You can determine whether your equipment is causing interference by turning it off. If the interference stops, it was probably caused by the Cisco equipment or one of its peripheral devices. If the equipment causes interference to radio or television reception, try to correct the interference by using one or more of the following measures: •...
Radio Antenna LEDs Software Components Driver Client Utilities Network Configurations Using Client Adapters Ad Hoc Wireless LAN Wireless Infrastructure with Workstations Accessing a Wired LAN Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 4
Modifying a Profile 4-11 Editing a Profile 4-11 Deleting a Profile 4-11 Importing and Exporting Profiles 4-11 Importing a Profile 4-12 Exporting a Profile 4-12 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 5
After Profile Activation or Card Insertion After a Reboot or Logon After Your EAP-FAST Password Expires Using LEAP or EAP-FAST with an Automatically Prompted Login Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 6
Overview of ASTU The ASTU Icon Tool Tip Window Pop-Up Menu Help Exit Open Aironet Desktop Utility Troubleshooting Preferences Enable/Disable Radio Manual Login Reauthenticate Select Profile Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 7
Prioritizing Network Connections 10-11 Parameters Missing from Profile Management Windows 10-11 Windows Wireless Network Connection Icon Shows Unavailable Connection (Windows XP Only) 10-11 Error Messages 10-12 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 8
Channels, Power Levels, and Antenna Gains A P P E N D I X Channels IEEE 802.11a IEEE 802.11b/g Maximum Power Levels and Antenna Gains IEEE 802.11a IEEE 802.11b Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide viii OL-4211-05...
Page 9
Viewing an Accumulation of Access Points Using the Proximity Beeper Configuring the Proximity Beeper Enabling the Proximity Beeper Using Thresholds Configuring Threshold Values Enabling Threshold Triggers Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 10
Installing the Profile Migration Tool Running the Profile Migration Tool Command Line Options Uninstalling the Profile Migration Tool L O S S A R Y N D E X Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 11
Preface The preface provides an overview of the Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide (OL-4211-04), references related publications, and explains how to obtain other documentation and technical assistance, if necessary. The following topics are covered in this section: Audience, page xii •...
This manual pertains specifically to Cisco Aironet CB21AG and PI21AG client adapters, whose Caution software is incompatible with that of other Cisco Aironet client adapters. Refer to the Cisco Aironet 340, 350, and CB20A Wireless LAN Client Adapters Installation and Configuration Guide for Windows if you are installing or using 340, 350, or CB20A cards.
(Voor vertalingen van de waarschuwingen die in deze publicatie verschijnen, kunt u het aanhangsel “Translated Safety Warnings” (Vertalingen van veiligheidsvoorschriften) raadplegen.) Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide xiii OL-4211-05...
Page 14
(Se förklaringar av de varningar som förekommer i denna publikation i appendix "Translated Safety Warnings" [Översatta säkerhetsvarningar].) Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
The DVD enables you to access multiple versions of installation, configuration, and command guides for Cisco hardware and software products. With the DVD, you have access to the same HTML documentation that is found on the Cisco website without being connected to the Internet.
You can rate and provide feedback about Cisco technical documents by completing the online feedback form that appears with the technical documents on Cisco.com. You can submit comments about Cisco documentation by using the response card (if present) behind the front cover of your document or by writing to the following address:...
We encourage you to use Pretty Good Privacy (PGP) or a compatible product (for example, GnuPG) to encrypt any sensitive information that you send to Cisco. PSIRT can work with information that has been encrypted with PGP versions 2.x through 9.x.
Cisco engineer. The TAC Service Request Tool is located at this URL: http://www.cisco.com/techsupport/servicerequest For S1 or S2 service requests, or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.
Cisco products that are sold through channel partners. It is updated twice a year and includes the latest Cisco offerings. To order and find out more about the Cisco Product Quick Reference Guide, go to this URL: http://www.cisco.com/go/guide...
Page 20
Preface Obtaining Additional Publications and Information Networking products offered by Cisco Systems, as well as customer support services, can be • obtained at this URL: http://www.cisco.com/en/US/products/index.html Networking Professionals Connection is an interactive website for networking professionals to share • questions, suggestions, and information about networking products and technologies with Cisco experts and other networking professionals.
C H A P T E R Product Overview This chapter describes the Cisco Aironet CB21AG and PI21AG client adapters and illustrates their role in a wireless network. The following topics are covered in this chapter: Introduction to the Client Adapters, page 1-2 •...
Introduction to the Client Adapters Introduction to the Client Adapters The Cisco Aironet IEEE 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) are radio modules that provide wireless data communications among fixed, portable, and mobile devices within both wireless and wired network infrastructures. The client adapters are fully compatible when used in devices supporting “plug-and-play”...
(ISM) frequency band and OFDM technology in the 5-GHz Unlicensed National Information Infrastructure (UNII) frequency bands. The client adapters operate with other IEEE 802.11a or 802.11b/g-compliant client devices in ad hoc mode or with Cisco Aironet access points and other IEEE 802.11a or 802.11b/g-compliant infrastructure devices in infrastructure mode.
The client adapters have two major software components: a driver and client utilities. These components are installed together by running a single executable Install Wizard file that is available from Cisco.com. This file can be run on Windows 2000 or XP and can be used only with CB21AG and PI21AG client adapters.
The use of an infrastructure device, such as an access point, is not required. Figure 1-1 Ad Hoc Wireless LAN Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
This process is referred to as seamless roaming. Figure 1-2 Wireless Infrastructure with Workstations Accessing a Wired LAN Access Point (Root Unit) Wired LAN Access Point (Root Unit) Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
The following topics are covered in this chapter: Safety information, page 2-2 • • Unpacking the Client Adapter, page 2-3 System Requirements, page 2-4 • • Site Requirements, page 2-5 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
FCC-certified equipment. When used with approved Cisco Aironet antennas, Cisco Aironet products meet the uncontrolled environmental limits found in OET-65 and ANSI C95.1, 1991. Proper operation of this radio device according to the instructions in this publication will result in user exposure substantially below the FCC recommended limits.
The username and password for your network account – Protected access credentials (PAC) file if your wireless network uses EAP-FAST authentication – with manual PAC provisioning Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
• Install the client adapter away from microwave ovens. Microwave ovens operate on the same frequency as the client adapter and can cause signal interference. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 32
Chapter 2 Preparing for Installation Site Requirements Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 33
Installing the Client Adapter Software, page 3-9 Installing the Intermediate Driver Manually, page 3-20 • • Installing a Microsoft Hot Fix for Group Policy Delay, page 3-21 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Turn on your computer and let the operating system boot up completely. Step 2 Hold the card with the Cisco label facing up and insert it into the Cardbus slot, applying just enough Step 3 pressure to make sure it is fully seated (see Figure 3-1).
Step 1 Remove the two screws that attach the bracket to the card. See Figure 3-2. Figure 3-2 Changing the PCI Card Bracket Bracket screws Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Slip your card’s antenna through the opening near the empty expansion slot so that it is located outside Step 5 of the computer. See Figure 3-3. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Follow the steps below to assemble the PCI card’s antenna. Slide the antenna through the opening in the bottom of the antenna base. Step 1 Position the antenna so its notches are facing the Cisco label on the front of the base. See Figure 3-4.
Place the antenna away from microwave ovens and 2.4- and 5.8-GHz cordless phones. These • products can cause signal interference because they operate in the same frequency range as the PCI card. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 39
Step 5 Position the mounting holes on the bottom of the antenna base over the screws (see Figure 3-6) and pull down to lock in place. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 40
Boot up your PC. The green LED lights when the card is inserted properly. If the Found New Hardware Wizard window appears, click Cancel. Step 8 Step 9 Go to the “Installing the Client Adapter Software” section below. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Caution Do not eject your client adapter at any time during the installation process, including during the reboot. This procedure is meant to be used the first time the Cisco Aironet CB21AG or PI21AG client adapter Note software is installed on your computer. If this software is already installed on your computer, follow the...
Page 42
Double-click the installer. The “Starting InstallShield Wizard” message appears followed by the Step 18 Preparing Setup window (see Figure 3-8) and the Cisco Aironet Installation Program window (see Figure 3-9). Figure 3-8 Preparing Setup Window Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 3-10 OL-4211-05...
Page 43
Installing the Client Adapter Software Figure 3-9 Cisco Aironet Installation Program Window Click Next. The Setup Type window appears (see Figure 3-10). Step 19 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 3-11 OL-4211-05...
You must manually install the driver later using the Update Device Driver Wizard. See the “Manually Installing or Upgrading the Client Adapter Driver” section on page 9-6 for instructions. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 3-12 OL-4211-05...
Page 45
Figure 3-11), check the Install Step 21 Cisco Aironet Site Survey Utility check box if you want to install a utility that helps you to determine the best placement of infrastructure devices within your wireless network. Click Next. Figure 3-11...
Page 46
If you want to copy the driver to a different drive or directory, click Browse, choose a new location, click OK, and click Next. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 3-14 OL-4211-05...
Page 47
If you want to specify a different program folder, choose a folder from the Existing Folders list Note or type a new folder name in the Program Folder field and click Next. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 3-15 OL-4211-05...
Page 48
32. If your computer is running Windows XP, the Step 26 window titled IMPORTANT: Please Read! appears (see Figure 3-14). Figure 3-14 IMPORTANT: Please Read! Window Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 3-16 OL-4211-05...
Page 49
Windows XP and ADU client adapter features. Table 3-1 Comparison of Windows XP and ADU Client Adapter Features Feature Windows XP Configuration parameters Limited Extensive Capabilities Create profiles Enable/disable radio Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 3-17 OL-4211-05...
Page 50
28, go to Step 32. If you chose Third-Party Tool, the Enable Tray Icon window appears (see Figure 3-16). Figure 3-16 Enable Tray Icon Window Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 3-18 OL-4211-05...
Page 51
Installing the Client Adapter Installing the Client Adapter Software Check the Enable Cisco Aironet System Tray Utility (ASTU) check box if you want to be able to use Step 31 ASTU even though you have chosen to configure your client adapter through a third-party tool instead of ADU and click Next.
Click on "Network Connections" in the Start > Settings menu in Windows XP, or right click on "My Step 2 Network Places" in Windows 2000. Find the CB21AGg instance. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 3-20 OL-4211-05...
The objective is to delay the start of Group Policy until wireless network authentication occurs. Follow the steps below to obtain and install the hot fix. You must be a registered Cisco customer and log into Cisco.com in order to download the hot fix. If you Note are unable to access the hot fix from Cisco.com, contact Microsoft Support to obtain it.
Page 54
Copy the hot fix file (userenv.dll) to %systemroot%\System32 and overwrite the existing version of this Step 10 file. Delete the copy of userenv.dll in %systemroot%\System32\DllCache. Step 11 Reboot your computer. Step 12 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 3-22 OL-4211-05...
Page 55
Including a Profile in Auto Profile Selection, page 4-8 • • Selecting the Active Profile, page 4-10 Modifying a Profile, page 4-11 • Importing and Exporting Profiles, page 4-11 • Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
The profile manager feature provides you with a default profile that is configured to use default values. This profile is named Default and appears in the profiles list on the Cisco Aironet Desktop Utility (Profile Management) window. You can use this profile as is by double-clicking it or modify it by following the instructions in the “Modifying a Profile”...
Page 57
Chapter 4 Using the Profile Manager Opening Profile Manager Table 4-1 provides a description of the status fields on the Cisco Aironet Desktop Utility (Profile Management) window. Table 4-1 Description of Status Fields on Profile Management Window Field Description Network Type The type of network that is configured for the selected profile.
(Profile Management) window. Then go to Step • If you want to find an available network and create a profile based on it, click Scan on the Cisco Aironet Desktop Utility (Profile Management) window. The Available Infrastructure and Ad Hoc Networks window appears (see Figure 4-2).
The infrastructure network to which your client adapter is currently associated. An available ad hoc network. The ad hoc network to which your client adapter is currently associated. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 60
When the Profile Management (General) window appears (see Figure 4-4), enter a name for your new Step 4 profile (such as Office, Home, etc.) in the Profile Name field. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 61
• If you want to change any of the configuration parameter settings, follow the instructions in Chapter 5. The profile is added to the profiles list on the Cisco Aironet Desktop Utility (Profile Management) window. Note The profiles for PC-Cardbus cards are tied to the slot in which the card is inserted. Therefore, you must always insert your PC-Cardbus card into the same slot, create profiles for both slots, or export the profiles from one slot and import them for the other slot.
Open ADU and click the Profile Management tab. Step 1 Click Order Profiles. The Auto Profile Selection Management window appears (see Figure 4-5). Step 2 Figure 4-5 Auto Profile Selection Management Window Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Step 6 Go to the “Selecting the Active Profile” section on page 4-10 to enable auto profile selection. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
You can use ASTU instead of the ADU Profile Manager to select the active profile. Refer to Chapter 8 Note for instructions. Open ADU and click the Profile Management tab. The Cisco Aironet Desktop Utility (Profile Step 1 Management) window appears (see Figure 4-1).
Modifying a Profile Follow the steps in the appropriate section below to edit or delete an existing profile. Editing a Profile Open ADU and click the Profile Management tab. The Cisco Aironet Desktop Utility (Profile Step 1 Management) window appears (see Figure 4-1).
Select the profile that you want to import so it appears in the File name box at the bottom of the window. Click Open. The imported profile appears in the profiles list on the Cisco Aironet Desktop Utility Step 6 (Profile Management) window.
Page 67
Choose a directory (such as your computer’s floppy disk drive or a location on the network) from the Step 5 Save in drop-down box. The default location is the directory where ADU is installed (such as C:\Program Files\Cisco Note Aironet).
Page 68
Chapter 4 Using the Profile Manager Importing and Exporting Profiles Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 4-14 OL-4211-05...
Page 69
Setting Advanced Parameters, page 5-6 • • Setting Security Parameters, page 5-14 Enabling Wi-Fi Multimedia, page 5-59 • • Setting Roaming Parameters in the Windows Control Panel, page 5-63 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Overview Overview When you choose to create a new profile or modify an existing profile on the Cisco Aironet Desktop Utility (Profile Management) window, the Profile Management windows appear. These windows enable you to set the configuration parameters for that profile.
This window appears after you click New or Modify on the Cisco Aironet Desktop Utility (Profile Management) window. Figure 5-1 Profile Management (General) Window Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 72
SSID of the access point. Otherwise, the client adapter is unable to access the network. You must enter an SSID if this profile is configured for use in Note an ad hoc network. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 73
Go to the next section to set additional parameters, or click OK to save your changes and return to the Cisco Aironet Desktop Utility (Profile Management) window. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
To open this window, click the Advanced tab from any Profile Management window. Figure 5-2 Profile Management (Advanced) Window Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 75
Reducing the transmit power level conserves battery power but decreases radio range. If configured to control the client power level, access points can Note limit the maximum power of the client. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 76
(such as small battery-powered devices). If this profile is configured for use in an ad hoc network, CAM Note mode is used automatically. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 77
Options: Short & Long or Long Only Default: Short & Long This parameter is disabled if the Wireless Mode parameter does Note not include the 2.4 GHz 11 Mbps option. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 78
The 2.4 GHz 54 Mbps wireless mode may not be functional on some vendors’ products. In this case, the client adapter uses the 2.4 GHz 11 Mbps wireless mode. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-10 OL-4211-05...
Page 79
Channel parameter is set to Auto automatically. Refer to Appendix D for a list of channel identifiers, channel Note center frequencies, and regulatory domains for each channel. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-11 OL-4211-05...
Page 80
If this profile is configured for use in an ad hoc network or is not configured to use static WEP, this parameter is unavailable, and Open authentication is used. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-12 OL-4211-05...
Page 81
Go to the next section to set additional parameters or click OK to save your changes and return to the Cisco Aironet Desktop Utility (Profile Management) window. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-13...
(WEP) encryption keys. With WEP encryption, the transmitting device encrypts each packet with a WEP key, and the receiving device uses that same key to decrypt each packet. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-14 OL-4211-05...
Windows device is rebooted unless you configure your adapter to use saved LEAP credentials. RADIUS servers that support LEAP include Cisco Secure ACS release 2.6 or later, Cisco Access Registrar release 1.7 or later, Funk Software’s Steel-Belted RADIUS release 4.1 or later, and Meetinghouse Data Communications’...
Page 84
EAP-FAST credentials. PACs are created by Cisco Secure ACS and are identified by an ID. The user obtains his or her own copy of the PAC from the server, and the ID links the PAC to the profile created in ADU. When manual PAC provisioning is enabled, the PAC is manually copied from the server and imported onto the client device.
Page 85
• client adapter and RADIUS server to encrypt data. It uses a client certificate for authentication. RADIUS servers that support EAP-TLS include Cisco Secure ACS release 3.0 or later and Cisco Access Registrar release 1.8 or later. PEAP (EAP-GTC)—This PEAP authentication type is designed to support One-Time Password •...
Page 86
If authentication is successful, the client and RADIUS server derive a dynamic, session-based WEP key that is unique to the client. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-18 OL-4211-05...
5-52 • WPA must also be enabled on the access point. To use WPA, access points must use Cisco IOS Release Note 12.2(11)JA or later. To use WPA2, access points must use Cisco IOS Release 12.3(2)JA or later. Refer to the documentation for your access point for instructions on enabling this feature.
Using Cisco Centralized Key Management (CCKM), an access point that is configured for wireless domain services (WDS) uses a fast rekeying technique that enables Cisco client devices to roam from one access point to another typically in under 150 milliseconds (ms). CCKM fast secure roaming ensures that there is no perceptible delay in time-sensitive applications such as wireless Voice over IP (VoIP), enterprise resource planning (ERP), or Citrix-based solutions.
When you enable broadcast WEP key rotation, the access point provides a dynamic broadcast WEP key and changes it at the interval you select. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-21 OL-4211-05...
Network-EAP and Open with EAP Authentication and WPA for the SSID To allow both WPA and Note non-WPA clients to use the SSID, enable optional WPA. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-22 OL-4211-05...
Page 91
WPA and Open with EAP Authentication for the SSID To allow both WPA and Note non-WPA clients to use the SSID, enable optional WPA. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-23 OL-4211-05...
Page 92
Microsoft Wireless To allow both WPA and Note Configuration Manager in non-WPA clients to use the Windows XP. SSID, enable optional WPA. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-24 OL-4211-05...
Page 93
Set up and enable WEP and set EAP-TLS, PEAP (EAP-GTC), or Broadcast WEP Key Rotation PEAP (EAP-MSCHAP V2) Interval to any value other than zero (0) Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-25 OL-4211-05...
• which includes alpha characters, numbers, and punctuation marks. ASCII text WEP keys are not supported on the Cisco Aironet 1200 Series Access Points, so Note you must choose the Hexadecimal (0-9, A-F) option if you are planning to use your client adapter with these access points.
Page 95
WEP. However, you can enable VLANs on the access point to separate WEP-enabled and WEP-disabled clients. Click OK to save your settings and return to the Cisco Aironet Desktop Utility (Profile Management) window. Step 9 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide...
Follow the steps below to enable WPA/WPA2 passphrase (also known as WPA/WPA2 pre-shared key) for this profile. To use WPA passphrase, access points must use Cisco IOS Release 12.2(11)JA or later. To use WPA2 Note passphrase, access points must use Cisco IOS Release 12.3(2)JA or later.
Release 12.3(4)JA (1130 series and BR 1310 series access points), Cisco IOS Release 12.3(7)JA (1240 series access points), or Cisco IOS Release 12.2(13)JA (350 series access points). To use WPA or CCKM, access points must use Cisco IOS Release 12.2(11)JA or later. To Note use WPA2, access points must use Cisco IOS Release 12.3(2)JA or later.
Page 98
Authentication occurs automatically as needed using a saved username and password (which are registered with the RADIUS server). Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-30 OL-4211-05...
Page 99
The Always Resume the Secure Session check box is disabled if you chose Use Windows User Note Name and Password or Use Saved User Name and Password in Step Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-31 OL-4211-05...
Page 100
A timeout value of 0 causes the authentication process to bypass the “Finding Domain Controller” step altogether. Range of timeout value: 0 to 300 seconds Default: Unchecked; 0 seconds Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-32 OL-4211-05...
Page 101
2000. Refer to the “Installing a Microsoft Hot Fix for Group Policy Delay” on page 3-21 information on obtaining and installing the hot fix. Click OK to save your settings and return to the Cisco Aironet Desktop Utility (Profile Management) Step 13 window.
Release 12.3(7)JA (1240 series access points), or Cisco IOS Release 12.2(4)JA (1100 series access points). To use WPA or CCKM, access points must use Cisco IOS Release 12.2(11)JA or later. To Note use WPA2, access points must use Cisco IOS Release 12.3(2)JA or later. To use the...
Page 103
5-8). Step 2 Figure 5-8 Configure EAP-FAST Window Choose an authentication method from the EAP-FAST Authentication Method drop-down list and click Step 3 Configure. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-35 OL-4211-05...
Page 104
Check the Validate Server Identity check box to force the system to validate the identity of the server as an added level of security. If you uncheck this box, only user credentials will be validated. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-36 OL-4211-05...
Page 105
Check the Validate Server Identity check box to force the system to validate the identity of the server as an added level of security. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-37 OL-4211-05...
Page 106
Advanced and follow the instructions in “Configuring Advanced Settings” on page 5-58. Click OK to save your settings and return to the Configure EAP-FAST window. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-38 OL-4211-05...
Page 107
EAP-FAST profile if no PAC authority was selected, the PAC could not be found, or the specified PAC does not match the server ID. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-39...
Page 108
The filename and extension of a PAC file is determined by the PAC authority that issues it, Note but the standard file extension is pac. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-40 OL-4211-05...
Page 109
Check the Use Any PAC Belonging to the Same Group check box to use any PAC authority in the Step 9 selected groups for PAC provisioning. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-41 OL-4211-05...
Page 110
(or the VLAN to which the client will be assigned) does not have WEP set to Optional. This is the default setting. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-42...
Page 111
EAP-FAST authentication timeout value, even if the finding domain controller timeout value is greater than the EAP-FAST authentication timeout value. If you require domain services such as login scripts and roaming desktops, Cisco recommends Note that you uncheck the Limit Time for Finding Domain Controller To check box.
“Installing a Microsoft Hot Fix for Group Policy Delay” on page 3-21 information on obtaining and installing the hot fix. Step 17 Click OK to save your settings and return to the Cisco Aironet Desktop Utility (Profile Management) window. Step 18...
Release 12.3(4)JA (1130 series and BR 1310 series access points), Cisco IOS Release 12.3(7)JA (1240 series access points), or Cisco IOS Release 12.2(13)JA (350 series access points). To use WPA or CCKM, access points must use Cisco IOS Release 12.2(11)JA or later. To Note use WPA2, access points must use Cisco IOS Release 12.3(2)JA or later.
Page 114
Choose the certificate authority from which the server certificate was downloaded in the Trusted Root Step 6 Certification Authorities drop-down box. Choose your server certificate in the Select a Certificate drop-down box. Step 7 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-46 OL-4211-05...
Page 115
2000. Refer to the “Installing a Microsoft Hot Fix for Group Policy Delay” on page 3-21 information on obtaining and installing the hot fix. Click OK to save your settings and return to the Cisco Aironet Desktop Utility (Profile Management) Step 13 window.
CCKM will be used with 802.1x, WPA, or WPA2. Refer to the “WPA and WPA2” on page 5-19 for additional information. Note Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-48 OL-4211-05...
Page 117
Step 5 Certification Authorities drop-down box, or, if applicable, choose <Any>. Choose either Token or Static Password, depending on your user database. Step 6 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-49 OL-4211-05...
Page 118
PEAP tunnel, follow the steps in “Configuring Advanced Settings” on page 5-58. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-50 OL-4211-05...
Page 119
“Installing a Microsoft Hot Fix for Group Policy Delay” on page 3-21 information on obtaining and installing the hot fix. Step 14 Click OK to save your settings and return to the Cisco Aironet Desktop Utility (Profile Management) window. Refer to Chapter 6 for instructions on authenticating using PEAP (EAP-GTC).
“WPA and WPA2” on page 5-19 for additional information. Note Click Configure. The Configure PEAP (EAP-MSCHAP V2) window appears (see Figure 5-17). Step 2 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-52 OL-4211-05...
Page 121
If you want to connect using a user certificate installed on your computer, choose Certificate, select • a certificate from the drop-down box, and go to Step Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-53 OL-4211-05...
Page 122
Click OK to save your settings. Click OK to save your settings and return to the Profile Management (Security) window. Step 9 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-54 OL-4211-05...
2000. Refer to the “Installing a Microsoft Hot Fix for Group Policy Delay” on page 3-21 information on obtaining and installing the hot fix. Click OK to save your settings and return to the Cisco Aironet Desktop Utility (Profile Management) Step 12 window.
Page 124
Step 3 Click OK to save your settings. Step 4 Activate this profile on the Cisco Aironet Desktop Utility (Profile Management) window. The Microsoft Wireless Configuration Manager starts. Step 5 Click Start > Settings > Control Panel > Network and Dial-up Connections or Network Connections.
Page 125
EAP profile, ADU assumes this control. If you experience problems while using a host-based EAP profile, make sure that 802.1X Note authentication is disabled for any other network connection. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-57 OL-4211-05...
QoS and WMM must be enabled on the access point to which the client will associate. These features are supported on the access point in Cisco IOS Release 12.3(2)JA or later. Refer to the documentation for your access point for instructions on enabling these features.
Page 128
8. Otherwise, go to the next step to install it. Click Install. The Select Network Component Type window appears (see Figure 5-21). Step 5 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-60 OL-4211-05...
Page 129
QoS Packet Scheduler is included in the list of connections. Step 8 Check the QoS Packet Scheduler check box if it is not checked. Step 9 Click OK. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-61 OL-4211-05...
Check the QoS Packet Scheduler check box, which appears in the list of items that this connection uses. Step 5 Click OK. Step 6 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-62 OL-4211-05...
Click Properties and the Advanced tab. The roaming parameters appear in the Property list. Table 5-5 Step 5 lists and describes the client adapter’s roaming parameters. Follow the instructions in the table to change the parameters. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-63 OL-4211-05...
Page 132
If you are using client software prior to 2.7.0.2, you will not be able to set the BSS Aging Interval Note parameter to 20. In that case, set it to 30. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-64 OL-4211-05...
HKLM\System\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318} Right-click and choose Find and find the variable called “NetBand.” This variable will be under a four-digit subkey whose DriverDesc value is “Cisco Aironet 802.11a/b/g Wireless Adapter.” The NetBand REG_SZ variable is a bitmask of supported rates. By default, this variable it is set to 15 decimal (0x0F).
Page 134
Chapter 5 Configuring the Client Adapter Configuring Band Usage Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 5-66 OL-4211-05...
Page 135
Using EAP-TLS, page 6-14 • Using PEAP (EAP-GTC), page 6-15 • • Using PEAP (EAP-MSCHAP V2), page 6-16 Restarting the Authentication Process, page 6-16 • Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
When LEAP or EAP-FAST authentication begins, the LEAP or EAP-FAST Authentication Status window appears (see Figure 6-1). Figure 6-1 LEAP or EAP-FAST Authentication Status Window Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Show minimized next time check box. The LEAP or EAP-FAST Authentication Status window should now appear for all future LEAP or EAP-FAST authentication attempts. Using LEAP or EAP-FAST with the Windows Username and Password Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Windows continues to log you onto the system. ASTU and the Link Status field on the ADU Current Step 4 Status window show Authenticated. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Enter your new password in both the New Password and Verify New Password fields and click OK. Step 2 If prompted, log off and on again in order to update your local cached account with your new password. Step 3 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
If the authentication attempt fails, an error message appears after the authentication timeout period has expired. Refer to the “Error Messages” section on page 10-12 for the necessary action to take. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
If the authentication attempt fails, an error message appears after the authentication timeout period has expired. Refer to the “Error Messages” section on page 10-12 for the necessary action to take. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Enter your new password in both the New Password and Verify New Password fields. Step 2 Click OK. The client adapter should authenticate using your new password. Step 3 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
EAP-FAST username and password and click OK. The domain name can be entered in the Log On To field; it is optional. Figure 6-6 Enter Wireless Network Password Window The LEAP or EAP-FAST Authentication Status window appears. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Choose the Manual Login option from the ADU Action drop-down menu (see Figure 6-7). Figure 6-7 Action Drop-Down Menu You can also choose the Manual Login option from the ASTU pop-up menu (see Figure 6-8). Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 6-10 OL-4211-05...
Page 145
EAP-FAST username and password and click OK. The domain name can be entered in the Log On To field; it is optional. Figure 6-9 Enter Wireless Network Password Window The LEAP or EAP-FAST Authentication Status window appears. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 6-11 OL-4211-05...
Enter your new password in both the New Password and Verify New Password fields. Step 2 Click OK. The client adapter should authenticate using your new password. Step 3 Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 6-12 OL-4211-05...
Windows continues to log you onto the system. ASTU and the Link Status field on the ADU Current Status window show Authenticated. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 6-13 OL-4211-05...
If your client adapter authenticates, ASTU and the Link Status field on the ADU Current Status window show Authenticated. If the authentication attempt fails, ASTU and ADU show Authentication Failed. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 6-14...
If your client adapter authenticates, ASTU and the Link Status field on the ADU Current Status window show Authenticated. If the authentication attempt fails, ASTU and ADU show Authentication Failed. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 6-15...
If you click Cancel, a message appears indicating that the current profile will be disabled until you choose the Reauthenticate option, reboot your computer, or eject and reinsert the client adapter. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide 6-16 OL-4211-05...
Setting Parameters that Affect ADU Status and Statistics Tools, page 7-2 • • Viewing the Current Status of Your Client Adapter, page 7-4 Viewing Statistics for Your Client Adapter, page 7-12 • Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Open ADU. Step 2 Choose Display Settings from the Options drop-down menu. The Display Settings window appears (see Figure 7-1). Figure 7-1 Display Settings Window Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 153
Interval (1 to 5 seconds). Cumulative Displays statistical data collected since the driver was loaded, upon card insertion or reboot. Step 4 Click OK to save your changes. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 154
To view your client adapter’s status and settings, open ADU. The Current Status window appears (see Figure 7-2). Figure 7-2 Current Status Window Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 155
The type of network in which your client adapter is being used. Value: Infrastructure or Ad Hoc Refer to the Network Type parameter in Table 5-3 Note information on setting the network type. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 156
The signal strength for all received packets. The color of this parameter’s progress bar provides a visual interpretation of signal strength. Value: Excellent (green), Good (green), Fair (yellow), Poor (red), or No Link Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 157
Value: None, WEP, CKIP, TKIP, or AES Refer to the “Overview of Security Features” on page 5-14 Note details on these data encryption types. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 158
However, you must enable the Windows QoS Packet Scheduler to ensure WMM support. Follow the instructions in “Enabling Wi-Fi Multimedia” on page 5-59 to enable the QoS Packet Scheduler. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...
Page 159
10, 20, 32, 50, 63, or 100 mW (802.11b/g band) Refer to the Transmit Power Level parameter in Table 5-3 Note information on the client adapter’s available power levels. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide OL-4211-05...