Manuals / Cisco Systems / Computer Equipment / Network Card

Cisco Systems PI21AG, CB21AG manual

Models: CB21AG PI21AG

1 170

Download 170 pages 950 b

Page 132

Manual background

Appendix A EAP Messages

PEAP-GTC and LEAP Error Messages and Prompts

Error Message The operation was canceled by the user.

Recommended Action Contact your network administrator for further assistance.

Error Message The authentication failed because Windows does not have the authentication method required for this network.

Recommended Action Contact your network administrator for further assistance.

Error Message Windows cannot connect to this network.

The user credentials were rejected by the server.

Recommended Action Contact your network administrator for further assistance.

Error Message Windows cannot connect to this network.

There is a problem with the certificate on the server required for authentication.

Recommended Action Contact your network administrator for further assistance.

Error Message Windows cannot connect to “<network-name>”

Wireless authentication failed.

Recommended Action Contact your network administrator for assistance with the specified network.

Error Message The authentication failed because of unknown reason. The error condition was reported by cryptographic subsystem.

Recommended Action Contact your network administrator for further assistance.

Error Message The network device failed to authenticate itself.

The failure can indicate an attack on your password.

Recommended Action Use a strong password to reduce the risk of compromising your password. For more information about creating a strong password, see the “Creating Strong Passwords” section on page A-9. If the authentication attempt fails again, contact your system administrator to report a rogue access device.

Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide for Windows Vista

	A-8	OL-16534-01

Image 132

Cisco Systems PI21AG, CB21AG manual

Contents

Software Release Americas HeadquartersCisco Systems, Inc 170 West Tasman Drive San Jose, CA 800 553-NETS Fax 408Turn the television or radio antenna until the interference stops Network Configurations Using Client Adapters Ad Hoc Wireless LANFCC Safety Compliance Statement PrefaceAdvanced Roaming Setting Two-Phase Tunneled AuthenticationObtaining Client Adapter Software Inserting the CardAccessing LEAP Properties for Configuration Configuring LEAPConfiguring and Starting Logging Finding the Version of the LEAP ModuleCreating Strong Passwords A-9 Antenna Installation WarningEAP Messages A-1 English Translation D-7Channels Acknowledgments and Licensing F-1Chinese Translation English Translationviii ContentsOL-16534-01 Preface AudiencePurpose Audience, page Purpose, page Organization, page Conventions, pageOrganization ConventionsVaroitus Tämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa ruumiinvammaan. Ennen kuin työskentelet minkään laitteiston parissa, ota selvää sähkökytkentöihin liittyvistä vaaroista ja tavanomaisista onnettomuuksien ehkäisykeinoista. Tässä julkaisussa esiintyvien varoitusten käännökset löydät liitteestä Translated Safety Warnings käännetyt turvallisuutta koskevat varoitukset Related Publications Obtaining Documentation, Obtaining Support, and Security GuidelinesProduct Overview and Installation Network Configurations Using Client Adapters, pageSafety information, page Unpacking the Client Adapter, page Installing the Client Adapter Driver and Software, pageIntroduction to the Client Adapters TerminologyPC-Cardbus cardHardware Components RadioRadio Antenna LEDsNetwork Configurations Using Client Adapters Ad Hoc Wireless LANSoftware Components Wireless Infrastructure with Workstations Accessing a Wired LAN Figure 1-1 Ad Hoc Wireless LANSafety information FCC Safety Compliance StatementSafety Guidelines Unpacking the Client Adapter WarningsPackage Contents System Requirementshttp//support.microsoft.com/kb/932063 http//support.microsoft.com/kb/935222Site Requirements For Infrastructure DevicesFor Client Devices Inserting the Client Adapter Inserting a PC-Cardbus Card1-10 Inserting a PCI Card Changing the BracketInsert the card see the “Inserting the Card” section on page Assemble the antenna see the “Assembling the Antenna” section on pageInserting the Card 1-12Assembling the Antenna 1-13Mounting the Antenna 1-141-15 Step 1 Perform one of the following1-16 Step 8 If the Found New Hardware Wizard window appears, click CancelStep 5 Click Wireless Software Step 7 Click Cisco Aironet Wireless LAN Client AdaptersObtaining Client Adapter Software Step 6 Click Client Adapters and Client SoftwareInstalling the Client Adapter Driver and Software 1-181-19 Figure 1-11 Cisco Aironet Installation Program WindowHardware Insertion 1-20 Figure 1-13 Cisco Aironet Installation Program-Setup Status Window1-21 Chapter 1 Product Overview and InstallationInstalling the Client Adapter Driver and Software Step 8 Click Finish1-22 Chapter 1 Product Overview and InstallationInstalling the Client Adapter Driver and Software OL-16534-01Configuring Wireless Profiles Overview of Wireless Profiles, pageAccessing Microsoft Vista Network and Sharing Center, page Creating a New Profile and Configuring Basic Settings, pageOverview of Wireless Profiles Accessing Microsoft Vista Network and Sharing CenterCreating a New Profile and Configuring Basic Settings Cisco Aironet 802.11a/b/g Wireless Adapter see Figure Chapter 2 Configuring Wireless Profiles Creating a New Profile and Configuring Basic SettingsOL-16534-01 Step 7 In this dialog box, enter information for the wireless network that you want to add.Table 2-1 lists and describes general settings for the profile. Follow the instructions in the table to configure these settings Encryption Types” section on page SettingWhat to Enter Chapter 3, “Configuring EAP Types.” The enterprise network EAP and Encryption Types” section on pageProfile Management General Settings continued Setting What to EnterSecurity and Encryption Types WEP Shared Security with Static WEP KeysWPA and WPA2 2-10802.1X with Dynamic WEP Keys 2-11Accessing a Profile That Was Created Previously CCKM Fast Secure Roaming2-12 Viewing and Changing the Settings of a Profile 2-13Figure 2-7 Network and Sharing Center Window 2-14 Figure 2-8 Wireless Network properties Dialog Box-Connection Tabis available, Choose Control Panel Manage Wireless Networks Settings dialog box. See the “Radio Measurement” section onpage 2-18 and the “Advanced Roaming Setting” section on page in Table 2-1 on page2-16 Figure 2-9 Wireless Network properties Dialog Box-Security Tab2-17 SettingWhat to Enter Radio Measurement 2-18Advanced Roaming Setting 2-192-20 Chapter 2 Configuring Wireless ProfilesViewing and Changing the Settings of a Profile OL-16534-01Configuring EAP Types Configuring EAP-FAST, page Overview of LEAP, pageHow LEAP Works, page Configuring LEAP, page Configuring PEAP-GTC, pageTwo-Phase Tunneled Authentication Two-Phase Tunneled Authentication, pageProtected Access Credentials, page How EAP-FAST WorksProtected Access Credentials Server Certificate ValidationConfiguring EAP-FAST Accessing EAP-FAST Properties for ConfigurationAccessing EAP-FAST Properties for Configuration, page Configuring EAP-FAST Settings in the Connection Tab, pageConfiguring EAP-FAST Settings in the Connection Tab Default On Default anonymousDefault On Default NoneDefault Enabled Use Protected AccessDefault Off PAC box and the Validate Server Certificate box at the same timeDefault Off Default NoneUsernames and Passwords Overview of the User Credentials TabClient Certificates Configuring EAP-FAST Settings in the User Credentials Tab 3-10Chapter 3 Configuring EAP Types Configuring EAP-FAST Figure 3-3 User Credentials Tab in EAP-FAST Properties Windowinformation about OTP, see the “Understanding PIN Mode and Token Mode with OTP” section on page3-11 Default OffUnderstanding PIN Mode and Token Mode with OTP 3-12Figure 3-4 New PIN Prompt Window Figure 3-5 Next Token Prompt WindowConfiguring EAP-FAST Settings in the Authentication Tab 3-133-14 Table 3-3 lists and describes options for authenticationFigure 3-6 Authentication Tab in EAP-FAST Properties Window Chapter 3 Configuring EAP Types Configuring EAP-FASTDefault Disabled a certificate on this computer radio button in the User3-15 Select an authenticationFinding the Version of the EAP-FAST Module 3-16Figure 3-7 About Tab in EAP-FAST Properties Window Overview of LEAP How LEAP Works3-17 Configuring LEAP Accessing LEAP Properties for ConfigurationAccessing LEAP Properties for Configuration, page Configuring LEAP Settings in the Network Credentials Tab, pageConfiguring LEAP Settings in the Network Credentials Tab 3-19Figure 3-8 Wireless Network Properties Window 3-20 SettingsDefault On Table 3-4 LEAP Network Credentials SettingsOverview of PEAP-GTC Finding the Version of the LEAP Module3-21 Default OffHow PEAP-GTC Works 3-22Configuring PEAP-GTC Accessing PEAP-GTC Properties for ConfigurationAccessing PEAP-GTC Properties for Configuration, page Configuring PEAP-GTC Settings in the Connection Tab, page3-24 Figure 3-10 Wireless Network Properties WindowChapter 3 Configuring EAP Types Configuring PEAP-GTC OL-16534-01Configuring PEAP-GTC Settings in the Connection Tab 3-25Chapter 3 Configuring EAP Types Configuring PEAP-GTC Figure 3-11 Connection Tab in PEAP-GTC Properties WindowDefault anonymous If the Validate server certificate box is checked and the Do notprompt user to authorize new servers or trusted certificate If the Validate server certificate box is checked but the Do notConfiguring PEAP-GTC Settings in the User Credentials Tab 3-27Default None Default Offand Token Mode with OTP” section on page Default Offpassword option which is the case for the Prompt automatically for username and3-29 Understanding PIN Mode and Token Mode with OTPDefault Off Default OffUnderstanding PEAP-GTC Authentication Finding the Version of the PEAP-GTC Module3-30 Figure 3-14 Next Token Prompt WindowPerforming Administrative Tasks Using Microsoft Tools to Perform Administrative Tasks, pageThe EAP-FAST XML Schema, page The PEAP-GTC XML Schema, page The LEAP XML Schema, page Logging for EAP Modules, pageUsing Microsoft Tools to Perform Administrative Tasks Overview of Group Policy ObjectsAdding a Group Policy Object Editor Overview of Group Policy Objects, pageCreating a EAP Group Policy Object in Windows Vista a. Go to File Add/Remove Snap-ing. From the Select Group Policy Object dialog box, click Finish Configuring Machine Authentication for EAP-FAST Configuring Single Sign-On for EAP-FAST Configuring Machine Authentication for PEAP-GTCConfiguring Single Sign-On for PEAP-GTC and LEAP The EAP-FAST XML Schema xsdocumentation xselement xschoice xselement name=authenticateWithToken xscomplexType xssequence 4-10 xselement xselement name=sendViaInnerMethod xscomplexType xsall4-11 xscomplexType name=PasswordFromProfile xssimpleContent4-12 xsannotation xselement4-13 xsannotation xselement xschoice xselement name=enableFastReconnect4-14 xsannotation4-15 xssimpleType xsrestriction base=xsstring xsenumeration value=exactly4-16 xselement name=anyServerName type=Empty xsannotationThe PEAP-GTC XML Schema 4-174-18 xselement name=authenticateWithPassword xscomplexType xssequence4-19 xscomplexContent xscomplexType xscomplexType name=IdentityPattern4-20 xscomplexType name=TokenSource xschoice4-21 xschoice xssequence xscomplexType4-22 xsextension base=NonEmptyString xsattribute name=match use=requiredThe LEAP XML Schema 4-234-24 attributeFormDefault=unqualified xselement name=eapLeap type=EapLeap4-25 xschoiceConfiguring and Starting Logging Configuring and Starting Logging, pageStep 1 Choose Start All Programs Accessories Step 2 Right-click Command Prompt and select Run as administratorDisabling Logging and Flushing Internal Buffers wevtutil sl Cisco-EAP-FAST/Debug /efalsewevtutil sl Cisco-EAP-PEAP/Debug /efalse wevtutil sl Cisco-EAP-LEAP/Debug /efalseLocating Log Files wevtutil sl Cisco-EAP-FAST/Debug /lfn“pathtoetllogfile”wevtutil sl Cisco-EAP-PEAP/Debug /lfn“pathtoetllogfile” wevtutil sl Cisco-EAP-LEAP/Debug /lfn“pathtoetllogfile”Routine Procedures Removing a Client Adapter, pageUpgrading the Client Adapter Software, page C H A P T E RRemoving a Client Adapter Removing a PC-Cardbus CardRemoving a PCI Card Upgrading the Client Adapter Software Step 5 Click Update the previous installation Figure 5-3 Cisco Aironet Installation Program-Setup Status Window Chapter 5 Routine Procedures Upgrading the Client Adapter SoftwareOL-16534-01 Chapter 5 Routine Procedures Upgrading the Client Adapter Software Step 8 Click FinishOL-16534-01 Troubleshooting and Diagnostics Troubleshooting with Cisco Aironet Client Diagnostics, pageEnabling Client Reporting, page C H A P T E RTroubleshooting with Cisco Aironet Client Diagnostics Figure 6-1 Network and Sharing Center WindowFigure 6-2 Cisco Aironet Client Diagnostics Dialog Box Figure 6-3 Cisco Aironet Client Diagnostics Dialog Box-Choose AdapterFigure 6-5 Cisco Aironet Client Diagnostics Dialog Box-Testing Delay Figure 6-6 Cisco Aironet Client Diagnostics Dialog Box-Test Window Figure 6-7 Aironet Desktop Utility-Stop Running DiagnosticsEnabling Client Reporting EAP-FAST Error Messages and Prompts EAP-FAST Error Messages and Prompts, page A-1PEAP-GTC and LEAP Error Messages and Prompts, page A-6 Creating Strong Passwords, page A-9Appendix A EAP Messages EAP-FAST Error Messages and Prompts Page Recommended Action Enter a username Recommended Action Press OK to continue PEAP-GTC and LEAP Error Messages and Prompts Page Page Creating Strong Passwords Characteristics of Strong PasswordsCharacteristics of Weak Passwords Password Security Basics A-10Technical Specifications Radio Specifications, page B-3A P P E N D I X B Physical Specifications Radio Specifications 5150 to 5250 MHz 5250 to 5350 MHz5470 to 5725 MHz 5725 to 5805 MHzIndoor typical Outdoor typicalIndoor typical Outdoor typicalPower Specifications Safety and Regulatory Compliance SpecificationsTranslated Safety Warnings Antenna Installation Warning, page C-3A P P E N D I X C Explosive Device Proximity Warning, page C-2Explosive Device Proximity Warning Antenna Installation Warning Warning for Laptop Users Page Page Declarations of Conformity and Regulatory Information A P P E N D I X DDepartment of Communications - Canada, page D-3 Declaration of Conformity for RF Exposure, page D-7FCC Certification Number LDK102050 CB21AG Department of Communications - Canada European Community, Switzerland, Norway, Iceland, and LiechtensteinCanadian Compliance Statement Page Cisco Aironet CB21AG Wireless LAN Client Adapter Declaration of Conformity StatementAppendix D Declarations of Conformity and Regulatory Information European Community, Switzerland, Norway, Iceland, and LiechtensteinCisco Aironet PI21AG Wireless LAN Client Adapter Appendix D Declarations of Conformity and Regulatory InformationEuropean Community, Switzerland, Norway, Iceland, and Liechtenstein OL-16534-01Declaration of Conformity for RF Exposure Japanese TranslationEnglish Translation 03-6434-65002.4- and 5-GHz Client Adapters Chinese TranslationEnglish Translation Brazil/Anatel Approval 5-GHz Client AdaptersChinese Translation English TranslationAIR-CB21AG-W-K9 D-10Appendix D Declarations of Conformity and Regulatory Information Brazil/Anatel ApprovalAIR-PI21AG-W-K9 D-11Appendix D Declarations of Conformity and Regulatory Information Brazil/Anatel ApprovalD-12 Appendix D Declarations of Conformity and Regulatory InformationBrazil/Anatel Approval OL-16534-01Channels, page E-2 Maximum Power Levels and Antenna Gains, page E-4 A P P E N D I X EChannels, Power Levels, and Antenna Gains Channels IEEE 802.11aIEEE 802.11b/g Regulatory DomainsMaximum Power Levels and Antenna Gains IEEE 802.11bIEEE 802.11a IEEE 802.11g Appendix E Channels, Power Levels, and Antenna Gains Maximum Power Levels and Antenna GainsOL-16534-01 Acknowledgments and Licensing A P P E N D I X FAppendix F Acknowledgments and Licensing Appendix F Acknowledgments and Licensing OL-16534-01Appendix F Acknowledgments and Licensing OL-16534-01Abbreviations A P P E N D I X GTable G-1 List of Acronyms continued