Password Security Basics, A-10 | Cisco Systems PI21AG, CB21AG

Image 134

Cisco Systems PI21AG, CB21AG manual Password Security Basics, A-10

Contents

Cisco Systems, Inc 170 West Tasman Drive San Jose, CA Software ReleaseAmericas Headquarters 800 553-NETS Fax 408 Turn the television or radio antenna until the interference stops FCC Safety Compliance Statement Network Configurations Using Client AdaptersAd Hoc Wireless LAN Preface Obtaining Client Adapter Software Advanced Roaming SettingTwo-Phase Tunneled Authentication Inserting the Card Configuring and Starting Logging Accessing LEAP Properties for ConfigurationConfiguring LEAP Finding the Version of the LEAP Module EAP Messages A-1 Creating Strong Passwords A-9Antenna Installation Warning English Translation D-7 Chinese Translation ChannelsAcknowledgments and Licensing F-1 English Translation viii OL-16534-01 Purpose PrefaceAudience Audience, page Purpose, page Organization, page Conventions, page Organization Conventions Varoitus Tämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa ruumiinvammaan. Ennen kuin työskentelet minkään laitteiston parissa, ota selvää sähkökytkentöihin liittyvistä vaaroista ja tavanomaisista onnettomuuksien ehkäisykeinoista. Tässä julkaisussa esiintyvien varoitusten käännökset löydät liitteestä Translated Safety Warnings käännetyt turvallisuutta koskevat varoitukset Related Publications Obtaining Documentation, Obtaining Support, and Security Guidelines Safety information, page Unpacking the Client Adapter, page Product Overview and InstallationNetwork Configurations Using Client Adapters, page Installing the Client Adapter Driver and Software, page PC-Cardbus Introduction to the Client AdaptersTerminology card Radio Antenna Hardware ComponentsRadio LEDs Software Components Network Configurations Using Client AdaptersAd Hoc Wireless LAN Wireless Infrastructure with Workstations Accessing a Wired LAN Figure 1-1 Ad Hoc Wireless LAN Safety Guidelines Safety informationFCC Safety Compliance Statement Unpacking the Client Adapter Warnings http//support.microsoft.com/kb/932063 Package ContentsSystem Requirements http//support.microsoft.com/kb/935222 For Client Devices Site RequirementsFor Infrastructure Devices 1-10 Inserting the Client AdapterInserting a PC-Cardbus Card Insert the card see the “Inserting the Card” section on page Inserting a PCI CardChanging the Bracket Assemble the antenna see the “Assembling the Antenna” section on page Inserting the Card 1-12 Assembling the Antenna 1-13 Mounting the Antenna 1-14 1-15 Step 1 Perform one of the following 1-16 Step 8 If the Found New Hardware Wizard window appears, click Cancel Obtaining Client Adapter Software Step 5 Click Wireless SoftwareStep 7 Click Cisco Aironet Wireless LAN Client Adapters Step 6 Click Client Adapters and Client Software Installing the Client Adapter Driver and Software 1-18 Hardware Insertion 1-19Figure 1-11 Cisco Aironet Installation Program Window 1-20 Figure 1-13 Cisco Aironet Installation Program-Setup Status Window 1-21 Step 8 Click Finish 1-22 Accessing Microsoft Vista Network and Sharing Center, page Configuring Wireless ProfilesOverview of Wireless Profiles, page Creating a New Profile and Configuring Basic Settings, page Overview of Wireless Profiles Accessing Microsoft Vista Network and Sharing Center Creating a New Profile and Configuring Basic Settings Cisco Aironet 802.11a/b/g Wireless Adapter see Figure OL-16534-01 Step 7 In this dialog box, enter information for the wireless network that you want to add.Table 2-1 lists and describes general settings for the profile. Follow the instructions in the table to configure these settings What to Enter Encryption Types” section on pageSetting Profile Management General Settings continued Chapter 3, “Configuring EAP Types.” The enterprise network EAPand Encryption Types” section on page Setting WPA and WPA2 Security and Encryption TypesWEP Shared Security with Static WEP Keys 2-10 802.1X with Dynamic WEP Keys 2-11 2-12 Accessing a Profile That Was Created PreviouslyCCKM Fast Secure Roaming Figure 2-7 Network and Sharing Center Window Viewing and Changing the Settings of a Profile2-13 2-14 Figure 2-8 Wireless Network properties Dialog Box-Connection Tab page 2-18 and the “Advanced Roaming Setting” section on page is available, Choose Control Panel Manage Wireless NetworksSettings dialog box. See the “Radio Measurement” section on in Table 2-1 on page 2-16 Figure 2-9 Wireless Network properties Dialog Box-Security Tab 2-17 Radio Measurement 2-18 Advanced Roaming Setting 2-19 2-20 How LEAP Works, page Configuring LEAP, page Configuring EAP TypesConfiguring EAP-FAST, page Overview of LEAP, page Configuring PEAP-GTC, page Protected Access Credentials, page Two-Phase Tunneled AuthenticationTwo-Phase Tunneled Authentication, page How EAP-FAST Works Protected Access Credentials Server Certificate Validation Accessing EAP-FAST Properties for Configuration, page Configuring EAP-FASTAccessing EAP-FAST Properties for Configuration Configuring EAP-FAST Settings in the Connection Tab, page Configuring EAP-FAST Settings in the Connection Tab Default On Default anonymous Default Enabled Default OnDefault None Use Protected Access Default Off PAC box and the Validate Server Certificate box at the same time Client Certificates Usernames and PasswordsOverview of the User Credentials Tab Figure 3-3 User Credentials Tab in EAP-FAST Properties Window Configuring EAP-FAST Settings in the User Credentials Tab3-10 3-11 information about OTP, see the “Understanding PIN Mode and TokenMode with OTP” section on page Figure 3-4 New PIN Prompt Window Understanding PIN Mode and Token Mode with OTP3-12 Figure 3-5 Next Token Prompt Window Configuring EAP-FAST Settings in the Authentication Tab 3-13 Figure 3-6 Authentication Tab in EAP-FAST Properties Window 3-14Table 3-3 lists and describes options for authentication 3-15 Default Disableda certificate on this computer radio button in the User Select an authentication Figure 3-7 About Tab in EAP-FAST Properties Window Finding the Version of the EAP-FAST Module3-16 3-17 Overview of LEAPHow LEAP Works Accessing LEAP Properties for Configuration, page Configuring LEAPAccessing LEAP Properties for Configuration Configuring LEAP Settings in the Network Credentials Tab, page Figure 3-8 Wireless Network Properties Window Configuring LEAP Settings in the Network Credentials Tab3-19 Table 3-4 LEAP Network Credentials Settings 3-20Settings LEAP Network Credentials 3-21 Overview of PEAP-GTCFinding the Version of the LEAP Module How PEAP-GTC Works 3-22 Accessing PEAP-GTC Properties for Configuration, page Configuring PEAP-GTCAccessing PEAP-GTC Properties for Configuration Configuring PEAP-GTC Settings in the Connection Tab, page 3-24 Figure 3-10 Wireless Network Properties Window Figure 3-11 Connection Tab in PEAP-GTC Properties Window Configuring PEAP-GTC Settings in the Connection Tab3-25 prompt user to authorize new servers or trusted certificate Default anonymousIf the Validate server certificate box is checked and the Do not If the Validate server certificate box is checked but the Do not Configuring PEAP-GTC Settings in the User Credentials Tab 3-27 and Token Mode with OTP” section on page Default Offpassword option which is the case for the Prompt automatically for username and Figure 3-13 New PIN Prompt Window 3-29PEAP-GTC User Credentials Options continued 3-30 Understanding PEAP-GTC AuthenticationFinding the Version of the PEAP-GTC Module Figure 3-14 Next Token Prompt Window The EAP-FAST XML Schema, page The PEAP-GTC XML Schema, page Performing Administrative TasksUsing Microsoft Tools to Perform Administrative Tasks, page The LEAP XML Schema, page Logging for EAP Modules, page Adding a Group Policy Object Editor Using Microsoft Tools to Perform Administrative TasksOverview of Group Policy Objects Overview of Group Policy Objects, page g. From the Select Group Policy Object dialog box, click Finish Creating a EAP Group Policy Object in Windows Vistaa. Go to File Add/Remove Snap-in Configuring Machine Authentication for EAP-FAST Configuring Single Sign-On for PEAP-GTC and LEAP Configuring Single Sign-On for EAP-FASTConfiguring Machine Authentication for PEAP-GTC The EAP-FAST XML Schema xsdocumentation xselement xschoice xselement name=authenticateWithToken xscomplexType xssequence 4-10 xselement xselement name=sendViaInnerMethod xscomplexType xsall 4-11 xscomplexType name=PasswordFromProfile xssimpleContent 4-12 4-13 xsannotation xselement xschoice xselement name=enableFastReconnect 4-14 4-15 xssimpleType xsrestriction base=xsstring xsenumeration value=exactly 4-16 xselement name=anyServerName type=Empty xsannotation The PEAP-GTC XML Schema 4-17 4-18 4-19 xscomplexContent xscomplexType xscomplexType name=IdentityPattern 4-20 xscomplexType name=TokenSource xschoice 4-21 xschoice xssequence xscomplexType 4-22 The LEAP XML Schema 4-23 4-24 attributeFormDefault=unqualified xselement name=eapLeap type=EapLeap 4-25 Step 1 Choose Start All Programs Accessories Configuring and Starting LoggingConfiguring and Starting Logging, page Step 2 Right-click Command Prompt and select Run as administrator wevtutil sl Cisco-EAP-PEAP/Debug /efalse Disabling Logging and Flushing Internal Bufferswevtutil sl Cisco-EAP-FAST/Debug /efalse wevtutil sl Cisco-EAP-LEAP/Debug /efalse wevtutil sl Cisco-EAP-PEAP/Debug /lfn“pathtoetllogfile” Locating Log Fileswevtutil sl Cisco-EAP-FAST/Debug /lfn“pathtoetllogfile” wevtutil sl Cisco-EAP-LEAP/Debug /lfn“pathtoetllogfile” Upgrading the Client Adapter Software, page Routine ProceduresRemoving a Client Adapter, page Removing a PCI Card Removing a Client AdapterRemoving a PC-Cardbus Card Upgrading the Client Adapter Software Step 5 Click Update the previous installation Figure 5-3 Cisco Aironet Installation Program-Setup Status Window OL-16534-01 Enabling Client Reporting, page Troubleshooting and DiagnosticsTroubleshooting with Cisco Aironet Client Diagnostics, page Troubleshooting with Cisco Aironet Client Diagnostics Figure 6-1 Network and Sharing Center Window Figure 6-2 Cisco Aironet Client Diagnostics Dialog Box Figure 6-3 Cisco Aironet Client Diagnostics Dialog Box-Choose Adapter Figure 6-5 Cisco Aironet Client Diagnostics Dialog Box-Testing Delay Figure 6-6 Cisco Aironet Client Diagnostics Dialog Box-Test Window Figure 6-7 Aironet Desktop Utility-Stop Running Diagnostics Enabling Client Reporting PEAP-GTC and LEAP Error Messages and Prompts, page A-6 EAP-FAST Error Messages and PromptsEAP-FAST Error Messages and Prompts, page A-1 Creating Strong Passwords, page A-9 Appendix A EAP Messages EAP-FAST Error Messages and Prompts Page Recommended Action Enter a username Recommended Action Press OK to continue PEAP-GTC and LEAP Error Messages and Prompts Page Page Characteristics of Weak Passwords Creating Strong PasswordsCharacteristics of Strong Passwords Password Security Basics A-10 A P P E N D I X B Technical SpecificationsRadio Specifications, page B-3 Physical Specifications Radio Specifications 5470 to 5725 MHz 5150 to 5250 MHz5250 to 5350 MHz 5725 to 5805 MHz Indoor typical Outdoor typical Power Specifications Safety and Regulatory Compliance Specifications A P P E N D I X C Translated Safety WarningsAntenna Installation Warning, page C-3 Explosive Device Proximity Warning, page C-2 Explosive Device Proximity Warning Antenna Installation Warning Warning for Laptop Users Page Page Department of Communications - Canada, page D-3 Declarations of Conformity and Regulatory InformationA P P E N D I X D Declaration of Conformity for RF Exposure, page D-7 FCC Certification Number LDK102050 CB21AG Canadian Compliance Statement Department of Communications - CanadaEuropean Community, Switzerland, Norway, Iceland, and Liechtenstein Page Cisco Aironet CB21AG Wireless LAN Client Adapter Declaration of Conformity Statement Cisco Aironet PI21AG Wireless LAN Client Adapter English Translation Declaration of Conformity for RF ExposureJapanese Translation 03-6434-6500 English Translation 2.4- and 5-GHz Client AdaptersChinese Translation Brazil/Anatel Approval 5-GHz Client Adapters AIR-CB21AG-W-K9 D-10 AIR-PI21AG-W-K9 D-11 D-12 Channels, Power Levels, and Antenna Gains Channels, page E-2 Maximum Power Levels and Antenna Gains, page E-4A P P E N D I X E Channels IEEE 802.11a IEEE 802.11b/g Regulatory Domains Maximum Power Levels and Antenna Gains IEEE 802.11b IEEE 802.11g OL-16534-01 Acknowledgments and Licensing A P P E N D I X F Appendix F Acknowledgments and Licensing Appendix F Acknowledgments and Licensing OL-16534-01 Appendix F Acknowledgments and Licensing Abbreviations A P P E N D I X G Table G-1 List of Acronyms continued