Manuals / Cisco Systems / Computer Equipment / Network Card

Cisco Systems CB21AG, PI21AG manual

Models: CB21AG PI21AG

1 170

Download 170 pages 950 b

Page 131

Manual background

Appendix A EAP Messages

PEAP-GTC and LEAP Error Messages and Prompts

Error Message You have connected to a server with the following server name:

<server-name>

This server name does not match the specified server name(s).

In addition, the server certificate is signed by the following Root Certification Authority (CA):

<ca-name>

This Root CA does not match the specified trusted Root CA(s).

Do you want to accept this connection?

Warning: You might compromise your security if you connect to an unsecured server that is signed by an untrusted Root CA.

Recommended Action If you want to connect to this server even though it may present a security risk, click Yes. Otherwise, click No.

Error Message You have connected to a server with the following server name:

<server-name>

The server certificate is signed by the following Root Certification Authority (CA):

<ca-name>

This Root CA does not match the specified trusted Root CA(s).

Do you want to accept this connection?

Warning: You might compromise your security if you connect to an unsecured server that is signed by an untrusted Root CA.

Recommended Action If you want to connect to this server even though it may present a security risk, click Yes. Otherwise, click No.

Error Message You have connected to a server with the following server name:

<server-name>

This server name does not match the specified server name(s).

Do you want to accept this connection?

Warning: You might compromise your security if you connect to an unsecured server.

Recommended Action If you want to connect to this server even though it may present a security risk, click Yes. Otherwise, click No.

Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide for Windows Vista

	OL-16534-01	A-7

Image 131

Cisco Systems CB21AG, PI21AG manual

Contents

800 553-NETS Fax 408 Software ReleaseAmericas Headquarters Cisco Systems, Inc 170 West Tasman Drive San Jose, CATurn the television or radio antenna until the interference stops Preface Network Configurations Using Client AdaptersAd Hoc Wireless LAN FCC Safety Compliance StatementInserting the Card Advanced Roaming SettingTwo-Phase Tunneled Authentication Obtaining Client Adapter SoftwareFinding the Version of the LEAP Module Accessing LEAP Properties for ConfigurationConfiguring LEAP Configuring and Starting LoggingEnglish Translation D-7 Creating Strong Passwords A-9Antenna Installation Warning EAP Messages A-1English Translation ChannelsAcknowledgments and Licensing F-1 Chinese TranslationOL-16534-01 viiiContents Audience, page Purpose, page Organization, page Conventions, page PrefaceAudience PurposeConventions OrganizationVaroitus Tämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa ruumiinvammaan. Ennen kuin työskentelet minkään laitteiston parissa, ota selvää sähkökytkentöihin liittyvistä vaaroista ja tavanomaisista onnettomuuksien ehkäisykeinoista. Tässä julkaisussa esiintyvien varoitusten käännökset löydät liitteestä Translated Safety Warnings käännetyt turvallisuutta koskevat varoitukset Obtaining Documentation, Obtaining Support, and Security Guidelines Related PublicationsInstalling the Client Adapter Driver and Software, page Product Overview and InstallationNetwork Configurations Using Client Adapters, page Safety information, page Unpacking the Client Adapter, pagecard Introduction to the Client AdaptersTerminology PC-CardbusLEDs Hardware ComponentsRadio Radio AntennaSoftware Components Network Configurations Using Client AdaptersAd Hoc Wireless LAN Figure 1-1 Ad Hoc Wireless LAN Wireless Infrastructure with Workstations Accessing a Wired LANSafety Guidelines Safety informationFCC Safety Compliance Statement Warnings Unpacking the Client Adapterhttp//support.microsoft.com/kb/935222 Package ContentsSystem Requirements http//support.microsoft.com/kb/932063For Client Devices Site RequirementsFor Infrastructure Devices 1-10 Inserting the Client AdapterInserting a PC-Cardbus Card Assemble the antenna see the “Assembling the Antenna” section on page Inserting a PCI CardChanging the Bracket Insert the card see the “Inserting the Card” section on page1-12 Inserting the Card1-13 Assembling the Antenna1-14 Mounting the AntennaStep 1 Perform one of the following 1-15Step 8 If the Found New Hardware Wizard window appears, click Cancel 1-16Step 6 Click Client Adapters and Client Software Step 5 Click Wireless SoftwareStep 7 Click Cisco Aironet Wireless LAN Client Adapters Obtaining Client Adapter Software1-18 Installing the Client Adapter Driver and SoftwareHardware Insertion 1-19Figure 1-11 Cisco Aironet Installation Program Window Figure 1-13 Cisco Aironet Installation Program-Setup Status Window 1-20Step 8 Click Finish 1-21Chapter 1 Product Overview and Installation Installing the Client Adapter Driver and SoftwareOL-16534-01 1-22Chapter 1 Product Overview and Installation Installing the Client Adapter Driver and SoftwareCreating a New Profile and Configuring Basic Settings, page Configuring Wireless ProfilesOverview of Wireless Profiles, page Accessing Microsoft Vista Network and Sharing Center, pageAccessing Microsoft Vista Network and Sharing Center Overview of Wireless ProfilesCreating a New Profile and Configuring Basic Settings Cisco Aironet 802.11a/b/g Wireless Adapter see Figure OL-16534-01 Chapter 2 Configuring Wireless ProfilesCreating a New Profile and Configuring Basic Settings Step 7 In this dialog box, enter information for the wireless network that you want to add.Table 2-1 lists and describes general settings for the profile. Follow the instructions in the table to configure these settings What to Enter Encryption Types” section on pageSetting Profile Management General Settings continued Chapter 3, “Configuring EAP Types.” The enterprise network EAPand Encryption Types” section on page What to Enter Setting2-10 Security and Encryption TypesWEP Shared Security with Static WEP Keys WPA and WPA22-11 802.1X with Dynamic WEP Keys2-12 Accessing a Profile That Was Created PreviouslyCCKM Fast Secure Roaming Figure 2-7 Network and Sharing Center Window Viewing and Changing the Settings of a Profile2-13 Figure 2-8 Wireless Network properties Dialog Box-Connection Tab 2-14in Table 2-1 on page is available, Choose Control Panel Manage Wireless NetworksSettings dialog box. See the “Radio Measurement” section on page 2-18 and the “Advanced Roaming Setting” section on pageFigure 2-9 Wireless Network properties Dialog Box-Security Tab 2-16What to Enter 2-17Setting 2-18 Radio Measurement2-19 Advanced Roaming SettingOL-16534-01 2-20Chapter 2 Configuring Wireless Profiles Viewing and Changing the Settings of a ProfileConfiguring PEAP-GTC, page Configuring EAP TypesConfiguring EAP-FAST, page Overview of LEAP, page How LEAP Works, page Configuring LEAP, pageHow EAP-FAST Works Two-Phase Tunneled AuthenticationTwo-Phase Tunneled Authentication, page Protected Access Credentials, pageServer Certificate Validation Protected Access CredentialsConfiguring EAP-FAST Settings in the Connection Tab, page Configuring EAP-FASTAccessing EAP-FAST Properties for Configuration Accessing EAP-FAST Properties for Configuration, pageConfiguring EAP-FAST Settings in the Connection Tab Default anonymous Default OnUse Protected Access Default OnDefault None Default EnabledDefault None Default OffPAC box and the Validate Server Certificate box at the same time Default OffClient Certificates Usernames and PasswordsOverview of the User Credentials Tab Figure 3-3 User Credentials Tab in EAP-FAST Properties Window Configuring EAP-FAST Settings in the User Credentials Tab3-10 Chapter 3 Configuring EAP Types Configuring EAP-FASTDefault Off information about OTP, see the “Understanding PIN Mode and TokenMode with OTP” section on page 3-11Figure 3-5 Next Token Prompt Window Understanding PIN Mode and Token Mode with OTP3-12 Figure 3-4 New PIN Prompt Window3-13 Configuring EAP-FAST Settings in the Authentication TabChapter 3 Configuring EAP Types Configuring EAP-FAST 3-14Table 3-3 lists and describes options for authentication Figure 3-6 Authentication Tab in EAP-FAST Properties WindowSelect an authentication Default Disableda certificate on this computer radio button in the User 3-15Figure 3-7 About Tab in EAP-FAST Properties Window Finding the Version of the EAP-FAST Module3-16 3-17 Overview of LEAPHow LEAP Works Configuring LEAP Settings in the Network Credentials Tab, page Configuring LEAPAccessing LEAP Properties for Configuration Accessing LEAP Properties for Configuration, pageFigure 3-8 Wireless Network Properties Window Configuring LEAP Settings in the Network Credentials Tab3-19 Table 3-4 LEAP Network Credentials Settings 3-20Settings Default OnDefault Off Overview of PEAP-GTCFinding the Version of the LEAP Module 3-213-22 How PEAP-GTC WorksConfiguring PEAP-GTC Settings in the Connection Tab, page Configuring PEAP-GTCAccessing PEAP-GTC Properties for Configuration Accessing PEAP-GTC Properties for Configuration, pageOL-16534-01 3-24Figure 3-10 Wireless Network Properties Window Chapter 3 Configuring EAP Types Configuring PEAP-GTCFigure 3-11 Connection Tab in PEAP-GTC Properties Window Configuring PEAP-GTC Settings in the Connection Tab3-25 Chapter 3 Configuring EAP Types Configuring PEAP-GTCIf the Validate server certificate box is checked but the Do not Default anonymousIf the Validate server certificate box is checked and the Do not prompt user to authorize new servers or trusted certificateDefault Off Configuring PEAP-GTC Settings in the User Credentials Tab3-27 Default Nonewhich is the case for the Prompt automatically for username and and Token Mode with OTP” section on pageDefault Off password optionDefault Off 3-29Understanding PIN Mode and Token Mode with OTP Default OffFigure 3-14 Next Token Prompt Window Understanding PEAP-GTC AuthenticationFinding the Version of the PEAP-GTC Module 3-30The LEAP XML Schema, page Logging for EAP Modules, page Performing Administrative TasksUsing Microsoft Tools to Perform Administrative Tasks, page The EAP-FAST XML Schema, page The PEAP-GTC XML Schema, pageOverview of Group Policy Objects, page Using Microsoft Tools to Perform Administrative TasksOverview of Group Policy Objects Adding a Group Policy Object Editorg. From the Select Group Policy Object dialog box, click Finish Creating a EAP Group Policy Object in Windows Vistaa. Go to File Add/Remove Snap-in Configuring Machine Authentication for EAP-FAST Configuring Single Sign-On for PEAP-GTC and LEAP Configuring Single Sign-On for EAP-FASTConfiguring Machine Authentication for PEAP-GTC The EAP-FAST XML Schema xsdocumentation xselement xschoice xselement name=authenticateWithToken xscomplexType xssequence xselement xselement name=sendViaInnerMethod xscomplexType xsall 4-10xscomplexType name=PasswordFromProfile xssimpleContent 4-11xsannotation xselement 4-12xsannotation xselement xschoice xselement name=enableFastReconnect 4-13xsannotation 4-14xssimpleType xsrestriction base=xsstring xsenumeration value=exactly 4-15xselement name=anyServerName type=Empty xsannotation 4-164-17 The PEAP-GTC XML Schemaxselement name=authenticateWithPassword xscomplexType xssequence 4-18xscomplexContent xscomplexType xscomplexType name=IdentityPattern 4-19xscomplexType name=TokenSource xschoice 4-20xschoice xssequence xscomplexType 4-21xsextension base=NonEmptyString xsattribute name=match use=required 4-224-23 The LEAP XML SchemaattributeFormDefault=unqualified xselement name=eapLeap type=EapLeap 4-24xschoice 4-25Step 2 Right-click Command Prompt and select Run as administrator Configuring and Starting LoggingConfiguring and Starting Logging, page Step 1 Choose Start All Programs Accessorieswevtutil sl Cisco-EAP-LEAP/Debug /efalse Disabling Logging and Flushing Internal Bufferswevtutil sl Cisco-EAP-FAST/Debug /efalse wevtutil sl Cisco-EAP-PEAP/Debug /efalsewevtutil sl Cisco-EAP-LEAP/Debug /lfn“pathtoetllogfile” Locating Log Fileswevtutil sl Cisco-EAP-FAST/Debug /lfn“pathtoetllogfile” wevtutil sl Cisco-EAP-PEAP/Debug /lfn“pathtoetllogfile”C H A P T E R Routine ProceduresRemoving a Client Adapter, page Upgrading the Client Adapter Software, pageRemoving a PCI Card Removing a Client AdapterRemoving a PC-Cardbus Card Upgrading the Client Adapter Software Step 5 Click Update the previous installation OL-16534-01 Figure 5-3 Cisco Aironet Installation Program-Setup Status WindowChapter 5 Routine Procedures Upgrading the Client Adapter Software OL-16534-01 Chapter 5 Routine Procedures Upgrading the Client Adapter SoftwareStep 8 Click Finish C H A P T E R Troubleshooting and DiagnosticsTroubleshooting with Cisco Aironet Client Diagnostics, page Enabling Client Reporting, pageFigure 6-1 Network and Sharing Center Window Troubleshooting with Cisco Aironet Client DiagnosticsFigure 6-3 Cisco Aironet Client Diagnostics Dialog Box-Choose Adapter Figure 6-2 Cisco Aironet Client Diagnostics Dialog BoxFigure 6-5 Cisco Aironet Client Diagnostics Dialog Box-Testing Delay Figure 6-7 Aironet Desktop Utility-Stop Running Diagnostics Figure 6-6 Cisco Aironet Client Diagnostics Dialog Box-Test WindowEnabling Client Reporting Creating Strong Passwords, page A-9 EAP-FAST Error Messages and PromptsEAP-FAST Error Messages and Prompts, page A-1 PEAP-GTC and LEAP Error Messages and Prompts, page A-6Appendix A EAP Messages EAP-FAST Error Messages and Prompts Page Recommended Action Enter a username Recommended Action Press OK to continue PEAP-GTC and LEAP Error Messages and Prompts Page Page Characteristics of Weak Passwords Creating Strong PasswordsCharacteristics of Strong Passwords A-10 Password Security BasicsA P P E N D I X B Technical SpecificationsRadio Specifications, page B-3 Physical Specifications Radio Specifications 5725 to 5805 MHz 5150 to 5250 MHz5250 to 5350 MHz 5470 to 5725 MHzOutdoor typical Indoor typicalOutdoor typical Indoor typicalSafety and Regulatory Compliance Specifications Power SpecificationsExplosive Device Proximity Warning, page C-2 Translated Safety WarningsAntenna Installation Warning, page C-3 A P P E N D I X CExplosive Device Proximity Warning Antenna Installation Warning Warning for Laptop Users Page Page Declaration of Conformity for RF Exposure, page D-7 Declarations of Conformity and Regulatory InformationA P P E N D I X D Department of Communications - Canada, page D-3FCC Certification Number LDK102050 CB21AG Canadian Compliance Statement Department of Communications - CanadaEuropean Community, Switzerland, Norway, Iceland, and Liechtenstein Page European Community, Switzerland, Norway, Iceland, and Liechtenstein Cisco Aironet CB21AG Wireless LAN Client AdapterDeclaration of Conformity Statement Appendix D Declarations of Conformity and Regulatory InformationOL-16534-01 Cisco Aironet PI21AG Wireless LAN Client AdapterAppendix D Declarations of Conformity and Regulatory Information European Community, Switzerland, Norway, Iceland, and Liechtenstein03-6434-6500 Declaration of Conformity for RF ExposureJapanese Translation English TranslationEnglish Translation 2.4- and 5-GHz Client AdaptersChinese Translation English Translation Brazil/Anatel Approval5-GHz Client Adapters Chinese TranslationBrazil/Anatel Approval AIR-CB21AG-W-K9D-10 Appendix D Declarations of Conformity and Regulatory InformationBrazil/Anatel Approval AIR-PI21AG-W-K9D-11 Appendix D Declarations of Conformity and Regulatory InformationOL-16534-01 D-12Appendix D Declarations of Conformity and Regulatory Information Brazil/Anatel ApprovalChannels, Power Levels, and Antenna Gains Channels, page E-2 Maximum Power Levels and Antenna Gains, page E-4A P P E N D I X E IEEE 802.11a ChannelsRegulatory Domains IEEE 802.11b/gIEEE 802.11a Maximum Power Levels and Antenna GainsIEEE 802.11b IEEE 802.11g OL-16534-01 Appendix E Channels, Power Levels, and Antenna GainsMaximum Power Levels and Antenna Gains A P P E N D I X F Acknowledgments and LicensingAppendix F Acknowledgments and Licensing OL-16534-01 Appendix F Acknowledgments and LicensingOL-16534-01 Appendix F Acknowledgments and LicensingA P P E N D I X G AbbreviationsList of Acronyms continued Table G-1