Table Of Contents
Release Notes for Cisco Aironet 350 and CB20A Client Adapter Install Wizard 1.7.01 for Windows
Customized Installation Images (Notice to IT Professionals)
Firmware Is Upgraded Automatically
Reboot Required When Uninstalling ACU
Uninstalling Software Components
Inserting and Removing Client Adapters
New EAP-SIM Supplicant Available
Windows Wireless Network Connection Icon Shows Unavailable Connection (Windows XP Only)
Installing or Upgrading Client Adapter Software
Finding the Install Wizard Version
Finding the Firmware and Driver Versions
Getting Bug Information on Cisco.com
Cisco Product Security Overview
Reporting Security Problems in Cisco Products
Obtaining Technical Assistance
Cisco Technical Support & Documentation Website
Definitions of Service Request Severity
Obtaining Additional Publications and Information
Release Notes for Cisco Aironet 350 and CB20A Client Adapter Install Wizard 1.7.01 for Windows
Contents
This document contains the following sections:
•Installing or Upgrading Client Adapter Software
•Cisco Product Security Overview
•Obtaining Technical Assistance
•Obtaining Additional Publications and Information
Introduction
This document describes system requirements, important notes, installation and upgrade procedures, and caveats for client adapter Install Wizard version 1.7.01 and the following software included in the Install Wizard file:
•Firmware version 5.60.21
•PC, LM, and PCI card driver version 8.7
•Mini PCI and PC-Cardbus card driver version 3.10
•Aironet Client Utility (ACU) version 6.6
•Aironet Client Monitor (ACM) version 2.4
•LEAP security module version 6.6
•EAP-FAST security module version 1.0
•PEAP security module version 1.2
•EAP-SIM security module version 1.0
Note Refer to the "New EAP-SIM Supplicant Available" section for information about a new EAP-SIM supplicant.
Purpose
The purpose of this release is to resolve a bug discovered in Install Wizard 1.7, which has since been removed from Cisco.com. This bug (CSCsc52037) causes the debug registry for the GINA log to be enabled by default. Refer to the "Resolved Caveats" section for more information on this bug.
System Requirements
You need the following in order to install Install Wizard 1.7.01 and use its software components:
•One of the following Cisco Aironet client adapters:
–350 series PC, LM, PCI, or mini PCI card
–CB20A PC-Cardbus card
Note Install Wizard 1.7.01 and its software components are not supported for use with Cisco Aironet 340 series client adapters.
•A computer running the Windows 2000 or XP operating system
Note Install Wizard 1.7.01 and its software components are not supported for use with Windows 95, 98, 98 SE, NT, and Me.
Note All drivers and supporting software (Card and Socket Services) for the PC card slot or Cardbus slot must be loaded and configured.
•A display with a minimum resolution of 800 x 600 pixels
•35 MB of free hard disk space (minimum)
Note The Install Wizard terminates if you attempt to install it on a computer that has less than
35 MB of hard disk space.
•One of the following host supplicants if your wireless network uses host-based EAP authentication with WPA:
–Funk Odyssey Client supplicant version 2.2 (for Windows 2000)
–Windows XP Service Pack 1 and Microsoft supplicant Q815485 (for Windows XP)
Note Meetinghouse AEGIS Client supplicant version 2.1 or later is also supported for use with Windows 2000 and XP; however, it was not tested with this client adapter software release.
•The Microsoft 802.1X supplicant, if your wireless network uses EAP-TLS, PEAP, or EAP-SIM authentication
•If your wireless network uses PEAP authentication with a One-Time Password (OTP) user database:
–SofToken version 1.3, 2.0, or later from Secure Computing; SecurID version 2.5 from RSA; or hardware token from OTP vendors
–Your software token PIN or hardware token password
•If your wireless network uses EAP-SIM authentication:
–PCSC-compliant smartcard reader installed in your computer's Type II or Type III PC card slot
–Gemplus SIM+ smartcard inserted in the reader
–The SIM card's PIN
Note The EAP-SIM supplicant included in the Install Wizard file supports only Gemplus SIM+ cards; however, an updated supplicant is available that supports standard GSM-SIM cards as well as more recent versions of the EAP-SIM protocol. The new supplicant is available for download from Cisco.com at the following URL:
http://www.cisco.com/cgi-bin/tablebuild.pl/access-registrar-encrypted
•The following information from your system administrator:
–The logical name for your workstation (also referred to as client name)
–The protocols necessary to bind to the client adapter
–The case-sensitive service set identifier (SSID) for your RF network
–If your computer is not connected to a DHCP server, the IP address, subnet mask, and default gateway address of your computer
–The wired equivalent privacy (WEP) keys of the access points with which your client adapter will communicate, if your wireless network uses static WEP for security
–The username and password for your network account
–Protected access credentials (PAC) file if your wireless network uses EAP-FAST authentication with manual PAC provisioning
•Access points to which your client adapter may attempt to authenticate must use the following firmware versions or later: 12.00T (340, 350, and 1200 series access points) or Cisco IOS Release 12.2(4)JA (1100 series access points).
Note To use WPA or fast roaming, access points must use Cisco IOS Release 12.2(11)JA or later. To use radio management (RM), access points must use Cisco IOS Release 12.2(13)JA or later. To use QoS and WMM, access points must use Cisco IOS Release 12.3(2)JA or later.
•All necessary infrastructure devices such as access points, servers, gateways, and user databases must be properly configured for any authentication type you plan to enable on the client.
Important Notes
Customized Installation Images (Notice to IT Professionals)
Caution Use caution when bundling the client adapter software into a customized installation image. If the registry settings are modified, the software may not install and uninstall properly.
Firmware Is Upgraded Automatically
The Install Wizard automatically upgrades the client adapter firmware to the version included in the Install Wizard file.
Note Applications such as AirMagnet and Wild Packets may fail after the firmware is upgraded. To resolve this problem, use ACU to downgrade the firmware to the previous version. Older versions of client adapter firmware are available from the Software Center on Cisco.com.
Reboot Required When Uninstalling ACU
Caution When you uninstall ACU, make sure you reboot your computer when prompted. Otherwise, the system may be rendered unable to boot, displaying the message "The Logon User Interface DLL cswGina.dll failed to load. Contact your system administrator to replace the DLL or restore the original DLL."
Uninstalling Software Components
All profiles are deleted if you use the Uninstall All Components option on the Cisco Aironet Wireless LAN Client Adapter Installation Wizard screen to uninstall the client adapter software. Cisco recommends that you use the Profile Manager's export feature to save your profiles before uninstalling the software.
Inserting and Removing Client Adapters
The following rules apply when inserting and removing client adapters:
•If you start ACU while a client adapter of one radio type is inserted (such as a 350 series PC card) and then eject the card and replace it with a card of another radio type (such as a CB20A PC-Cardbus card), ACU displays "Your Wireless LAN Adapter is not inserted" until ACU is shut down and restarted.
•The profiles for PC-Cardbus cards are tied to the slot in which the card is inserted. Therefore, you must always insert your PC-Cardbus card into the same slot, create profiles for both slots, or export the profiles for one slot and import them for the other slot.
New EAP-SIM Supplicant Available
A new EAP-SIM supplicant is available for download from Cisco.com. This new supplicant is an upgrade to the one included in the Install Wizard file. It provides new features, supports more recent versions of the EAP-SIM draft standard, and can be used with standard GSM-SIM cards as well as Gemplus SIM+ smartcards.
The new supplicant overwrites any previous EAP-SIM supplicant settings. If you plan to install the Cisco Aironet Install Wizard file after the new supplicant is installed, either perform an express installation or make sure that the EAP-SIM option is not selected on the Custom Installation screen. Otherwise, the EAP-SIM supplicant included in the Install Wizard file overwrites the new supplicant's settings.
You can access the latest EAP-SIM supplicant at the following URL:
http://www.cisco.com/cgi-bin/tablebuild.pl/access-registrar-encrypted
Windows Wireless Network Connection Icon Shows Unavailable Connection (Windows XP Only)
If your computer is running Windows XP and you configured your client adapter using ACU, the Windows Wireless Network Connection icon in the Windows system tray may be marked with a red X and show an unavailable connection even though a wireless connection exists. This condition is caused by a conflict between ACU and Windows XP's wireless network settings. Simply ignore the Windows icon and use the ACM icon to check the status of your client adapter's wireless connection.
Supporting Documentation
The Cisco Aironet 350 and CB20A Wireless LAN Client Adapters Installation and Configuration Guide for Windows (part number OL-1394-10) provides detailed installation, configuration, and troubleshooting information for Install Wizard 1.7.01 and its software components:
Installing or Upgrading Client Adapter Software
Follow these steps to use Install Wizard 1.7.01 to install or upgrade client adapter software on a computer running Windows 2000 or XP.
Note Install Wizard 1.7.01 and its software components are not supported for use with Windows 95, 98, 98 SE, NT, and Me.
Note You do not need to uninstall any previous versions of Cisco Aironet client adapter software (firmware, drivers, or utilities) or previous versions of the Install Wizard prior to installing Install Wizard 1.7.01.
Step 1 Use your computer's web browser to access the following URL:
http://tools.cisco.com/support/downloads/pub/MDFTree.x?butype=wireless
Step 2 Click Wireless LAN Access.
Step 3 Click Cisco Wireless LAN Client Adapters.
Step 4 Click Cisco Aironet Wireless LAN Client Adapters.
Step 5 Click Cisco Aironet 350 Mini-PCI Wireless LAN Client Adapter, Cisco Aironet 350 Wireless LAN Client Adapter, or Cisco Aironet 5 GHz 54 Mbps Wireless LAN Client Adapter (CB20A).
Step 6 Click Aironet Client Installation Wizard (Firmware, Driver, Utility).
Step 7 Click Windows 2000 or Windows XP.
Step 8 Click 1.7.01.
Step 9 Click the executable file (*.exe) that appears on your screen.
Step 10 Click Download.
Step 11 Read the software download rules and click Agree.
Step 12 Save the file to your computer's hard drive.
Step 13 Insert the client adapter into your computer if it is not already inserted.
Caution Do not eject your client adapter at any time during the installation process, including during the reboot.
Step 14 If a driver is not currently installed for your client adapter, the Found New Hardware Wizard screen appears. Click Cancel.
Step 15 Find the Install Wizard file using Windows Explorer, double-click it, and extract its files to a folder.
Note To extract the files, click Browse on the WinZip Self-Extractor screen, choose the folder in which you want the files to be placed, and click OK and Unzip. After the files are extracted, click OK to close the screen.
Step 16 Close Windows Explorer. The Cisco Aironet Wireless LAN Client Adapter Installation Wizard screen appears (see Figure 1).
Figure 1 Cisco Aironet Wireless LAN Client Adapter Installation Wizard Screen
Step 17 Choose one of the following options and click Next:
Note To ensure compatibility among software components, Cisco recommends that you perform an express installation. If you perform a custom installation, Cisco recommends that you install all components.
•Express Installation/Upgrade (recommended)—Silently installs the client adapter firmware, drivers, client utilities, and security modules using the default values listed in Table 1.
•Custom Installation/Upgrade—Enables you to specify which software components are installed and to change the default values of certain parameters.
Step 18 If a message appears indicating that you may be required to restart your computer at the end of the installation process, click OK.
Note If you click Cancel, the installation process terminates.
Step 19 If you chose an express installation, go to Step 21. If you chose a custom installation, the Custom Installation screen appears (see Figure 2).
Figure 2 Custom Installation Screen
Step 20 Follow these steps to make selections on this screen.
a. Make sure that a check mark appears beside every software component that you want to install. For every component that is checked, the Install Wizard installs its version of that component. Every component that is not checked remains as it currently is on your system.
Note Click the + sign beside the Security Modules option to reveal the available security components.
Note Some components are dependent on others. Therefore, when you select or deselect these components, the settings of other components may change. A dependency notice appears when this occurs.
b. Click the + sign beside each component to view additional parameters. The current value of each parameter appears in the Value field.
c. To change the value of any parameter, click its current value in the Value field. A screen appears that lets you change the existing value.
d. Enter or select a new value and click OK. Table 1 describes each component and its parameters and lists any default value.
Table 1 Software Components and Their Parameters
Component or Parameter DescriptionFirmware
Installs the firmware version included in the Install Wizard file.
Default: Checked
Disable Firmware Checking
The Disable Firmware Checking parameter affects the firmware that is bundled with the driver, not the firmware that is included in the Install Wizard. It controls whether the driver (whenever it loads) installs the firmware with which it is bundled.
Note The driver loads each time you insert a client adapter or reboot your computer.
Options: Yes or No
Default: Yes
Disable Firmware Checking DescriptionYes
Prevents the driver from installing the firmware with which it is bundled, enabling the client adapter to retain its current firmware version.
No
Causes the driver to install the firmware with which it is bundled if that firmware is newer than the firmware that is currently installed in the client adapter.
Note The Disable Firmware Checking parameter is functionally equivalent to the Automatically Load New Firmware When NDIS Driver Is Updated parameter on the ACU Preferences screen. The parameter that is set last is the one that governs how the driver behaves.
Drivers
Installs the driver version included in the Install Wizard file.
Default: Checked
Set Quiet Mode?
Specifies whether the client becomes quiet (to passively scan or listen) when its associated access point is turned off. In quiet mode, the client generates radio frequency energy only in direct response to an access point transmission. When the access point is turned back on, it starts sending beacons, which the client hears and can now respond to.
This parameter applies to individual cards rather than profiles. It can be set differently for different cards and remains in effect across ACU sessions and computer reboots.
Options: Yes or No
Default: No
Note You can also change the quiet mode setting in ACU by choosing the Turn Quiet Mode On/Off option from the Commands drop-down menu.
Aironet Client Utility
Installs the ACU version included in the Install Wizard file.
Default: Checked
Installation Path
Determines the path where the ACU software will be installed. You can change the default by entering a new path.
Default: C:\Program Files\Cisco Systems\Aironet Client Utility
Program Folder
Determines the program folder where the ACU software will be installed. You can change the default by entering a new folder name.
Default: Cisco Systems
Place Icon on Desktop
Causes the installation program to add an ACU icon to your computer's desktop to provide quick access to the utility.
Options: Yes or No
Default: Yes
Allow Non-Administrator Users to Save Settings to the Registry
Enables users without administrative rights to modify profiles in ACU and save them to the registry.
Options: Yes or No
Default: Yes
Aironet Client Monitor
Installs the ACM version included in the Install Wizard file.
Default: Checked
Installation Path
Determines the path where the ACM software will be installed. You can change the default by entering a new path.
Default: C:\Program Files\Cisco Systems\Aironet Client Monitor
Program Folder
Determines the program folder where the ACM software will be installed. You can change the default by entering a new folder name.
Default: Cisco Systems
Auto Start
Determines whether ACM starts automatically every time Windows boots.
Options: Yes or No
Default: Yes
Note If you choose No, you can later activate ACM by using Windows Explorer to find the path where the ACM software is installed and double-clicking ACUMon.exe.
Start After Install
Determines whether ACM starts automatically after ACM is installed.
Options: Yes or No
Default: Yes
Note If you choose No, you can later activate ACM by using Windows Explorer to find the path where the ACM software is installed and double-clicking ACUMon.exe.
Program Feature Overrides
Determines which ACM components are enabled. If any components are not selected now and you later want to use them, you must run this installation program again and enable them.
Components: See the table below
Options per component: Enable or Disable
Default per component: Enable
Component DescriptionAbout Box (Help)
Displays the ACM version number and enables you to access the online help.
Exit Program
Closes ACM for all client adapters.
Launch Aironet Client Utility
Activates ACU, if it is installed.
Troubleshooting
Activates the troubleshooting utility, which enables you to identify and resolve configuration and association problems with your client adapter.
Preferences
Enables you to determine when ACM runs and to select the options that appear on the ACM pop-up menu.
Turn Radio On/Off
Turns the client adapter's radio on or off.
Reauthenticate
Forces your client adapter to try to reauthenticate using the username and password of the current profile.
Select Profile
Enables you to select the active profile for your client adapter.
Auto Profile Selection
Causes the client adapter's driver to automatically select a profile from the list of profiles that were set up in ACU to be included in auto profile selection.
Other Configuration Application
Enables an application other than ACU to configure the client adapter.
Show Connection Status
Provides information on the current status of your client adapter.
Menu Options (Defaults)
Determines which options are displayed on the ACM pop-up menu.
Menu options: About Box (Help), Exit Program, Launch Aironet Client Utility, Troubleshooting, Turn Radio On/Off, Reauthenticate, Select Profile, Show Connection Status
Options per menu option: Show or Hide
Default per menu option: Show
Security Modules
LEAP
Installs the LEAP supplicant included in the Install Wizard file. Installing the LEAP supplicant enables you to create a profile in ACU that uses LEAP authentication. If this option is not selected now and you later want to create a profile that uses LEAP, you must run this installation program again and choose this option.
Default: Checked
Note If you choose LEAP on a Windows XP device, Windows XP's fast user switching feature is disabled.
Allow Saved LEAP User Name and Password
Enables you to create a profile in ACU that uses a saved (rather than temporary) username and password for LEAP authentication. When such a profile is selected, the saved username and password are used to start the LEAP authentication process, and you are not prompted to enter them.
Options: Yes or No
Default: Yes
EAP-SIM
Installs the EAP-SIM supplicant included in the Install Wizard file. Installing the EAP-SIM supplicant enables the client to support EAP-SIM authentication. If this option is not selected now and you later want to use EAP-SIM, you must run this installation program again and choose this option.
Default: Unchecked
Note To enable EAP-SIM authentication, your computer must run Windows 2000 with the Microsoft 802.1X supplicant installed or Windows XP.
Note If you installed the new EAP-SIM supplicant from Cisco.com (see the "New EAP-SIM Supplicant Available" section), make sure the EAP-SIM option is not selected. Otherwise, the EAP-SIM supplicant included in the Install Wizard file overwrites the new supplicant's settings.
PEAP
Installs the PEAP supplicant included in the Install Wizard file. Installing the PEAP supplicant enables the client to support PEAP authentication. If this option is not selected now and you later want to use PEAP, you must run this installation program again and choose this option.
Default: Unchecked
Note To enable Cisco PEAP authentication, your computer must run Windows 2000 with the Microsoft 802.1X supplicant installed or Windows XP.
Note Service Pack 1 for Windows XP and the Microsoft 802.1X supplicant for Windows 2000 include Microsoft's PEAP supplicant, which supports a Windows username and password only and does not interoperate with Cisco's PEAP supplicant. To use Cisco's PEAP supplicant, install the Install Wizard file after Windows XP Service Pack 1 or the Microsoft 802.1X supplicant for Windows 2000. Otherwise, Cisco's PEAP supplicant is overwritten by Microsoft's PEAP supplicant.
EAP-FAST
Installs the EAP-FAST supplicant included in the Install Wizard file. Installing the EAP-FAST supplicant enables you to create a profile in ACU that uses EAP-FAST authentication. If this option is not selected now and you later want to create a profile that uses EAP-FAST, you must run this installation program again and choose this option.
Default: Checked
Note The EAP-FAST supplicant is installed and can be enabled only on computers running Windows 2000 or XP.
Note If you choose EAP-FAST on a Windows XP device, Windows XP's fast user switching feature is disabled.
Allow Saved EAP-FAST User Name and Password
Enables you to create a profile in ACU that uses a saved (rather than temporary) username and password for EAP-FAST authentication. When such a profile is used, the saved username and password are used to start the EAP-FAST authentication process, and you are not prompted to enter them.
Options: Yes or No
Default: Yes
Note This parameter is applicable only to client adapters that are installed in computers running Windows 2000 or XP.
Allow Auto-Provisioning?
Enables a protected access credentials (PAC) file to be obtained automatically as needed (for instance, when a PAC expires, when the client adapter accesses a different server, when the EAP-FAST username cannot be matched to a previously provisioned PAC, etc.).
Options: Yes or No
Default: Yes
Note This parameter is applicable only to client adapters that are installed in computers running Windows 2000 or XP.
e. When you are finished making selections, click Next.
Step 21 The installation process begins, and you are notified as each component is installed. Perform one of the following:
•If a message appears asking if you wish to reboot now, click Yes.
Note To ensure that your client adapter software is installed properly, Cisco recommends that you click Yes to reboot your computer now.
•If a message appears indicating that the system is about to reboot, click OK and allow your computer to restart.
•If the following message appears, click OK and then reboot your computer: "The installation will complete and applications will be installed when a wireless LAN client adapter is inserted. If an adapter is already inserted, remove and reinsert the adapter or reboot the machine."
The Found New Hardware screen appears. Depending on your computer's operating system, you may have to click Next. The driver and other software components are installed. Then an ACM icon appears in the Windows system tray (unless you changed the default value during installation). Perform one of the following:
–If a message appears asking if you wish to reboot now, click Yes.
Note To ensure that your client adapter software is installed properly, Cisco recommends that you click Yes to reboot your computer now.
–If a message appears indicating that the system is about to reboot, click OK and allow your computer to restart.
Step 22 If you want to install a second client adapter, allow your computer to reboot completely; then insert the second adapter into your computer. Depending on your computer's operating system, one of the following scenarios occurs:
•The Found New Hardware Wizard screen appears. Depending on your computer's operating system, you may have to click Next. The driver and other software components are installed, and another ACM icon appears in the Windows system tray. Click Yes or OK when a message appears about rebooting your computer.
Note To ensure that your client adapter software is installed properly, Cisco recommends that you reboot your computer now.
•The driver and other software components are installed, and another ACM icon appears in the Windows system tray. Click Yes or OK when a message appears about rebooting your computer.
Note To ensure that your client adapter software is installed properly, Cisco recommends that you reboot your computer now.
Step 23 If your network setup does not include a DHCP server and you plan to use TCP/IP, follow these steps for your operating system. If you have more than one client adapter installed, repeat this step for each adapter.
•Windows 2000—Double-click My Computer, Control Panel, and Network and Dial-up Connections. Right-click Local Area Connection x (where x represents the number of the connection). Click Properties, Internet Protocol (TCP/IP), and Properties. Click Use the following IP address and enter the IP address, subnet mask, and default gateway address of your computer (which can be obtained from your system administrator). Click OK. In the Local Area Connection Properties window, click OK.
•Windows XP—Right-click Wireless Network Connection and click Properties. Click Internet Protocol (TCP/IP) and click Properties. Choose Use the following IP address and enter the IP address, subnet mask, and default gateway address of your computer (which can be obtained from your system administrator). Click OK
Step 24 If you are prompted to restart your computer, click Yes. The installation is complete.
Finding Version Numbers
Follow the instructions in this section to find the version numbers of your client adapter's software components.
Finding the Install Wizard Version
Follow these steps to find the version of the Install Wizard that is currently installed for your client adapter.
Step 1 Open Windows Explorer.
Step 2 Find the Install Wizard files.
Step 3 Right-click the IWSetup.exe or Setup.exe file.
Step 4 Click Properties.
Step 5 Click the Version tab. The File version field shows the version of the currently installed Install Wizard file.
Finding the Firmware and Driver Versions
To find the firmware and driver versions that are currently installed for your client adapter, click the ACU Status icon. The Firmware Version field on the Status screen shows the current firmware version, and the NDIS Driver Version field shows the current driver version.
Finding the ACU Version
To find the version of ACU that is currently installed for your client adapter, click the ACU About icon. The About Aironet Client Utility screen shows the current ACU version.
Finding the ACM Version
To find the version of ACM that is currently installed for your client adapter, right-click the ACM icon and click the About option. The About screen shows the current ACM version.
Caveats
This section describes the resolved and open caveats for the software components in Install Wizard 1.7 and 1.7.01.
Resolved Caveats
This caveat is resolved in the software components of Install Wizard 1.7.01.
•CSCsc52037—Debug mode enabled by default
The debug registry for the GINA log is enabled by default. Install Wizard 1.7 creates the registry value that enables GINA debug logging. This causes the C:\cswGina.log file to be created and written to during logon operations, such as at bootup and when logging in as a different user. Over time, this file can become large. To resolve this problem, upgrade to Install Wizard 1.7.01, following the instructions in the "Installing or Upgrading Client Adapter Software" section.
The following caveats are resolved in the software components of Install Wizard 1.7 and remain resolved in Install Wizard 1.7.01.
•CSCei14830—CB20A hangs when using fast roaming and an SSID of more than 16 characters
If you configure an infrastructure access point with an SSID containing more than 16 characters and then configure a CB20A client adapter with the same SSID and enable fast roaming, the client adapter associates to the access point. However, the client hangs when the access point's dot11 interface is closed and then reopened.
•CSCei27491—Client experiences Max PSP issues
When the client adapter is using Max PSP mode, it may fail to get a DHCP IP address and may experience low UDP throughput.
•CSCsa81143—MIC mismatch errors for CCKM with CMIC/CKIP
Message integrity check (MIC) mismatch errors occur when the client is roaming between access points, the RF coverage is very poor, and Cisco Centralized Key Management (CCKM) is configured with CMIC/CKIP encryption. These errors tend to occur at the very edge of the cell when the client could be roaming between two or more access points.
•CSCsb47648—Client cycles between association and disassociation
A 350 series client adapter running 5.60.xx firmware may cycle between association and disassociation with some third-party access points. In some cases, this may result in the link being unusable.
•CSCsb48728—Client roaming may be slower than normal
350 series mini PCI cards that have been upgraded to ACU 6.5 may experience slower-than-normal roaming time intervals. The problem has been linked to DHCP renewal issues on the client.
•CSCsb57806—Client fails to reauthenticate using EAP-FAST after hibernation
The client adapter fails to reauthenticate using EAP-FAST if a new PAC is provisioned from the AAA server prior to hibernation. If the user moves to a new location, auto profile selection fails to select the correct profile. To work around this problem, use ACM to choose Reauthenticate or to select the correct profile.
•CSCsb90256—Windows logon may crash when using EAP-FAST
The Windows logon may crash when the client adapter is running EAP-FAST and a new PAC is provisioned from the AAA server.
•CSCsb90261—Clients fail to associate to some third-party access points
350 series client adapters running 5.60.08 or 5.60.17 firmware may be unable to associate to some third-party access points. The problem may result from the client adapter sending its association request frame with WME and RM information elements, even if the access point's beacons/probe responses have indicated that the access point does not support these features.
•CSCsb97784—Client sends IP address 0.0.0.0 in response to show dot11 network-map command
350 series client adapters do not provide their IP address to the access point when the administrator issues the show dot11 network-map command. However, the client adapters do show the correct IP address when the administrator issues the show dot11 association command.
•CSCsc00772—ACU 6.5 may prompt multiple times for new password
After the client adapter's password expires, ACU 6.5 may prompt the user multiple times for a new password.
Open Caveats
The following caveats are not resolved in the software components of Install Wizard 1.7 and 1.7.01.
•CSCsc14393—Client fails to add entry to ACS error log
When an EAP-FAST login fails, the client adapter does not add an entry to the ACS error log explaining why the login failed.
•CSCsc16865—Client profile reauthenticates for no reason
By design, the client adapter reauthenticates whenever the active profile is changed. However, it is possible to change the profile without realizing it. If you open the RF Network screen in ACU for the active profile and click OK, the profile may change even though you did not make any changes. For an active infrastructure profile, ACU shows the currently in-use channel in the Channel drop-down box. If this value is different than the one saved in the profile, clicking OK to exit the screen results in a profile change and causes the client to reauthenticate.
Getting Bug Information on Cisco.com
If you are a Cisco registered user, you can use the Cisco TAC Software Bug Toolkit, which consists of three tools (Bug Navigator, Bug Watcher, and Search by Bug ID Number) that help you to identify existing bugs (or caveats) in Cisco software products.
Access the TAC Software Bug Toolkit at the following URL:
http://www.cisco.com/cgi-bin/Support/Bugtool/launch_bugtool.pl
Troubleshooting
For the most up-to-date, detailed troubleshooting information, refer to the Cisco TAC website at
http://www.cisco.com/en/US/support/index.html
Click Product Support > Wireless. Then choose your product and Troubleshooting to find information on the problem you are experiencing.
Related Documentation
For more information about Cisco Aironet 350 and CB20A client adapters for Windows, refer to the following documents:
•Cisco Aironet 350 and CB20A Wireless LAN Client Adapters Installation and Configuration Guide for Windows, OL-1394-10
•Release Notes for Cisco Aironet 350 and CB20A Client Adapter Firmware 5.60.21, OL-8496-01
http://www.cisco.com/en/US/products/hw/wireless/ps4555/prod_release_notes_list.html
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation at this URL:
http://www.cisco.com/techsupport
You can access the Cisco website at this URL:
You can access international Cisco websites at this URL:
http://www.cisco.com/public/countries_languages.shtml
Product Documentation DVD
Cisco documentation and additional literature are available in the Product Documentation DVD package, which may have shipped with your product. The Product Documentation DVD is updated regularly and may be more current than printed documentation.
The Product Documentation DVD is a comprehensive library of technical product documentation on portable media. The DVD enables you to access multiple versions of hardware and software installation, configuration, and command guides for Cisco products and to view technical documentation in HTML. With the DVD, you have access to the same documentation that is found on the Cisco website without being connected to the Internet. Certain products also have .pdf versions of the documentation available.
The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.com users (Cisco direct customers) can order a Product Documentation DVD (product number DOC-DOCDVD=) from Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Ordering Documentation
Beginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the Product Documentation Store in the Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Nonregistered Cisco.com users can order technical documentation from 8:00 a.m. to 5:00 p.m. (0800 to 1700) PDT by calling 1 866 463-3487 in the United States and Canada, or elsewhere by calling 011 408 519-5055. You can also order documentation by e-mail at tech-doc-store-mkpl@external.cisco.com or by fax at 1 408 519-5001 in the United States and Canada, or elsewhere at 011 408 519-5001.
Documentation Feedback
You can rate and provide feedback about Cisco technical documents by completing the online feedback form that appears with the technical documents on Cisco.com.
You can send comments about Cisco documentation to bug-doc@cisco.com.
You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
Cisco Product Security Overview
Cisco provides a free online Security Vulnerability Policy portal at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
From this site, you can perform these tasks:
•Report security vulnerabilities in Cisco products.
•Obtain assistance with security incidents that involve Cisco products.
•Register to receive security information from Cisco.
A current list of security advisories and notices for Cisco products is available at this URL:
If you prefer to see advisories and notices as they are updated in real time, you can access a Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed from this URL:
http://www.cisco.com/en/US/products/products_psirt_rss_feed.html
Reporting Security Problems in Cisco Products
Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all vulnerabilities quickly. If you think that you might have identified a vulnerability in a Cisco product, contact PSIRT:
•Emergencies — security-alert@cisco.com
An emergency is either a condition in which a system is under active attack or a condition for which a severe and urgent security vulnerability should be reported. All other conditions are considered nonemergencies.
•Nonemergencies — psirt@cisco.com
In an emergency, you can also reach PSIRT by telephone:
•1 877 228-7302
•1 408 525-6532
Tip We encourage you to use Pretty Good Privacy (PGP) or a compatible product to encrypt any sensitive information that you send to Cisco. PSIRT can work from encrypted information that is compatible with PGP versions 2.x through 8.x.
Never use a revoked or an expired encryption key. The correct public key to use in your correspondence with PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy page at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
The link on this page has the current PGP key ID in use.
Obtaining Technical Assistance
Cisco Technical Support provides 24-hour-a-day award-winning technical assistance. The Cisco Technical Support & Documentation website on Cisco.com features extensive online support resources. In addition, if you have a valid Cisco service contract, Cisco Technical Assistance Center (TAC) engineers provide telephone support. If you do not have a valid Cisco service contract, contact your reseller.
Cisco Technical Support & Documentation Website
The Cisco Technical Support & Documentation website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day, at this URL:
http://www.cisco.com/techsupport
Access to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL:
http://tools.cisco.com/RPF/register/register.do
Note Use the Cisco Product Identification (CPI) tool to locate your product serial number before submitting a web or phone request for service. You can access the CPI tool from the Cisco Technical Support & Documentation website by clicking the Tools & Resources link under Documentation & Tools. Choose Cisco Product Identification Tool from the Alphabetical Index drop-down list, or click the Cisco Product Identification Tool link under Alerts & RMAs. The CPI tool offers three search options: by product ID or model name; by tree view; or for certain products, by copying and pasting show command output. Search results show an illustration of your product with the serial number label location highlighted. Locate the serial number label on your product and record the information before placing a service call.
Submitting a Service Request
Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Service Request Tool provides recommended solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco engineer. The TAC Service Request Tool is located at this URL:
http://www.cisco.com/techsupport/servicerequest
For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.
To open a service request by telephone, use one of the following numbers:
Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447For a complete list of Cisco TAC contacts, go to this URL:
http://www.cisco.com/techsupport/contacts
Definitions of Service Request Severity
To ensure that all service requests are reported in a standard format, Cisco has established severity definitions.
Severity 1 (S1)—Your network is "down," or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.
Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.
Severity 3 (S3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.
Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•Cisco Marketplace provides a variety of Cisco books, reference guides, documentation, and logo merchandise. Visit Cisco Marketplace, the company store, at this URL:
http://www.cisco.com/go/marketplace/
•Cisco Press publishes a wide range of general networking, training and certification titles. Both new and experienced users will benefit from these publications. For current Cisco Press titles and other information, go to Cisco Press at this URL:
•Packet magazine is the Cisco Systems technical user magazine for maximizing Internet and networking investments. Each quarter, Packet delivers coverage of the latest industry trends, technology breakthroughs, and Cisco products and solutions, as well as network deployment and troubleshooting tips, configuration examples, customer case studies, certification and training information, and links to scores of in-depth online resources. You can access Packet magazine at this URL:
•iQ Magazine is the quarterly publication from Cisco Systems designed to help growing companies learn how they can use technology to increase revenue, streamline their business, and expand services. The publication identifies the challenges facing these companies and the technologies to help solve them, using real-world case studies and business strategies to help readers make sound technology investment decisions. You can access iQ Magazine at this URL:
http://www.cisco.com/go/iqmagazine
or view the digital edition at this URL:
http://ciscoiq.texterity.com/ciscoiq/sample/
•Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL:
•Networking products offered by Cisco Systems, as well as customer support services, can be obtained at this URL:
http://www.cisco.com/en/US/products/index.html
•Networking Professionals Connection is an interactive website for networking professionals to share questions, suggestions, and information about networking products and technologies with Cisco experts and other networking professionals. Join a discussion at this URL:
http://www.cisco.com/discuss/networking
•World-class networking training is available from Cisco. You can view current offerings at this URL:
http://www.cisco.com/en/US/learning/index.html
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0502R)
Copyright © 2005 Cisco Systems, Inc.
All rights reserved.