and Statistics This chapter explains how to use ADU to view the client adapter’s status and its transmit and receive statistics. The following topics are covered in this chapter: • Overview of ADU Status and Statistics Tools, page 7-2 • Setting Parameters that Affect ADU Status and Statistics Tools, page 7-2 • Viewing the Current Status of Your Client Adapter, page 7-4 • Viewing Statistics for Your Client Adapter, page 7-12 Cisco Aironet 802.
Chapter 7 Viewing Status and Statistics Overview of ADU Status and Statistics Tools Overview of ADU Status and Statistics Tools In addition to enabling you to configure your client adapter for use in various types of networks, ADU provides tools that enable you to assess the performance of the client adapter and other devices on the wireless network.
Chapter 7 Viewing Status and Statistics Setting Parameters that Affect ADU Status and Statistics Tools Step 3 Table 7-2 lists and describes the parameters that affect the operation of ADU status and statistics tools. Follow the instructions in the table to change any parameters.
Chapter 7 Viewing Status and Statistics Viewing the Current Status of Your Client Adapter Viewing the Current Status of Your Client Adapter ADU enables you to view the current status of your client adapter as well as many of the settings that have been configured for the adapter. To view your client adapter’s status and settings, open ADU. The Current Status window appears (see Figure 7-2). Figure 7-2 Current Status Window Table 7-3 interprets each element of the Current Status window.
Chapter 7 Viewing Status and Statistics Viewing the Current Status of Your Client Adapter Table 7-3 Basic Client Adapter Status Status Description Profile Name The network configuration (or profile) your client adapter is currently using. Note Link Status Refer to Chapter 4 for information on creating, modifying, and selecting profiles. The operational mode of your client adapter.
Chapter 7 Viewing Status and Statistics Viewing the Current Status of Your Client Adapter Table 7-3 Basic Client Adapter Status (continued) Status Description Server Based Authentication The method by which authentication to a back-end server is being performed to establish secure connectivity.
Chapter 7 Viewing Status and Statistics Viewing the Current Status of Your Client Adapter Figure 7-3 Advanced Status Window Table 7-4 interprets each element of the Advanced Status window. Table 7-4 Advanced Client Adapter Status Status Description Network Name (SSID) The name of the network to which your client adapter is currently associated. Note Server Based Authentication Refer to the SSID1 parameter in Table 5-2 for information on setting the client adapter’s SSID.
Chapter 7 Viewing Status and Statistics Viewing the Current Status of Your Client Adapter Table 7-4 Advanced Client Adapter Status (continued) Status Description Authentication Type Specifies whether the client adapter must share the same WEP keys as the access point in order to authenticate or can authenticate to the access point regardless of its WEP settings.
Chapter 7 Viewing Status and Statistics Viewing the Current Status of Your Client Adapter Table 7-4 Advanced Client Adapter Status (continued) Status Description QoS The type of quality of service that is currently being used by your client adapter. QoS on wireless LANs (WLAN) provides prioritization of traffic from the access point over the WLAN based on traffic classification. Value: QoS Description None WMM standard QoS is not enabled. WMM Wi-Fi Multimedia, a component of the IEEE 802.
Chapter 7 Viewing Status and Statistics Viewing the Current Status of Your Client Adapter Table 7-4 Advanced Client Adapter Status (continued) Status Description Power Save Mode The client adapter’s current power consumption setting. Value: CAM (Constantly Awake Mode), Max PSP (Max Power Saving), or Fast PSP (Power Save Mode) Note Current Power Level Refer to the Power Save Mode parameter in Table 5-3 for information on setting the client adapter’s power save mode.
Chapter 7 Viewing Status and Statistics Viewing the Current Status of Your Client Adapter Table 7-4 Advanced Client Adapter Status (continued) Status Description 802.11b Preamble Indicates whether your client adapter is using only long radio headers or short and long radio headers. Value: Current Receive Rate Short & Long or Long Only Note This field contains a value only when the client adapter is operated in 2.4-GHz 11-Mbps or 2.4-GHz 54-Mbps mode. Note Refer to the 802.
Chapter 7 Viewing Status and Statistics Viewing Statistics for Your Client Adapter Viewing Statistics for Your Client Adapter ADU enables you to view statistics that indicate how data is being received and transmitted by your client adapter. To view your client adapter’s statistics, open ADU and click the Diagnostics tab. The Cisco Aironet Desktop Utility (Diagnostics) window appears (see Figure 7-4).
Chapter 7 Viewing Status and Statistics Viewing Statistics for Your Client Adapter Table 7-5 describes each statistic that is displayed for your client adapter. Table 7-5 Basic Client Adapter Statistics Statistic Description Transmit Statistics Multicast Packets The number of multicast packets that were transmitted. Broadcast Packets The number of broadcast packets that were transmitted. Unicast Packets The number of unicast packets that were transmitted successfully.
Chapter 7 Viewing Status and Statistics Viewing Statistics for Your Client Adapter Table 7-6 interprets each element of the Advanced Statistics window. Table 7-6 Advanced Client Adapter Statistics Status Description Transmit Statistics Frames Transmitted OK The number of frames that were transmitted successfully. Frames Retried The number of frames that were retried. Frames Dropped The number of frames that were dropped because of errors or collisions.
Chapter 7 Viewing Status and Statistics Viewing Statistics for Your Client Adapter Table 7-6 Advanced Client Adapter Statistics (continued) Status Description Authentication Time-Out The number of times the client adapter tried to authenticate to an access point but was unable to because the access point did not respond fast enough (timed out). Authentication Rejects The number of times the client adapter tried to authenticate to an access point but was rejected.
Chapter 7 Viewing Status and Statistics Viewing Statistics for Your Client Adapter Cisco Aironet 802.
C H A P T E R 8 Using the Aironet System Tray Utility (ASTU) This chapter explains how to use the Aironet System Tray Utility (ASTU) to access status information about your client adapter and perform basic tasks. The following topics are covered in this chapter: • Overview of ASTU, page 8-2 • The ASTU Icon, page 8-2 • Tool Tip Window, page 8-3 • Pop-Up Menu, page 8-5 Cisco Aironet 802.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Overview of ASTU Overview of ASTU ASTU is an optional application that provides a small subset of the features available through ADU. Specifically, it enables you to access status information about your client adapter and perform basic tasks. ASTU is accessible from an icon in the Windows system tray, making it easily accessible and convenient to use.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Tool Tip Window Table 8-1 Icon Interpreting the ASTU Icon (continued) Description A yellow icon indicates that the client adapter is associated to an access point (in infrastructure mode) or another client (in ad hoc mode), the user is authenticated if the client adapter is configured for EAP authentication, and the signal strength is fair.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Tool Tip Window Table 8-2 Tool Tip Window Elements (continued) Status Element Description Connection status The operational mode of your client adapter.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Pop-Up Menu Table 8-2 Tool Tip Window Elements (continued) Status Element Description Link quality The client adapter's signal strength for all received packets. Value: Excellent, Good, Fair, Poor, or No Link Link speed and 802.11 mode The rate at which your client adapter is currently transmitting data packets and the 802.11 mode that your client adapter is currently using for communications. Link speed value:1, 2, 5.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Pop-Up Menu Exit This option closes ADU and ASTU. Note To reactivate ADU, double-click the Aironet Desktop Utility icon on your computer desktop. To reactivate ASTU, choose the Enable Tray Icon option from the ADU Action drop-down menu. Open Aironet Desktop Utility This option activates ADU.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Pop-Up Menu This window enables you to determine when ADU and ASTU run and to choose the options that appear on the ASTU pop-up menu. Follow these steps to make your selections. Step 1 If you want ASTU to run automatically when Windows starts, make sure the Run the program automatically when Windows starts check box is checked. Otherwise, uncheck this check box.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Pop-Up Menu Manual Login This option enables you to manually invoke the authentication process for a profile that is configured to use a manually prompted LEAP or EAP-FAST username and password. When you choose this option, the Enter Wireless Network Password window appears. Enter your LEAP or EAP-FAST credentials and click OK. The LEAP or EAP-FAST Authentication Status window appears, and the authentication process begins.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Pop-Up Menu Note • Login scripts are not reliable if you use auto profile selection with LEAP or EAP-FAST. If you authenticate and achieve full network connectivity before or at the same time as you log into the computer, the login scripts will run. However, if you authenticate and achieve full network connectivity after you log into the computer, the login scripts will not run.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Pop-Up Menu Table 8-3 Connection Status Window Elements Status Element Description Active Profile The network configuration (or profile) that your client adapter is currently using. Auto Profile Selection Indicates whether your client adapter is using auto profile selection. Value: Connection Status Enabled or Disabled The operational mode of your client adapter.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Pop-Up Menu Table 8-3 Connection Status Window Elements (continued) Status Element Description Link Quality The client adapter’s signal strength for all received packets. Value: SSID The name of the network to which your client adapter is currently associated. Note Access Point Name 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, or 54 Mbps The rate at which your client adapter is currently transmitting data packets.
Chapter 8 Using the Aironet System Tray Utility (ASTU) Pop-Up Menu Cisco Aironet 802.
C H A P T E R 9 Routine Procedures This chapter provides procedures for common tasks related to the client adapter. The following topics are covered in this chapter: • Removing a Client Adapter, page 9-2 • Client Adapter Software Procedures, page 9-3 • Enabling or Disabling Your Client Adapter’s Radio, page 9-9 Cisco Aironet 802.
Chapter 9 Routine Procedures Removing a Client Adapter Removing a Client Adapter Follow the instructions in this section to remove a PC-Cardbus card or PCI card from a computing device, when necessary. Caution These procedures and the physical connections they describe apply generally to conventional Cardbus slots and PCI expansion slots. In cases of custom or nonconventional equipment, be alert to possible differences in Cardbus slot and PCI expansion slot configurations.
Chapter 9 Routine Procedures Client Adapter Software Procedures Client Adapter Software Procedures This section provides instructions for the following procedures: • Upgrading the client adapter software, page 9-3 • Uninstalling the client adapter software, page 9-6 • ADU procedures, page 9-7 • ASTU procedures, page 9-9 Upgrading the Client Adapter Software Follow these steps to upgrade your Cisco Aironet CB21AG or PI21AG client adapter software to a more recent release using the settings that wer
Chapter 9 Routine Procedures Client Adapter Software Procedures Figure 9-1 Preparing Setup Window Figure 9-2 Previous Installation Detected Window Cisco Aironet 802.
Chapter 9 Routine Procedures Client Adapter Software Procedures Step 4 Choose Update the previous installation and click Next. Step 5 When a message appears indicating that you are required to restart your computer at the end of the installation process, click Yes. Note If you click No, you are asked to confirm your decision. If you proceed, the installation process terminates. The Setup Status window appears (see Figure 9-3).
Chapter 9 Routine Procedures Client Adapter Software Procedures Uninstalling the Client Adapter Software This section provides instructions for uninstalling the software for your Cisco Aironet CB21AG or PI21AG client adapter. This procedure is necessary if you want to remove installed client adapter software from your computer or downgrade to a previous release. Note If you want to downgrade to an earlier release of client adapter software, use this procedure to uninstall the current software.
Chapter 9 Routine Procedures Client Adapter Software Procedures ADU Procedures This section provides instructions for the following procedures: • Opening ADU, page 9-7 • Exiting ADU, page 9-7 • Finding the version of ADU, page 9-8 • Viewing client adapter information, page 9-8 • Accessing online help, page 9-9 Opening ADU To open ADU, perform one of the following: • Double-click the Aironet Desktop Utility icon on your desktop.
Chapter 9 Routine Procedures Client Adapter Software Procedures Finding the Version of ADU Follow these steps to find the current version of ADU. Step 1 Open ADU. Step 2 Choose the About Aironet Desktop Utility option from the Help drop-down menu. The About window appears (see Figure 9-5). Figure 9-5 About Window Viewing Client Adapter Information To view information about your client adapter, open ADU. Click the Diagnostics tab and Adapter Information.
Chapter 9 Routine Procedures Enabling or Disabling Your Client Adapter’s Radio Table 9-1 interprets each element of the Adapter Information window. Table 9-1 Adapter Information Status Description Card Name A description of your client adapter. MAC Address The MAC address assigned to your client adapter at the factory. Driver The filename and location of your client adapter’s driver. Driver Version The version of the NDIS device driver that is currently installed on your computer.
Chapter 9 Routine Procedures Enabling or Disabling Your Client Adapter’s Radio Note If your client adapter’s radio is disabled before your computer enters standby or hibernate mode or before you reboot the computer, the radio remains disabled when the computer resumes. You must enable the radio to resume operation. You can use ADU or ASTU to enable or disable the client adapter’s radio. Follow the instructions below to use ADU or refer to the “Enable/Disable Radio” section on page 8-7 to use ASTU.
C H A P T E R 10 Troubleshooting This chapter provides information for diagnosing and correcting common problems that may occur when you install and operate the client adapter. The following topics are covered in this chapter: • Accessing the Latest Troubleshooting Information, page 10-2 • Interpreting the Indicator LEDs, page 10-2 • Troubleshooting the Client Adapter, page 10-3 • Error Messages, page 10-12 Cisco Aironet 802.
Chapter 10 Troubleshooting Accessing the Latest Troubleshooting Information Accessing the Latest Troubleshooting Information This chapter provides basic troubleshooting tips for your client adapter. For more up-to-date and detailed troubleshooting information, refer to the TAC web site. To access this site, go to Cisco.com, click Technical Support > Product Support > Wireless. Then choose your product and click Troubleshooting to find information on the problem you are experiencing.
Chapter 10 Troubleshooting Troubleshooting the Client Adapter Troubleshooting the Client Adapter This section provides troubleshooting tips should you encounter problems with your client adapter. Use Table 10-2 to quickly find specific troubleshooting information. Table 10-2 Troubleshooting Information Troubleshooting Information Page Number Using the troubleshooting utility 10-3 Disabling the Microsoft Wireless Configuration 10-8 Manager Disabling the Microsoft 802.
Chapter 10 Troubleshooting Troubleshooting the Client Adapter Figure 10-1 Step 2 Troubleshooting Utility Window Click Run Test. The utility performs the following series of seven tests to check the operation of your client adapter and to identify specific problems if they exist: 1. Driver installation test 2. Card insertion test 3. Card enable test 4. Radio test 5. Association test 6. Authentication test 7.
Chapter 10 Troubleshooting Troubleshooting the Client Adapter Figure 10-2 Troubleshooting Utility Window (with Test Results) One of the following status messages appears for each test: • Test passed—The test completed successfully. • Test bypassed—The test was skipped because it was not required for the active profile. • Test failed—The test failed. Follow the instructions in Step 3 to obtain more details.
Chapter 10 Troubleshooting Troubleshooting the Client Adapter Figure 10-3 Note Step 4 Troubleshooting Utility Window (Detailed Report) The report contains valuable information that, if necessary, could be used by your system administrator or TAC to analyze any problems. Follow the instructions in the next section if you want to save the report to a text file. If a problem is discovered, the report provides some possible repair suggestions.
Chapter 10 Troubleshooting Troubleshooting the Client Adapter Saving the Detailed Report to a Text File Follow the steps below to save the detailed troubleshooting report to your computer’s hard drive. Step 1 Click Save Report. The Save Report window appears (see Figure 10-4). Figure 10-4 Save Report Window Step 2 Enter a name for the detailed report in the File name field. The report is saved as a *.txt file.
Chapter 10 Troubleshooting Troubleshooting the Client Adapter Disabling the Microsoft Wireless Configuration Manager (Windows XP Only) If any conflicts arise between ADU and the Microsoft Wireless Configuration Manager on a computer running Windows XP, follow these steps to disable the Microsoft configuration manager. Note Disabling the Microsoft Wireless Configuration Manager on Windows XP also disables the Microsoft 802.1X supplicant.
Chapter 10 Troubleshooting Troubleshooting the Client Adapter Resolving Resource Conflicts If you encounter problems while installing your client adapter on a computer running a Windows operating system, you may need to specify a different interrupt request (IRQ) or I/O range for the adapter. The default IRQ for the client adapter is IRQ 10, which may not work for all systems. Follow the steps for your specific operating system to obtain an available IRQ.
Chapter 10 Troubleshooting Troubleshooting the Client Adapter Resolving Resource Conflicts in Windows XP Note These instructions assume you are using the Windows XP classic view, not the category view. Step 1 Double-click My Computer, Control Panel, and System. Step 2 Click the Hardware tab and Device Manager. Step 3 Under Network Adapters, double-click the Cisco Systems Wireless LAN Adapter. Step 4 In the General window, the Device Status field indicates if a resource problem exists.
Chapter 10 Troubleshooting Troubleshooting the Client Adapter Problems Connecting to the Network After you have installed the appropriate driver and client utilities, contact your IS department if you have a problem connecting to the network. Proxy server, network protocols, and further authentication information might be needed to connect to the network.
Chapter 10 Troubleshooting Error Messages Error Messages This section provides a list of error messages that may appear during the installation, configuration, or use of your client adapter. The messages are listed in alphabetical order within each section, and an explanation as well as a recommended user action are provided for each message. Error Message ADU can hold only 16 profiles. To add another profile, either delete an existing profile or modify an existing profile.
Chapter 10 Troubleshooting Error Messages Error Message Authentication failed due to invalid client attributes (e.g., Login Name). Explanation The domain logon failed because of an invalid client configuration setting, such as a mistyped login name. Recommended Action Return to the PEAP configuration windows, verify your settings, and make any necessary modifications. Error Message Authentication failed due to invalid client certificate.
Chapter 10 Troubleshooting Error Messages Error Message Cisco Aironet 802.11a/b/g wireless adapter software update can’t proceed. Please insert the adapter in the system and try again. Explanation You attempted to upgrade your client adapter’s software when the adapter was not inserted in your computer. Recommended Action Click OK, insert your client adapter, and start the upgrade process again. Error Message DHCP failure. Explanation The domain logon failed because of a DHCP failure.
Chapter 10 Troubleshooting Error Messages Error Message Failed to open PAC stores. Explanation An error occurred when you attempted to access the global or private PAC store. Recommended Action Try again. If the second attempt fails, contact your system administrator. Error Message In order to select an Ad Hoc network, you must have a Network Name.
Chapter 10 Troubleshooting Error Messages Error Message Please enter a Passphrase. Explanation You clicked OK on the Define WPA/WPA2 Pre-Shared Key window before entering a Passphrase. Recommended Action Enter a WPA/WPA2 Passphrase on the Define WPA/WPA2 Pre-Shared Key window and then click OK. Error Message Please enter a profile name.
Chapter 10 Troubleshooting Error Messages Error Message The EAP-FAST auto provisioning or PAC updating failed. The current profile is disabled until you correct the PAC configuration in the profile and reauthenticate. Explanation PAC provisioning has failed. No PAC has been provisioned, and the profile is disabled. Recommended Action Try again to authenticate using the existing profile. If automatic PAC provisioning is enabled, make sure to allow a PAC to be provisioned if prompted.
Chapter 10 Troubleshooting Error Messages Error Message The passwords you entered do not match. Please enter them again. Explanation The passwords that you entered in the Password and Confirm Password fields on the LEAP or EAP-FAST Settings window do not match. Recommended Action Re-enter your LEAP or EAP-FAST password in both fields. Error Message The profile will be disabled until you select the Reauthentication option, Windows restarts, or the card is ejected and reinserted.
Chapter 10 Troubleshooting Error Messages Error Message This Product does not support this version of Windows. Please check the product documentation for the system requirements. Explanation You tried to install the CB21AG and PI21AG client adapter software on an unsupported Windows operating system. Recommended Action Install the CB21AG and PI21AG client adapter software on a computer running Windows 2000 or XP. Error Message Unable to authenticate wireless user.
Chapter 10 Troubleshooting Error Messages Error Message Unable to save imported PAC data. Access denied. Explanation Your attempt to save an imported PAC file has failed. You may not have the necessary permissions. Recommended Action Try again. If your second attempt fails, contact your system administrator. Error Message WEP Key x must be y characters long. Please enter z more characters. Explanation You entered an incomplete static WEP key on the Define Pre-Shared Keys window and clicked OK.
Chapter 10 Troubleshooting Error Messages Error Message You chose not to copy your private PAC. If you experience wireless connection problems during Windows domain logon or logged off stage, you must reconfigure the profile to use a global PAC. Explanation When you were prompted to copy your PAC to the global store so that it will be available when you are not logged on, you clicked No. Recommended Action The profile will use the private PAC for authentication.
Chapter 10 Troubleshooting Error Messages Error Message You must enter the correct old password in order to change the new password. Explanation You incorrectly entered your old EAP-FAST password on the Please Change Password window. Recommended Action Carefully re-enter your old EAP-FAST password on the Please Change Password window. Error Message You must select a PAC or enable Allow Automatic PAC Provisioning.
Chapter 10 Troubleshooting Error Messages Error Message You selected a private PAC for EAP-FAST authentication. It may not be accessible when the user is logged off or during the domain logon process. Confirm if you want to copy the selected PAC into the global PAC store. Explanation You selected a private PAC and the No Network Connection Unless User Is Logged In check box is unchecked. Therefore, the PAC may not be accessible during domain logon or when you are logged off.
Chapter 10 Troubleshooting Error Messages Cisco Aironet 802.
A P P E N D I X A Technical Specifications This appendix provides technical specifications for the Cisco Aironet CB21AG and PI21AG Wireless LAN Client Adapters. The following topics are covered in this appendix: • Physical Specifications, page A-2 • Radio Specifications, page A-2 • Power Specifications, page A-6 • Safety and Regulatory Compliance Specifications, page A-6 Cisco Aironet 802.
Appendix A Technical Specifications Table A-1 lists the technical specifications for the Cisco Aironet CB21AG and PI21AG Wireless LAN Client Adapters. Table A-1 Technical Specifications for CB21AG and PI21AG Client Adapters Physical Specifications Size PC-Cardbus card 4.5 in. L x 2.1 in. W x 0.2 in. H (11.3 cm L x 5.4 cm W x 0.5 cm H) PCI card Standard PCI card 4.7 in. L x 0.7 in. W x 4.8 in. H (12 cm L x 1.8 cm W x 12.1 cm H) Low-profile PCI card 4.7 in. L x 0.7 in. W x 3.1 in. H (12 cm L x 1.
Appendix A Technical Specifications Table A-1 Technical Specifications for CB21AG and PI21AG Client Adapters (continued) Power output Note Refer to Appendix D for limitations on radiated power (EIRP) levels in the European community and other countries. 802.
Appendix A Table A-1 Technical Specifications Technical Specifications for CB21AG and PI21AG Client Adapters (continued) Receiver sensitivity 802.
Appendix A Technical Specifications Table A-1 Technical Specifications for CB21AG and PI21AG Client Adapters (continued) Receiver delay spread (multipath) 802.11a/g 400 ns @ 6 Mbps 250 ns @ 9 and 12 Mbps 220 ns @ 18 Mbps 160 ns @ 24 Mbps 100 ns @ 36 Mbps 90 ns @ 48 Mbps 70 ns @ 54 Mbps 802.11b 350 ns @ 1 Mbps 300 ns @ 2 Mbps 200 ns @ 5.5 Mbps 130 ns @ 11 Mbps Range 802.11a Indoor (typical) 500 ft (152 m) @ 6 Mbps 400 ft (122 m) @ 18 Mbps 90 ft (27 m) @ 54 Mbps Note 802.
Appendix A Table A-1 Technical Specifications Technical Specifications for CB21AG and PI21AG Client Adapters (continued) Antennas PC-Cardbus card Integrated 0-dBi dual-band 2.4/5-GHz diversity antenna PCI card 1-dBi dual-band 2.4/5-GHz antenna, permanently attached by 6.6-ft (2-m) cable Power Specifications Operational voltage 3.3 V (± 0.3 V) Receive current steady state 802.11a 318 mA maximum 802.11b 327 mA maximum 802.11g 282 mA maximum Transmit current steady state 802.
A P P E N D I X B Translated Safety Warnings This appendix provides translations of the safety warnings that appear in this publication. The second warning pertains to the PI21AG client adapter, and the third warning pertains to the CB21AG client adapter. The following topics are covered in this appendix: • Explosive Device Proximity Warning, page B-2 • Antenna Installation Warning, page B-3 • Warning for Laptop Users, page B-4 Cisco Aironet 802.
Appendix B Translated Safety Warnings Explosive Device Proximity Warning Explosive Device Proximity Warning Warning Waarschuwing Varoitus Do not operate your wireless network device near unshielded blasting caps or in an explosive environment unless the device has been modified to be especially qualified for such use.
Appendix B Translated Safety Warnings Antenna Installation Warning Antenna Installation Warning Warning Waarschuwing Varoitus In order to comply with FCC radio frequency (RF) exposure limits, antennas should be located at a minimum of 7.9 inches (20 cm) or more from the body of all persons. Om te voldoen aan de FCC radiofrequentie (RF) blootstellingslimieten dienen antennes zich minstens 20 cm of meer van de lichamen van alle personen bevinden.
Appendix B Translated Safety Warnings Warning for Laptop Users Warning for Laptop Users Warning This device has been tested and complies with FCC RF Exposure (SAR) limits in typical laptop computer configurations and this device can be used in desktop or laptop computers with side mounted PC Card slots that can provide at least 0.394 in (1 cm) separation distance from the antenna to the body of the user or a nearby person.
Appendix B Translated Safety Warnings Warning for Laptop Users Warnung Dieses Gerät wurde getestet und entspricht den durch die FCC-Richtlinien festgelegten Grenzwerten für Hochfrequenzstrahlung (SAR) für reguläre Laptop-Computerkonfigurationen. Es kann für Desktop- oder Laptop-Computer mit seitlichem PC-Kartensteckplatz genutzt werden, wobei der Abstand der Antenne vom Benutzer oder anderen in der Nähe befindlichen Personen mindestens 1 cm betragen muss.
Appendix B Translated Safety Warnings Warning for Laptop Users Varning! Den här enheten har testats och följer FCC-gränserna för radiofrekvensexponering (SAR) i vanliga konfigurationer för bärbara datorer. Den kan användas i stationära eller bärbara datorer med sidmonterade PC-kortöppningar som kan tillhandahålla minst 1 cm med separationsavstånd mellan antennen och användarens kropp eller annan person i närheten.
A P P E N D I X C Declarations of Conformity and Regulatory Information This appendix provides declarations of conformity and regulatory information for the Cisco Aironet CB21AG and PI21AG Wireless LAN Client Adapters.
Appendix C Manufacturer’s Federal Communication Commission Declaration of Conformity Statement Declarations of Conformity and Regulatory Information Manufacturer’s Federal Communication Commission Declaration of Conformity Statement Tested To Comply With FCC Standards FOR HOME OR OFFICE USE Models: AIR-CB21AG-A-K9, AIR-PI21AG-A-K9 FCC Certification Number: Manufacturer: LDK102050 (CB21AG) LDK102051 (PI21AG) Cisco Systems, Inc.
Appendix C Declarations of Conformity and Regulatory Information Department of Communications – Canada Department of Communications – Canada Canadian Compliance Statement This Class B Digital apparatus meets all the requirements of the Canadian Interference-Causing Equipment Regulations. Cet appareil numerique de la classe B respecte les exigences du Reglement sur le material broilleur du Canada. This device complies with Class B Limits of Industry Canada.
Appendix C Declarations of Conformity and Regulatory Information European Community, Switzerland, Norway, Iceland, and Liechtenstein Nederlands: Deze apparatuur voldoet aan de belangrijkste eisen en andere voorzieningen van richtlijn 1999/5/EC. Norsk: Dette utstyret er i samsvar med de grunnleggende krav og andre relevante bestemmelser i EU-directiv 1999/5/EC. Português: Este equipamento satisfaz os requisitos essenciais e outras provisões da Directiva 1999/5/EC.
Appendix C Declarations of Conformity and Regulatory Information European Community, Switzerland, Norway, Iceland, and Liechtenstein Declaration of Conformity Statement Cisco Aironet CB21AG Wireless LAN Client Adapter Cisco Aironet 802.
Appendix C Declarations of Conformity and Regulatory Information European Community, Switzerland, Norway, Iceland, and Liechtenstein Cisco Aironet PI21AG Wireless LAN Client Adapter Cisco Aironet 802.
Appendix C Declarations of Conformity and Regulatory Information Declaration of Conformity for RF Exposure Declaration of Conformity for RF Exposure The radio module has been evaluated under FCC Bulletin OET 65C and found compliant to the requirements as set forth in CFR 47 Sections 2.1091, 2.1093, and 15.247 (b) (4) addressing RF Exposure from radio frequency devices.
Appendix C Declarations of Conformity and Regulatory Information Administrative Rules for Cisco Aironet Wireless LAN Client Adapters in Taiwan Administrative Rules for Cisco Aironet Wireless LAN Client Adapters in Taiwan This section provides administrative rules for operating Cisco Aironet Wireless LAN Client Adapters in Taiwan. The rules are provided in both Chinese and English. 2.
Appendix C Declarations of Conformity and Regulatory Information Administrative Rules for Cisco Aironet Wireless LAN Client Adapters in Taiwan The operation of the low-power radio-frequency devices is subject to the interference caused by the operation of an authorized radio station, by another intentional or unintentional radiator, by industrial, scientific and medical (ISM) equipment, or by an incidental radiator.
Appendix C Declarations of Conformity and Regulatory Information Administrative Rules for Cisco Aironet Wireless LAN Client Adapters in Taiwan Cisco Aironet 802.
A P P E N D I X D Channels, Power Levels, and Antenna Gains This appendix lists the IEEE 802.11a, b, and g channels supported by the world's regulatory domains as well as the maximum power levels and antenna gains allowed per data rate. The following topics are covered in this appendix: • Channels, page D-2 • Maximum Power Levels and Antenna Gains, page D-4 Cisco Aironet 802.
Appendix D Channels, Power Levels, and Antenna Gains Channels Channels IEEE 802.11a The channel identifiers, channel center frequencies, and regulatory domains of each IEEE 802.11a 20-MHz-wide channel are shown in Table D-1. Table D-1 Channels for IEEE 802.
Appendix D Channels, Power Levels, and Antenna Gains Channels IEEE 802.11b/g The channel identifiers, channel center frequencies, and regulatory domains of each IEEE 802.11b/g 22-MHz-wide channel are shown in Table D-2. Table D-2 Channels for IEEE 802.
Appendix D Channels, Power Levels, and Antenna Gains Maximum Power Levels and Antenna Gains Maximum Power Levels and Antenna Gains IEEE 802.11a An improper combination of power level and antenna gain can result in equivalent isotropic radiated power (EIRP) above the amount allowed per regulatory domain. Table D-3 indicates the maximum EIRP allowed for each data rate in the IEEE 802.11a regulatory domains. Table D-3 Maximum EIRP for IEEE 802.
Appendix D Channels, Power Levels, and Antenna Gains Maximum Power Levels and Antenna Gains IEEE 802.11g An improper combination of power level and antenna gain can result in equivalent isotropic radiated power (EIRP) above the amount allowed per regulatory domain. Table D-5 indicates the maximum EIRP allowed for each data rate in the IEEE 802.11g regulatory domains. Table D-5 Maximum EIRP for IEEE 802.
Appendix D Channels, Power Levels, and Antenna Gains Maximum Power Levels and Antenna Gains Cisco Aironet 802.
A P P E N D I X E Configuring the Client Adapter through the Windows XP Operating System This appendix explains how to configure and use the client adapter with Windows XP. The following topics are covered in this appendix: • Overview, page E-2 • Configuring the Client Adapter, page E-5 • Associating to an Access Point Using Windows XP, page E-18 • Viewing the Current Status of Your Client Adapter, page E-18 Cisco Aironet 802.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Overview Overview This appendix provides instructions for minimally configuring the client adapter through the Microsoft Wireless Configuration Manager in Windows XP (instead of through ADU) as well as for enabling the security options that are available for use with this operating system.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Overview EAP (with Dynamic WEP Keys) The standard for wireless LAN security, as defined by IEEE, is called 802.1X for 802.11, or simply 802.1X. An access point that supports 802.1X and its protocol, Extensible Authentication Protocol (EAP), acts as the interface between a wireless client and an authentication server, such as a RADIUS server, to which the access point communicates over the wired network. Two 802.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Overview When you enable EAP on your access point and configure your client adapter for EAP-TLS or PEAP using Windows XP, authentication to the network occurs in the following sequence: 1. The client adapter associates to an access point and begins the authentication process. Note Note The client does not gain full access to the network until authentication between the client and the RADIUS server is successful. 2.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Configuring the Client Adapter Follow the steps below to configure your client adapter using Windows XP. Note These instructions assume you are using the Windows XP classic view rather than the category view. Otherwise, the windows you see will look different than those shown in this section.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Figure E-1 Wireless Network Connection Properties Window (Wireless Networks Tab) Step 6 Make sure that the Use Windows to configure my wireless network settings check box is checked. Step 7 Choose the SSID of the access point to which you want the client adapter to associate from the list of available networks and click Configure.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Figure E-2 Step 8 Step 9 Wireless Network Properties Window (Association Tab) Perform one of the following: • If you chose an SSID from the list of available networks, make sure the SSID appears in the Network name (SSID) field.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Step 10 Step 11 Choose one of the following options from the Network Authentication drop-down list: • Open—Enables your client adapter, regardless of its WEP settings, to authenticate and attempt to communicate with an access point. However, communication can occur only if the adapter’s WEP key matches that of the access point.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Step 12 Follow the steps below to enter a static WEP key if you are planning to use static WEP. If you are planning to use EAP-TLS or PEAP authentication, which uses dynamic WEP, go to Step 13. Note a. Make sure the The key is provided for me automatically check box is unchecked. b.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Step 15 Perform one of the following if you are planning to use EAP authentication: • If you are planning to use EAP-TLS authentication, follow the instructions in the “Enabling EAP-TLS Authentication” section on page E-10. • If you are planning to use PEAP authentication, follow the instructions in the “Enabling PEAP Authentication” section on page E-13.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Step 2 Check the Enable IEEE 802.1x authentication for this network check box if you did not enable WPA on the Association window. Step 3 For EAP type, choose Smart Card or other Certificate. Step 4 Click Properties. The Smart Card or other Certificate Properties window appears (see Figure E-4).
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Step 8 Step 9 If you want to specify the name of the server to connect to, check the Connect to these servers check box and enter the server name in the field below. Note If you enter a server name and the client adapter connects to a server that does not match the name you entered, you are prompted to accept or cancel the connection during the authentication process.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Enabling PEAP Authentication Follow the steps below to prepare the client adapter to use PEAP authentication, provided you have completed the initial configuration. Step 1 Click the Authentication tab on the Wireless Network Properties window. The following window appears (see Figure E-5). Figure E-5 Wireless Network Properties Window (Authentication Tab) Step 2 Check the Enable IEEE 802.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Step 4 Perform one of the following: • If you chose Protected EAP (PEAP), follow the instructions in the “Enabling PEAP (EAP-MSCHAP V2)” section below. • If you chose PEAP, follow the instructions in the “Enabling PEAP (EAP-GTC)” section on page E-16. Enabling PEAP (EAP-MSCHAP V2) Follow the steps below to enable PEAP (EAP-MSCHAP V2). Step 1 Click Properties.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Step 3 If you want to specify the name of the server to connect to, check the Connect to these servers check box and enter the appropriate server name in the field below. Note If you enter a server name and the client adapter connects to a server that does not match the name you entered, you are prompted to accept or cancel the connection during the authentication process.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Enabling PEAP (EAP-GTC) Follow the steps below to enable PEAP (EAP-GTC). Step 1 Click Properties. The PEAP Properties window appears (see Figure E-8). Figure E-8 PEAP Properties Window Step 2 Check the Validate server certificate check box if server certificate validation is required (recommended).
Appendix E Configuring the Client Adapter through the Windows XP Operating System Configuring the Client Adapter Step 5 Check the Connect only if server is signed by specified trusted root CA check box if you want to ensure that the certificate server uses the trusted root certificate specified in the field above. This prevents the client from establishing connections to rogue access points. Step 6 Currently Generic Token Card is the only second phase EAP type available. Click Properties.
Appendix E Configuring the Client Adapter through the Windows XP Operating System Associating to an Access Point Using Windows XP Step 9 Click OK in each window to save your settings. The configuration is complete. Step 10 Refer to Chapter 6 of the Cisco Aironet 340, 350, and CB20A Wireless LAN Client Adapters Installation and Configuration Guide for Windows (OL-1394-07 or later) for instructions on authenticating using PEAP (EAP-GTC).
A P P E N D I X F Performing a Site Survey This appendix explains how the site survey utility can be used when conducting a site survey.
Appendix F Performing a Site Survey Overview Overview Note This appendix applies only to people who are responsible for conducting a site survey to determine the best placement of infrastructure devices within a wireless network. Note The site survey utility is available in Install Wizard 2.0 and later. The site survey utility can assist you in conducting a site survey.
Appendix F Performing a Site Survey Opening the Site Survey Utility Opening the Site Survey Utility To open the site survey utility, choose Start > Programs > Cisco Aironet > Aironet Site Survey Utility. Note If you specified a different program folder during installation, you must access the site survey utility from that folder.
Appendix F Performing a Site Survey Using the Associated AP Status Tab Follow these steps to select the desired client adapter. Step 1 If you want to be able to choose client adapters that are installed but not physically present in your computer, check the List installed devices even if not present in system check box. Step 2 From the Select a Network Adapter list, select the client adapter that you want to use with the site survey utility.
Appendix F Performing a Site Survey Using the Associated AP Status Tab Viewing the Access Point’s Status The Associated AP Status tab shows the status of the access point to which your client adapter is associated. Figure F-3 shows the tab with display units shown in dBm, and Figure F-4 shows the tab with display units shown as a percentage.
Appendix F Performing a Site Survey Using the Associated AP Status Tab Table F-1 interprets the information that is displayed on the Associated AP Status tab. Note The trend graphs to the right of the smaller bar graphs provide a graphical representation of activity in the past 10 to 60 seconds. The height of an individual trend graph is proportional to the width of its corresponding bar graph.
Appendix F Performing a Site Survey Using the Associated AP Status Tab Table F-1 Site Survey Utility - Associated AP Status (continued) Associated AP Status Parameter Description Noise Level The level of background radio frequency energy. The lower the value and the wider the bar graph, the less background noise present. The trend graph to the right of the bar graph provides a visual interpretation of the level of background noise over time.
Appendix F Performing a Site Survey Using the AP Scan List Tab Table F-1 Site Survey Utility - Associated AP Status (continued) Associated AP Status Parameter Description Signal to Noise Ratio The difference between the signal strength and the noise level. The higher the value and the wider the bar graph, the better the client adapter’s ability to communicate with the access point. The trend graph to the right of the bar graph provides a visual interpretation of the signal-to-noise ratio over time.
Appendix F Performing a Site Survey Using the AP Scan List Tab Viewing the AP Scan List Your client adapter can detect nearby access points by the beacon signals that the access points continually transmit. The AP scan list displays a continuously updated list of the access points detected by your client adapter as well as the information contained in their beacons. To view the AP scan list, click the AP Scan List tab. The AP scan list appears (see Figure F-5).
Appendix F Performing a Site Survey Using the AP Scan List Tab Table F-2 Site Survey Utility - AP Scan List AP Scan List Parameter Description Count The number of rows, or access points, in the scan list. Note Network Name This parameter appears above the AP scan list and to the left. The network name, or service set identifier (SSID), indicates the name of an available wireless network. The icon to the left of the SSID provides information on link status.
Appendix F Performing a Site Survey Using the AP Scan List Tab Table F-2 Site Survey Utility - AP Scan List (continued) AP Scan List Parameter Description AP Name The access point’s name. It is shown only if the access point was configured with a name, Aironet Extensions are enabled (on access points running Cisco IOS Release 12.2(4)JA or later), and the access point transmits this information. Note CCX This field shows up to 15 characters although the name of the access point may be longer.
Appendix F Performing a Site Survey Using the AP Scan List Tab Viewing AP Details To view details for a particular access point in the AP scan list, select the desired network name in the scan list and click View AP Details. The AP Detailed Information window appears (see Figure F-6). Note You can also open the AP Detailed Information window by double-clicking in the first column of the desired row.
Appendix F Performing a Site Survey Using the AP Scan List Tab Table F-3 Site Survey Utility - AP Detailed Information (continued) Detailed Information Parameter Description RSSI The received signal strength indicator (RSSI) is a measure of signal strength in decibels with respect to milliwatts (dBm). Data Encryption Indicates whether the data exchanged with this access point is encrypted.
Appendix F Performing a Site Survey Using the AP Scan List Tab Generating an AP Scan Log File To enter the current contents of the AP scan list into a log file that can be saved to your computer’s hard drive, click Log Snapshot. The “Logged current AP Scan List” message appears below the scan list, and the log file is saved as a text file in the same directory as the site survey utility.
Appendix F Performing a Site Survey Finding the Version of the Site Survey Utility Finding the Version of the Site Survey Utility To find the current version of the site survey utility, choose About from the Help drop-down menu. The About window appears (see Figure F-8). Figure F-8 Site Survey Utility - About Window Accessing Online Help To access the site survey utility’s online help, choose Contents from the Help drop-down menu.
Appendix F Performing a Site Survey Uninstalling the Site Survey Utility Cisco Aironet 802.
G L O S S A RY 16-QAM Quadrate amplitude modulation. A modulation technique used by IEEE 802.11-compliant wireless LANs for transmission at 24 and 36 Mbps. 64-QAM Quadrate amplitude modulation. A modulation technique used by IEEE 802.11-compliant wireless LANs for transmission at 48 and 54 Mbps. 802.1X Also called 802.1X for 802.11. 802.1X is the standard for wireless LAN security, as defined by the Institute of Electrical and Electronics Engineers (IEEE). An access point that supports 802.
Glossary B bandwidth Specifies the amount of the frequency spectrum that is usable for data transfer. It identifies the maximum data rate that a signal can attain on the medium without encountering significant power loss. BPSK Binary phase shift keying. A modulation technique used by IEEE 802.11-compliant wireless LANs for transmission at 1 Mbps. broadcast key rotation A security feature for use with dynamic WEP keys.
Glossary DSSS Direct-sequence spread spectrum. A type of spread spectrum radio transmission that spreads its signal continuously over a wide frequency band. duplicate packets Packets that were received twice because an acknowledgement got lost and the sender retransmitted the packet. E EAP Extensible Authentication Protocol. EAP is the protocol for the optional IEEE 802.1X wireless LAN security feature. An access point that supports 802.
Glossary . I IEEE Institute of Electrical and Electronics Engineers. A professional society serving electrical engineers through its publications, conferences, and standards development activities. The body responsible for the Ethernet 802.3 and wireless LAN 802.11 specifications. infrastructure The wired Ethernet network. infrastructure device A device (such as an access point, bridge, or base station) that connects client adapters to a wired LAN.
Glossary P PAC Protected access credentials. Credentials that are either automatically or manually provisioned and used to perform mutual authentication with the RADIUS server during EAP-FAST authentication. PACs are created by the Cisco Secure ACS server and are identified by an ID. The user obtains his or her own copy of the PAC from the server, and the ID links the PAC to the profile created in ADU.
Glossary T TKIP Temporal Key Integrity Protocol. Also referred to as WEP key hashing. A security feature that defends against an attack on WEP in which the intruder uses the initialization vector (IV) in encrypted packets to calculate the WEP key. TKIP removes the predictability that an intruder relies on to determine the WEP key by exploiting IVs. transmit power The power level of radio transmission. U unicast packets Packets transmitted in point-to-point communication.
Glossary W WDS Wireless domain services (WDS). An access point providing WDS on your wireless LAN maintains a cache of credentials for CCKM-capable client devices on your wireless LAN. When a CCKM-capable client roams from one access point to another, the WDS access point forwards the client's credentials to the new access point with the multicast key. Only two packets pass between the client and the new access point, greatly shortening the reassociation time. WEP Wired equivalent privacy.
Glossary Cisco Aironet 802.
I N D EX MAC address Numerics in ADU 802.11 Authentication Mode parameter 802.11b preamble, status of 7-11 802.11b Preamble parameter 5-9 802.11 mode, in ASTU 5-12 in site survey utility mismatches 8-5 in ADU 7-9 8-11 in site survey utility E-3 F-6, F-11, F-13 problems associating to 5-15, E-3 10-10 radio band, in site survey utility 802.1x EAP Type parameter 802.
Index selecting in Windows XP setting wireless mode setting preferences E-7 specifying pop-up menu options 5-10 wireless LAN configuration Tool Tip window 1-5 ADU using setting setting with EAP-FAST setting with LEAP Advanced Status window setting with static WEP E-8 assembling 1-4 described 9-7 feature comparison to Windows XP 9-7 9-7 Profile Management windows, overview using 8-5 1-4 overview 8-6 D-5 3-6 to 3-8 F-2 3-8 9-9 A-6 3-6 to 3-8 AP detailed information parameters (s
Index associated AP status parameters (site survey utility) F-6 to F-8 B Associated AP Status tab (site survey utility) beacon period, in site survey utility units as a percentage units in dBm using F-5 beacons received F-5 in ADU F-4 to F-8 7-14 in site survey utility association F-7 broadcast key rotation rejections 7-15 described time-outs 7-15 setting on client and access point ASTU 5-20 5-24 broadcast packets See Aironet System Tray Utility (ASTU) ATIM Window, in site survey ut
Index channel of access point in ADU configuring client adapter deciding between ADU and Windows XP 4-5 in site survey utility F-6, F-10, F-13 channel of client adapter 7-6, 7-11 Channel parameter in ADU connection status channels, supported by regulatory domains IEEE 802.11a E-5 to E-10 8-4, 8-10 Connection Status window (ASTU) Constantly Awake Mode (CAM) D-2 IEEE 802.
Index diagnosing client adapter operation Diagnostics window 10-3 to 10-6 E 7-12 EAP authentication Disable Radio ADU menu option ASTU menu option 9-10 described E-4 8-7 overview 5-15 to 5-17, 6-2, E-3 to E-4 restarting 6-15 Display in Percent parameter (site survey utility) F-4 using Display Settings ADU menu option window EAP-Cisco Wireless 7-2 See LEAP authentication 7-2 display units, specifying in site survey utility diversity antenna F-4 xii conventions xiii to xiv organiza
Index EAP-FAST option Export button 5-31 EAP-FAST Settings window Export Profile window 5-32 EAP MSCHAPv2 Properties window - Windows XP F authenticating after profile activation/card insertion/reboot/logon 6-13 5-16 to 5-17, E-3, E-4 disabling 5-51 Fast PSP declaration of conformity statement safety compliance statement in ADU 5-39 to 5-42 in Windows XP requirements 5-16, E-3 5-39 5-22 7-14 CTS 7-14 number received successfully number retried 5-41 IEEE 802.11a D-4 IEEE 802.
Index setting with EAP-TLS setting with LEAP installing client adapter software 5-42 3-9 to 3-20 Install Wizard file 5-30 setting with PEAP (EAP-GTC) 5-45 setting with PEAP (EAP-MSCHAP V2) 5-48 setting with PEAP (EAP-MSCHAP V2) machine authentication with machine credentials 5-49 setting with WPA/WPA2 passphrase 5-27 described 1-4 installing 3-9 to 3-20 name 3-9 removing interference 9-6 2-5, 3-6 interrupt request (IRQ) 10-9 introduction to client adapters H 1-2 IP address hardware
Index described 5-15 to 5-17 disabling 5-51 enabling 5-27 to 5-30 overview 6-2 to 6-3 viewing of client adapter using EAP-TLS using PEAP (EAP-GTC) 5-21 5-47 Manual Login 4-9, 8-8 using with login scripts ADU menu option 4-9 LEAP Authentication Status window 5-29, 6-9 ASTU menu option 8-8 Manually Prompt for User Name and Password option 6-2 minimizing 6-3 for EAP-FAST LEAP option 5-28 for LEAP LEAP Settings window Max PSP 5-28 LEDs 5-33 5-29 5-8 message integrity check
Index multicast packets P number received 7-13 number transmitted PAC authority, selecting 7-13 package contents 5-34, 5-37 2-3 packets N network configurations 10-11 problems connecting to 10-11 7-13 manual 4-3, 7-5 5-33 to 5-34 5-33 to 5-34 PACs copying from private store to global store deleting 8-3 in site survey utility 5-15, 5-16, 5-33 entering password for 5-9 importing 4-4, 5-3 in ADU types of 7-10 in site survey utility for LEAP note, defined 5-16 5-16 PAC stores
Index PEAP (EAP-GTC) authentication authenticating after profile activation/card insertion/reboot/logon 6-14 described 5-17, E-3, E-4 disabling 5-51 in Windows XP 5-13 Preparing Setup window (Install Wizard) private PACs E-13 to E-14, E-16 to E-18 RADIUS servers supported 3-10, 9-3 5-24 product model numbers overview 5-39 user databases supported 5-22 to 5-23 5-42 disabling 5-51 reporting problems xvii active default 4-9, 8-3, 8-10 4-2 4-2 Profile Management (Advanced) window authen
Index Remove button Q 4-10 removing client adapter QoS 9-2 resource conflicts, resolving See quality of service in Windows 2000 QoS Packet Scheduler in Windows XP enabling on Windows 2000 enabling on Windows XP 5-51 to 5-53 RF obstructions 5-54 status of 2-5, 3-6, F-2 RM-Source, in site survey utility 5-51 roaming in site survey utility 10-10 RM-Normal, in site survey utility quality of service (QoS) described 10-9 F-11 F-11 1-6 roaming parameters, setting in the Windows Control
Index security parameters described setting site requirements for client devices 5-2 for infrastructure devices 5-13 to 5-48 Select Adapter window (site survey utility) environmental considerations F-3 guidelines F-3 Select EAP-FAST PAC window Select Network Service window F-1 to F-15 site survey utility 5-53 5-53 Select Profile, ASTU menu option F-2 F-2 performing 5-34 Select Network Component Type window 8-8 to 8-9 About window F-15 accessing help F-15 AP detailed information pa
Index software statistics compatibility with Cisco Aironet client adapters installing method of calculation 3-9 receive 3-9 to 3-20 procedures 9-3 to 9-9 uninstalling upgrading 9-6 radio viewing 7-12 to 7-15 in ASTU Tool Tip window in Windows XP A-2 to A-6 regulatory compliance 8-9 to 8-11 8-4 E-18 system requirements 10-5 2-4 1-3 SSID T 5-4 viewing Taiwan, administrative rules for client adapters in ADU 4-3, 4-5, 7-7 in ASTU 8-3, 8-11 in site survey utility technical assi
Index third-party tool, enabling in Install Wizard throughput Use Machine Information For Domain Logon parameter 3-17 for EAP-TLS 5-8, 5-9 TKIP for PEAP (EAP-GTC) option in Windows XP status of translated safety warnings for EAP-FAST 6-14 for LEAP B-1 to B-6 transmit power, in site survey utility Transmit Power Level parameter 5-29 for EAP-FAST F-11 for LEAP 5-7 5-32 5-29 Use Windows to Configure My Wireless Network Settings parameter - Windows XP E-6 7-11, 8-11 transmit statistics
Index Wi-Fi Multimedia (WMM) enabling 5-51 to 5-54 status of 7-9 Wireless Mode parameter Wireless Mode When Starting Ad Hoc Network parameter 5-10 Wireless Network Connection Properties window (Wireless Networks Tab) - Windows XP E-6 Wi-Fi Protected Access (WPA) described 5-18, E-4 enabling in Windows XP enabling with EAP-TLS enabling with LEAP Wireless Network Connection Properties window Windows XP 5-54 E-8 enabling with EAP-FAST 5-31 Wireless Network Connection Status window - Windows XP E-
Index enabling 5-26 to 5-27 setting on client and access point WPA option, in Windows XP 5-21 E-8 WPA passphrase described 5-18, E-4 disabling 5-51 enabling 5-26 to 5-27 setting on client and access point 5-21 WPA Pre-Shared Key See WPA passphrase or WPA2 passphrase WPA-PSK described 5-18, E-4 option in Windows XP E-8 Cisco Aironet 802.
