Intel WM3A2915ABG Intel PRO/Wireless 2915ABG Network Connection User Manual Contents

Intel Mobile Communications Intel PRO/Wireless 2915ABG Network Connection Contents

UserManual.wiki >

Intel >

WM3A2915ABG User Manual

Manual revised

ContentsIntel(R) PRO/Wireless 2915ABG Network Connection User GuideWith your wireless network card, you can access wireless networks, share files or printers, or even share your Internet connection. All of these features can be explored using a wireless network in your home or office. This wireless LAN solution is designed for both home and business use. Additional users and features can be added as your networking needs grow and change.Your Intel(R) PROSet/Wireless 2915ABG Network Connection adapter is compatible with 802.11a, 802.11b or 802.11g wireless standards. Operating at 5 GHz or 2.4 GHz frequency at speeds of up to 54 Mbps you can now connect your computer to existing high-speed networks using multiple access points within large or small environments. Your wireless adapter maintains automatic data rate control according to access point location to achieve the fastest possible connection. provide enhanced security measures using 802.1x network authentication. All of your wireless networks connections can be easily managed by Intel PROSet/Wireless. Intel(R) PRO/Wireless profiles provide enhanced security measures using 802.1x network authentication.NOTE: The software is compatible with the Intel PROSet/Wireless 2915ABG Network Connection and the Intel PROSet Wireless 2200BG Network Connection.Table of Contents● Using Intel PROSet/Wireless ● Using Profiles ● Setting up Security● Security Overview ● Introduction to Wireless Networking ● Connecting to a Network ● Specifications ● Troubleshooting ● Glossary ● Customer Support● Safety and Regulatory Information ● Warranty● Adapter RegistrationInformation in this document is subject to change without notice.file:///C|/CX2%20Muroc%20UG/6-15-04/index.htm (1 of 2) [6/15/2004 3:40:01 PM]

Contents© 2000–2004 Intel Corporation. All rights reserved. Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 USAThe copying or reproducing of any material in this document in any manner whatsoever without the written permission of Intel Corporation is strictly forbidden. Intel(R) is a trademark or registered trademark of Intel Corporation or its subsidiaries in the United States and other countries. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Intel disclaims any proprietary interest in trademarks and trade names other than its own. Microsoft and Windows are registered trademarks of Microsoft Corporation.*Other names and brands may be claimed as the property of others.Intel Corporation assumes no responsibility for errors or omissions in this document. Nor does Intel make any commitment to update the information contained herein.June 2004file:///C|/CX2%20Muroc%20UG/6-15-04/index.htm (2 of 2) [6/15/2004 3:40:01 PM]

Using Intel(R)PROSet/WirelessNOTE: Check that the Application Settings option Notify me when another application is using the wireless device is selected. This option prompts you when Windows XP starts to manage your network profiles. Starting Intel PROSet/WirelessLaunch Intel PROSet/Wireless either from the task tray icon, the Windows Start button, or from the Windows Control Panel icon.To launch Intel PROSet/Wireless use either of the following methods:● Click Start > Programs > Intel Wireless > Intel PROSet/Wireless.● Right-click the task tray icon located in the lower right corner of your Windows Desktop, and click the menu option Open Intel PROSet/Wireless.● Double-click the task tray icon to open Intel PROSet/Wireless.Exit Intel PROSet/Wireless:● To exit Intel PROSet/Wireless and close the task tray icon, click Exit from the from the task tray menu or click the Close button on the Intel PROSet/Wireless main window.Launch Intel PROSet/Wireless from the task trayTo launch Intel PROSet/Wireless, double-click the task tray icon located in the lower right corner of your Windows desktop or right-click the task tray icon and click Open Intel PROSet/Wireless. Exit Intel PROSet/WirelessTo exit Intel PROSet/Wireless and hide the task tray icon, right-click the task tray icon and click Hide Icon on the task tray menu. ● To show the task tray icon after the Intel PROSet/Wireless is launched, select "Show application icon in the taskbar" in the Application Settings options. Close Intel PROSet/Wireless● Click Close to close the Intel PROSet Wireless main window. To open the main window, right-click the task tray icon and click Open Intel PROSet/Wireless. Task Tray Menu Optionsfile:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (2 of 32) [6/15/2004 3:40:06 PM]

Using Intel(R)PROSet/WirelessAuthentication failed. Not able to authenticate with wireless network. Green icon with a yellow warning triangleConnected to a wireless network: Connected to a wireless network. Tool tip display network name, speed, and signal quality. The green icon with waves reflects signal quality. More waves mean better signal quality. NOTE: If you are using Windows* XP as your wireless manager, the task tray icon is white. It does not reflect connection status. You can still click the icon to open the task tray menu.Tool Tips and Balloon Message PromptsThe Tool Tips and Balloon message prompts provide feedback and interaction. To display Tool tips, move your mouse pointer over the icon. Balloon messages prompts are displayed when your wireless network changes state. For example, if you are out of range of any wireless networks, when you come into range a balloon prompt is displayed. Balloon prompts can be enabled or disabled in the Application Settings. Tool TipsTool tips display when the mouse pointer rolls over the icon. The tool tips display text for each of the connection states. Tool Tip:"Connected to a wireless network"Wireless Network Name: MynetworkSpeed: 54MbpsSignal Strength: Very Good Balloon PromptsWhen user action is required a balloon message prompt displays. If you click the prompt, then an appropriate action is taken. For example when wireless networks are found, the following balloon prompt displays:file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (4 of 32) [6/15/2004 3:40:06 PM]

Using Intel(R)PROSet/WirelessSpeed Displays the current date transfer rate in mega-bits-per-second (Mbps):● 802.11g - 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, or 54● 802.11b - 1, 2, 5.5, or 11● 802.11a - 54, 48, 36, 24, 18, 12, 9, 6Signal Quality The signal quality icon bars indicate the quality of the transmit and receive signals between your wireless adapter and the nearest access point or computer in peer-to-peer mode. The number of vertical green bars indicate the strength of the transmit and receive signals. The signal quality ranges from excellent to out of range. The following factors affect signal quality:● Signal quality decreases with distance and is affected by metal and concrete barriers.● Metal objects can reflect signals and cause interference.● Other electrical devices can cause interference.Details Provides adapter connection status information. See Connection Details for information. Turn wireless off/on Toggle the radio off and on. Refer to Turn radio On/Off for more information.Help? Displays the help information for this page. Close Close the Intel PROSet/Wireless main window.XClose the Intel PROSet/Wireless main window.Connection Details file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (7 of 32) [6/15/2004 3:40:06 PM]

Using Intel(R)PROSet/WirelessThe Application Settings control how the Intel PROSet/Wireless behaves and displays information. Name DescriptionAdapter Displays the name of the installed adapter currently being managed by Intel PROSet/WirelessTask Tray Show application icon in the taskbar: Select this option to display the task tray status icon. This icon resides in the Windows Task bar (Notification area). Clear the box to not display the task tray status icon. Selecting Hide Icon from the task tray menu also clears this check box.The Task Tray Status Icon provides several functions:● Visual feedback for the connection state and wireless activity of your wireless network. The icon changes color and animation for different wireless activity. See Task Tray Icons for more information.● Menu – A menu is displayed when you click the icon. From this menu you perform tasks such as turning on/off the radio or launching the Intel PROSet/Wireless application. See: Task Tray Menu Options for more information.● Tool tips and balloon prompts. See: Tool Tip and Balloon Prompts for more information.file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (14 of 32) [6/15/2004 3:40:06 PM]

Using Intel(R)PROSet/WirelessManage Exclusions Enable automatic exclude list feature: Select this checkbox to enable the automatic exclude list feature. This feature provides a way to exclude access points from automatic connection. Refer to Manage Exclusions for more information.Enable manual exclude list feature: Select this checkbox to enable the manual exclude list feature. This feature provides a way to exclude networks from automatic connection. Refer to Manage Exclusions for more information.OK Save settings and return to the previous page.Cancel Close the page and cancel changes.Help? Displays the help information for this page.Adapter Settings (Tools menu)Adapter Settings displays the Device Properties for the Intel® PRO/Wireless 2915ABG Network Connection. Name Description.file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (16 of 32) [6/15/2004 3:40:06 PM]

Using Intel(R)PROSet/WirelessAd Hoc Channel Value:802.11b/g: Select this option when using 802.11b and 802.11b (2.4 GHz) ad hoc band frequency. ● Select the allowed operating channel from the list.802.11a: Select this option when using 802.11a (5 GHz) ad hoc band frequency. ● Select the allowed operating channel from the list.Ad Hoc Transmit Power Decreasing the transmit power level reduces the radio coverage.Default setting: Highest power setting. ● Lowest: Minimum coverage. Setting the transmission power level enables you to expand or confine a coverage area in respect to other wireless devices that could be operating nearby. Reducing a coverage area in high traffic areas improves transmission quality by reducing the number of missed beacons and noise in that coverage area. ● Highest Maximum coverage. Set the adapter to a maximum transmit power level. Select this setting when operating in highly reflective environments and areas where other devices could be operating nearby, and when attempting to communicate with mobile computers at the outer edge of a coverage area.Note: This setting takes effect when using either Infrastructure or ad hoc mode.Intel Throughput Enhancement Change the value of the Packet Burst Control. Enable: Select this option to enable throughput enhancement.Disable: (Default) - Select this option to disable throughput enhancement.Mixed mode protection Use this option to avoid collision in the 11b/11g mixed environment. Use RTS/CTS enabled where clients may not hear each other. Use CTS-to-self enabled to gain more throughput in an environment where clients are in close proximity and can hear each other.Power Management Power Management: Allows you to select a balance between power consumption and adapter performance. The wireless adapter power settings slider sets a balance between the computer's power source and the battery.Use default value: (Default) - Power settings based on the computer's power source.Manual: Adjust the slider for the desired setting. Use the lowest setting for maximum battery life. Use the highest setting for maximum performance. Note: Power consumption savings vary based on infrastructure settings.file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (17 of 32) [6/15/2004 3:40:06 PM]

Using Intel(R)PROSet/WirelessPreferred Band Select the operating band. The selections are:● 802.11g● 802.11a● 802.11bWireless Mode 802.11a, 802.11b, and 802.11g: (Default) - Connect the either 802.11a, 802.11b or 802.11g wireless networks.802.11g only: Connect the wireless adapter to 802.11g networks only. 802.11a and 802.11g only: Connect the wireless adapter to 802.11a and 802.11g networks only.802.11b and 802.11g only: Connect the wireless adapter to 802.11b and 802.11g networks only.Note: These wireless mode (Modulation type) options determine the discovered access points displayed in the Available networks list.OK Save settings and return to the previous page.Cancel Close the page and cancel any changes made.Help? Displays the help information for this dialog.Use Microsoft Client *(Tools menu)file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (18 of 32) [6/15/2004 3:40:07 PM]

Using Intel(R)PROSet/WirelessThe Windows XP Wireless Zero Configuration feature provides a built-in wireless configuration utility. This feature can be enabled and disabled in Windows XP or by clicking Use Microsoft Client on the Tools menu. If XP Zero Configuration is enabled, the features in Intel PROSet/Wireless are disabled. Refer to Intel PROSet/Wireless Configuration Service for information on re-enabling Intel PROSet/Wireless. Administrator Tool (Tools menu)The Administrator tool is used for administrators or the person who has administrator privileges on this computer. This tool is used to configure common (shared) profiles.This tool also allows the administrator to restrict what level of control the users of this computer have over their file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (19 of 32) [6/15/2004 3:40:07 PM]

Using Intel(R)PROSet/WirelessThese settings allow the administrator to control how users of this computer use their wireless connection.Name DescriptionCache Credentials Cache Credentials:● Cache the user credentials during a user session: ● Click checkbox: Cache user credentials in memory so that you are only prompted the first time before connection instead of each time you connect or disconnect to the network during the Windows log on session. ● Clear checkbox: Prompt for credentials each time wireless connectivity (authentication, re-authentication) is established using 802.1x profiles with either the ‘Use Windows Logon' credentials or the ‘Prompt for Credentials on Connection’ option. XP Co-existence Allow the user to enable XP Zero Configuration: ● Allow the user to enable XP Zero Configuration: ● Click checkbox: Displays a prompt, 'Windows XP is managing your profiles' indicating that Windows XP Zero Configuration is enabled and is managing your wireless adapter. You are prompted to answer the following question:Do you wish to disable Windows XP management and let Intel(R) PROSet manage your wireless network?● Select Yes, if you want Intel(R) PROSet for Wireless to manage your wireless adapter. ● Select No, if you want Windows XP to manage your wireless adapter. ● Clear checkbox: If the box is cleared, when Intel PROSet/Wireless launches, you are not notified in the event that Windows XP Zero Configuration wireless manager is enabled.file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (21 of 32) [6/15/2004 3:40:07 PM]

Using Intel(R)PROSet/WirelessAdvanced Statistics (Tools menu)Provides current adapter connection information. The following describes information for the Advanced Statistics page.Name DescriptionStatistics Advanced Statistics - This information pertains to how the adapter is communicating with an access point.Association - If the adapter finds an access point to communicate with, the value is In range. Otherwise, the value is Out of range.● AP MAC Address: The twelve digit MAC address (00:40:96:31:1C:05) of the AP.● Number of associations: The number of times the access point has found the adapter.● AP count: The number of available access points within range of the wireless adapter.● Number of full scans: The number of times the adapter has scanned all channels for receiving information.Roaming - This information contains counters that are related to reasons for the adapter roaming. Roaming occurs when an adapter communicates with one access point and then communicates with another for better signal strength.● Roaming Count: The number of times that roaming occurred.● AP did not transmit: The adapter did not receive radio transmission from the access point. You may need to reset the access point.● Poor beacon quality: The signal quality is too low to sustain communication with the access point. You have moved the adapter outside the coverage area of the access point or the access point's device address information has been changed.● AP load balancing: The access point ended its association with the adapter based on the access point's inability to maintain communication with all its associated adapters. Too many adapters are trying to communicate with one access point.● AP RSSI too low: The Receive Signal Strength Indicator (RSSI) is too low to maintain an association with the adapter. You may have moved outside the coverage area of the access point or the access point could have increased its data rate.● Poor channel quality: The quality of the channel is low and caused the adapter to look for another access point.● AP dropped mobile unit: The access point dropped a computer from the list of recognizable mobile devices. The computer must re-associate with an access point.Miscellaneous - Use this information to determine if an association with a different access point increases performance and helps maintain the highest possible data rate.file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (23 of 32) [6/15/2004 3:40:07 PM]

Using Intel(R)PROSet/Wireless● Received Beacons: Number beacons received by the adapter.● Percent missed Beacons: Percent value for missed beacons.● Percent transmit errors: The percentage of data transmissions that had errors.● RSSI: Signal strength of the access point with which the adapter is communicating.Transmit/Receive (Tx/Rx) Statistics Displays percent values for non-directed, and directed packets.Total host packets: The sum total number of directed and non-directed packets counts.● Transmit - (Mbps)● Receive - (Mbps)Non-directed packets: The number of received packets broadcast to the wireless network.Directed packets: The number of received packets sent specifically to the wireless adapter.Total Bytes: The total number of bytes for packets received and sent by the wireless adapter.Reset Statistics Resets the adapter statistical counters back to zero and begins making new data measurements.Close Close the dialog and return to the main window.Help? Displays the help information for this page.Intel Wireless Troubleshooter (Tools menu)file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (24 of 32) [6/15/2004 3:40:07 PM]

Using Intel(R)PROSet/WirelessHelp Intel(R) Wireless Troubleshooter Help: Displays online help on the Intel Wireless Troubleshooter.About: Displays version information for the Intel Wireless Troubleshooter. Wireless Event ViewerLaunch Wireless Event Viewer.Disable NotificationClick to disable the alert notifications. Enable NotificationClick to enable the alert notifications if an error is detected.Available Help Date Time error message ● Description of error● Link to resolve error (if available). See Resolving Errors below.● Link to recommended steps to resolve error Import/Export Profiles (Profiles menu)file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (26 of 32) [6/15/2004 3:40:07 PM]

Using Intel(R)PROSet/Wirelessfrom Intel PROSet/Wireless, or by disabling the device in Windows. NOTE: When your computer is switched on, the radio is constantly transmitting signals. In certain situations, such as in a plane, signals from the radio may cause interference. Use the following methods if you need to disable the radio and use your laptop without emitting radio signals. Using the optional computer radio off/on switchIf your computer has an external switch installed, it can be used to switch the radio on or off. Refer to the computer manufacturer for more information about this switch. If you have Intel PROSet/Wireless installed, the current state of the radio displays in the Intel PROSet/Wireless main window and in the Task Tray. Using Intel PROSet/Wireless to switch the radio off/onFrom Intel PROSet/Wireless, the radio can be switched on or off. The status icon in the Intel PROSet/Wireless displays the current state of the radio. From the Intel PROSet/Wireless main Window, click Wireless off/on and toggle the radio off and on.Switching the radio off or on from the Task Tray IconTo switch the radio off or on, click the Task Tray icon and select Wireless Off (On).How to Disable the Radio using Device ManagerThe radio can be disabled (made non-functional) via the Windows operating system using Device Manager. Windows XP and 20001. From your desktop, right-click My Computer and click Properties. 2. Click the Hardware tab. 3. Click Device Manager. 4. Double-click Network adapters.5. Right-click the installed wireless adapter in use.6. Choose Disable from the pop-up menu.7. Click OK. Install and Uninstall the SoftwareIntel Wireless Troubleshooter, Intel Smart Wireless Solutions, the Single Sign On feature and Administrator Tool are not installed during the Typical installation process. To install these features, use the Custom option during the installation process. The Single Sign On Feature can also be installed or uninstalled after Intel PROSet/Wireless has been installed. Refer to Installing and Uninstalling Single Sign On Feature for instructions. file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (29 of 32) [6/15/2004 3:40:07 PM]

Using Intel(R)PROSet/WirelessTo install the software:1. Insert the Installation CD in your CD drive. 2. Click Install Software on the Intel(R) PRO Network screen.3. On the License Agreement screen, after reading the license agreement. Select I accept the terms in the license agreement and click Next. 4. Click Custom.5. Select from the list of features to install:Intel PROSet/Wireless: The Intel(R) PROSet/Wireless application software. ● Install: Click Intel PROSet Wireless. Select Install this feature and all subfeatures. Proceed to step 5. ● Not install: Click Do not install this feature. A red x displays next to the option indicating that it will not be installed. Intel Smart Wireless Solutions: Provides an easy configuration wizard for connecting to a wireless router.● Install: Click Intel Smart Wireless Solutions. Select Install this feature and all subfeatures. Proceed to step 5. ● Not Install: Click Do not install this feature.. A red x displays next to the option indicating that it will not be installed. Single Sign On: Provides administrator control of Pre-Logon and Persistent connections.● Install: Click Single Sign On. Select Install this feature and all subfeatures. Click Next and proceed to step 5. Note: Windows XP Fast Switching and the Welcome screen are disabled when the Single file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (30 of 32) [6/15/2004 3:40:07 PM]

Using Intel(R)PROSet/WirelessSign On feature is installed. ● Uninstall: Click Single Sign On. Select Do not install this feature. A red x displays next to the option indicating that it will not be installed. Administrator Tool: Provides administrator control over what level of control each user has over their wireless network connections.● Install: Click Single Sign On. Select Install this feature and all subfeatures. Click Next and proceed to step 5. Note: Windows XP Fast Switching and the Welcome screen are disabled when the Single Sign On feature is installed. ● Not Install: Click Do not install this feature. A red x displays next to the option indicating that it will not be installed. 5. Click Install.6. After the software is installed on your computer, the installed components are listed. 7. Click OK. NOTE: If the Single Sign On feature was installed. you must reboot the system. 8. Click Yes to reboot. Installing and Uninstalling the Single Sign On FeatureThe Single Sign On feature, includes Pre-Logon Connect and Persistent Connect features. By default they are not installed during the initial software installation process unless you choose to make a Custom install. There feature can also be installed or uninstalled after Intel PROSet Wireless has been installed. To install the Single Sign On features after Intel PROSet/Wireless has been installed:1. Click Start > Settings > Control Panel > Add or Remove Programs > Intel PROSet Wireless.2. Select Change. 3. Select Modify on the Program Maintenance screen4. Click Next.5. Click Single Sign On. Select Install this feature and all subfeatures. Note: Windows XP Fast Switching and the Welcome screen are disabled when the Single Sign On is installed. 6. Click Modify.7. After the software is installed on your computer, the component is listed as "Installed."8. Click OK.To remove the Single Sign On feature:1. Click Start > Settings > Control Panel > Add or Remove Programs > Intel PROSet Wireless.2. Select Change. 3. Select Modify on the Program Maintenance screen4. Click Next.5. Click Single Sign On. Select Do not install this feature. A red x displays next to the option. 6. Click Modify.7. After the software is installed on your computer, the component is listed as "Not Present."8. Click OK.file:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (31 of 32) [6/15/2004 3:40:07 PM]

Using Intel(R)PROSet/WirelessBack to Contentsfile:///C|/CX2%20Muroc%20UG/6-15-04/assist.htm (32 of 32) [6/15/2004 3:40:07 PM]

Using Intel(R)PROSet/Wireless Profiles 6. From the General Settings page, Click Next. The Security Settings page is displayed 6. The Security Settings page displays the current security status for the network access point. Click Next to set Network Authentication and Data Encryption options. file:///C|/CX2%20Muroc%20UG/6-15-04/profiles.htm (5 of 10) [6/15/2004 3:40:11 PM]

$Using Intel(R)PROSet/Wireless ProfilesExport Administrator Preferences Step 1: Select which preferences you want to export:● Administrator Settings: Export all the settings. These include control of Cache Credentials and XP Co-existence.● Administrator Profiles: Export all the Persistent and Pre-logon/Common Profiles.Step 2: Select the destination file:● Browse button: Select the destination path and directory. The export destination file has a .sso extension. The directory path displays in the destination directory window.Step 3: Export the selected preferences:● Export button: Start exporting your profiles to the assigned destination folder.Close Close page.Help? Displays the help information for this page. Automatic Profile DistributionThe Enable Auto-Import feature allows a network administrator to distribute a profile automatically to computers connected to a network. These profiles can be automatically imported from the \Programs Files\Intel\Wireless\AutoImport directory on the client computer. Enable Auto-Import option is located on the the Advanced Settings page. Click Advanced on the Profile Wizard General Settings page to access the Advanced Settings.The profile must be copied to a specific directory on the host computer, from there it can be distributed to multiple computers. Once the profile is received by the remote computer it is automatically available from the Profiles List. If an attempt is made to edit a distributed profile that is password protected, a password prompt appears. Automatically importing profiles is accomplished by monitoring the import folder on your hard disk for new profile files. Only profiles that have the Enable Auto-Import box checked can be automatically imported. If a profile of the same name already exists in the Profiles List, a dialog is displayed from which you can either reject the import, or accept in which case the existing profile is replaced. All imported profiles are placed at the bottom of the Profiles List, and the profile file is immediately deleted after the import whether the import was successful or not. To import a profile into the Profiles List: 1. Select the profile from the Profiles List, and click the Properties button.2. Click the Advanced button.3. Select Enable Auto-import.4. Click OK to save the setting and exit.5. Click OK to close the General Settings page.6. Export the profile from the Profiles List. Refer to Importing and Exporting Profiles for details.file:///C|/CX2%20Muroc%20UG/6-15-04/profiles.htm (9 of 10) [6/15/2004 3:40:11 PM]$

$Using Intel(R)PROSet/Wireless Profiles7. Copy the exported profile from its directory to the Programs Files\Intel\Wireless\AutoImport directory. The profile is now ready to distribute to other computers. Single Sign On Support and Windows XP Welcome Screen and Fast User SwitchingThe Fast User Switching and the Windows XP Welcome Screen are disabled when Single Sign On support is installed. Single Sign On (“Use Windows user name and password”) is targeted to the enterprise environment where users logon to their computer with a user name, password and typically a domain. Fast User Switching does not support domain log on. Note:Windows Fast User Switching is enabled by default if you are using Windows XP Home Edition. It is targeted for the home user; Fast User Switching is also available on Windows XP Professional if you install it on a stand alone or workgroup-connected computer. If a computer running Windows XP Professional is added to a domain, then Fast User Switching option is not available. Back to ContentsTrademarks and Disclaimersfile:///C|/CX2%20Muroc%20UG/6-15-04/profiles.htm (10 of 10) [6/15/2004 3:40:11 PM]$

Security OverviewBack to Contents Security Overview: Intel(R) PRO/Wireless 2915ABG Network Connection User Guide● WEP encryption● 802.1x Authentication ● WPA/WPA2● Cisco Features WEP encryptionUsing the IEEE 802.11 Wired Equivalent Privacy (WEP) encryption can prevent unauthorized reception of wireless data. WEP encryption provides two levels of security, using a 64-bit key (sometimes referred to as 40-bit) or a 128-bit key (also known as 104-bit). For better security, use a 128-bit key. If you use encryption, all wireless devices on your wireless network must use the same encryption keys.Wired Equivalent Privacy (WEP) encryption and shared authentication provides protection for your data on the network. WEP uses an encryption key to encrypt data before transmitting it. Only computers using the same encryption key can access the network or decrypt the encrypted data transmitted by other computers. Authentication provides an additional validation process from the adapter to the access point.The WEP encryption algorithm is vulnerable to passive and active network attacks. TKIP and CKIP algorithms include enhancements to the WEP protocol that mitigate existing network attacks and address its shortcomingsOpen and Shared Key authentication802.11 supports two types of network authentication methods; Open System and Shared Key.● Using Open authentication, any wireless station can request authentication. The station that needs to authenticate with another wireless station sends an authentication management frame that contains the identity of the sending station. The receiving station or AP grants any request for authentication. Open authentication allows any device network access. If no encryption is enabled on the network, any device that knows the SSID of the access point can gain access to the network. ● Using Shared Key authentication, each wireless station is assumed to have received a secret shared key over a secure channel that is independent from the 802.11 wireless network communications file:///C|/CX2%20Muroc%20UG/6-15-04/security.htm (1 of 6) [6/15/2004 3:40:11 PM]

Security Overviewchannel. Shared key authentication requires that the client configure a static WEP key. The client access is granted only if it passed a challenge based authentication.802.1x AuthenticationHow 802.1x authentication works802.1x features Overview802.1x authentication is independent of the 802.11 authentication process. The 802.1x standard provides a framework for various authentication and key-management protocols. There are different 802.1x authentication types, each providing a different approach to authentication but all employing the same 802.1x protocol and framework for communication between a client and an access point. In most protocols, upon the completion of the 802.1x authentication process, the supplicant receives a key that it uses for data encryption. Refer to How 802.1x authentication works for more information. With 802.1x authentication, an authentication method is used between the client and a Remote Authentication Dial-In User Service (RADIUS) server connected to the access point. The authentication process uses credentials, such as a user's password that are not transmitted over the wireless network. Most 802.1x types support dynamic per-user, per-session keys to strengthen the static key security. 802.1x benefits from the use of an existing authentication protocol known as the Extensible Authentication Protocol (EAP).802.1x authentication for wireless LANs has three main components: The authenticator (the access point), the supplicant (the client software), and the authentication server (a Remote Authentication Dial-In User Service server (RADIUS)). 802.1x authentication security initiates an authorization request from the wireless client to the access point, which authenticates the client to an Extensible Authentication Protocol (EAP) compliant RADIUS server. This RADIUS server may authenticate either the user (via passwords or certificates) or the system (by MAC address). In theory, the wireless client is not allowed to join the networks until the transaction is complete. There are several authentication algorithms used for 802.1x. Some examples are; MD5-Challenge, EAP-TLS, EAP-TTLS, Protected EAP (PEAP), and EAP Cisco Wireless Light Extensible Authentication Protocol (LEAP). These are all methods for the wireless client to identify itself to the RADIUS server. With RADIUS authentication, user identities are checked against databases. RADIUS constitutes a set of standards addressing Authentication, Authorization and Accounting (AAA). Radius includes a proxy process to validate clients in a multi-server environment. The IEEE 802.1x standard is for controlling and authenticating access to port-based 802.11 wireless and wired Ethernet networks. Port-based network access control is similar to a switched local area network (LAN) infrastructure that authenticates devices that are attached to a LAN port and prevent access to that port if the authentication process fails.What is a RADIUS?RADIUS is the Remote Access Dial-In User Service, an Authorization, Authentication, and Accounting (AAA) client-server protocol, which is used when a AAA dial-up client logs in or out of a Network Access Server. Typically, a RADIUS server is used by Internet Service Providers (ISP) to perform AAA tasks. AAA phases are file:///C|/CX2%20Muroc%20UG/6-15-04/security.htm (2 of 6) [6/15/2004 3:40:11 PM]

Security Overviewdescribed as follows: ● Authentication phase: Verifies a user name and password against a local database. After the credentials are verified, the authorization process begins. ● Authorization phase: Determines whether a request is allowed access to a resource. An IP address is assigned for the Dial-Up client.● Accounting phase: Collects information on resource usage for the purpose of trend analysis, auditing, session time billing, or cost allocationHow 802.1x authentication worksA simplified description of the 802.1x authentication is:1. A client sends a "request to access" message to an access point. The access point requests the identity of the client.2. The client replies with its identity packet which is passed along to the authentication server.3. The authentication server sends an "accept" packet to the access point.4. The access point places the client port in the authorized state and data traffic is allowed to proceed. 802.1x features● 802.1x supplicant protocol support ● Support for the Extensible Authentication Protocol (EAP) - RFC 2284 ● Supported Authentication Methods: ● MD5 - RFC 2284 ● EAP TLS Authentication Protocol - RFC 2716 and RFC 2246 ● EAP Tunneled TLS (TTLS)● Cisco LEAP● EAP-FAST● EAP-SIM● PEAP● Supports Windows XP, 2000 Refer to Security Settings for more information.WPA/WPS2Wi-Fi Protected Access (WPA/WPA2) is a security enhancement that strongly increases the level of data file:///C|/CX2%20Muroc%20UG/6-15-04/security.htm (3 of 6) [6/15/2004 3:40:11 PM]

Security Overviewprotection and access control to a wireless network. WPA enforces 802.1x authentication and key-exchange and only works with dynamic encryption keys. To strengthen data encryption, WPA utilizes its Temporal Key Integrity Protocol (TKIP). TKIP provides important data encryption enhancements that include a per-packet key mixing function, a message integrity check (MIC) named Michael an extended initialization vector (IV) with sequencing rules, and a also re-keying mechanism. Using these improvement enhancements, TKIP protects against WEP's known weaknesses. The second generation of WPA that complies with the IEEE TGi specification is known as WPA2.WPA/WPA2 – Enterprise provides this level of security on enterprise networks with a 802.1x RADIUS server. An Authentication Type is selected to match the authentication protocol of the 802.1x server.WPA/WPA2 - Personal provides this level of security in the small network or home environment. It uses a password also called a pre-shared key (PSK). The longer this password the stronger the security of the wireless network. If your Wireless Access Point or Router supports WPA/WPA2 Personal (WPA-PSK) then you should enable it on the access point and provide a long, strong password. The same password entered into access point needs to be used on this computer and all other wireless devices that access the wireless network.Cisco FeaturesCisco LEAP Cisco LEAP (Cisco Light EAP) is a server and client 802.1x authentication via a user-supplied logon password. When a wireless access point communicates with a Cisco LEAP-enabled RADIUS (Cisco Secure Access Control Server (ACS) server), Cisco LEAP provides access control through mutual authentication between client wireless adapters and the wireless network and provides dynamic, individual user encryption keys to help protect the privacy of transmitted data.Fast Roaming (CCKM)When a wireless LAN is configured for fast reconnection, a LEAP enabled client device can roam from one access point to another without involving the main server. Using Cisco Centralized Key Management (CCKM), an access point configured to provide Wireless Domain Services (WDS) takes the place of the RADIUS server and authenticates the client without perceptible delay in voice or other time-sensitive applications.CKIPCisco Key Integrity Protocol (CKIP) is Cisco proprietary security protocol for encryption in 802.11 media. CKIP uses the following features to improve 802.11 security in infrastructure mode:● Key Permutation (KP)file:///C|/CX2%20Muroc%20UG/6-15-04/security.htm (4 of 6) [6/15/2004 3:40:11 PM]

Security Overview Back to Contentsfile:///C|/CX2%20Muroc%20UG/6-15-04/security.htm (6 of 6) [6/15/2004 3:40:11 PM]

Connecting to a Network using Intel(R) PROSet/Wireless● Setup a secure wireless network using WPA ● Setup your wireless network with a new network name and no security (Anyone can access my network).The Linksys Access Point is setup with factory defaults, which include no security (open authentication) and linksys-g as the network name (SSID). In this state, your wireless network is not secure and allows others to easily monitor any data transfer over the wireless link. Configure a Linksys (EOU) Access PointTo configure a Linksys Access Point from your Intel Centrino laptop computer: Wireless Network Configuration Wizard - Step 1Welcome to Wireless Network ConfigurationThis dialog box displays when a Linksys (EOU) access point is within the range of your wireless adapter and starts the first step to establish a secure wireless connection with your Intel Centrino laptop computer. ● Do not launch this Wizard again: Click to postpone this process to a later time. NOTE: You can re-enable this feature in the Intel PROSet/Wireless Application Settings.1. Click Next to continue.Verify Ownership of your Linksys Access Point - Step 2The ownership identification step prevents the wizard from trying to configure the wrong wireless device.The character ownership key must be verified before your notebook can communicate with the access point. 2. Find the Ownership ID and Device ID key printed on the bottom of your Linksys Access Point or Wireless Router and enter it in the appropriate box.● Ownership ID: Enter the eight-character ownership identification key. ● Device ID: Enter the eight-character device identification key NOTE: A Linksys access point without an ownership identification key printed on it does not support the Intel(R) Smart Wireless Solutions feature and cannot be configured using the Configuration Wizard. Click Cancel to close the Configuration Wizard and refer to your Linksys User Guide. 3. Click Next to continue.file:///C|/CX2%20Muroc%20UG/6-15-04/connect.htm (4 of 9) [6/15/2004 3:40:13 PM]

$Connecting to a Network using Intel(R) PROSet/WirelessEnter New Configuration for Linksys Access Point - Step 34. To complete the configuration information, add the following network and security information.Enter Network Name (SSID):● What is the Network Name: Enter a network name (SSID) that identifies this wireless network. You can use a simple pass phrase such as Jerry’s Wireless Network or OfficeWLAN or use a more secure stronger network name such as Main!<Office>$WLAN. ● The Network Name can be up to 32 characters long. You may use upper- and lower-case letters, numbers, spaces, and most special characters. Avoid these characters -- \ / : * ? < > | "Securing your NetworkSelect one of the following options:● No security. Anyone can access my wireless network. ● WPA-Personal Security (8 to 63 alphanumeric characters).WPA is a security system that encrypts the data sent "over the air" on a wireless network so that only those users that know the Pass Phrase can access the network or interpret the transmitted data.● What is a Pass Phrase? The Pass Phrase is used to create constantly changing keys that encrypt the data that is transmitted between wireless devices. The Pass Phrase that you enter here is used in the Linksys wireless device and this Intel Centrino laptop computer. If you have other WPA compliant wireless devices, the same Pass Phrase must be entered into each of them. Enter a Pass Phrase Choose a simple or strong pass phrase (password) that is easy to remember. Enter at least 10 alphanumeric characters or more (a-z, A-Z, 0-9) and one special character from (! $ % ^ * ( ) - _ = + [ ] : < . > ?) Write the pass phrase down on a piece of paper or save it in a text file on your laptop computer in case you forget it. This password is used by other wireless devices to connect to this wireless network. If you do not specify a Pass Phrase, the default Pass Phrase is used. This Pass Phrase is used to encrypt and transmit data securely over the wireless link between your Intel Centrino laptop computer and the Linksys access point. 5. Click Next. A status dialog box displays while the Linksys Access Point is being configured.Wireless Configuration Complete - Final StepThe Configuration Wizard has successfully completed setting up your Linksys access point. You can now establish a secure wireless connection from your Intel Centrino laptop computer. 6. Configure my Broadband (DSL/Cable) Settings: Click to launch a configuration web page after you click Finish. This web page provides advanced options such as Internet and Broadband settings. 7. Click Finish to close the Configuration Wizard. file:///C|/CX2%20Muroc%20UG/6-15-04/connect.htm (5 of 9) [6/15/2004 3:40:13 PM]$