Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Administration Utility Administrator Guide (ACAU), Release 3.0
Index

Table Of Contents

 

Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - R - S - T - U - W -

Index 

Numerics

802.11 Authentication Mode parameter     5-12

802.11b Preamble parameter     5-9

802.1X

authentication types     5-16 to  5-18

defined     5-16

802.1x EAP Type parameter     5-28, 5-33, 5-45, 5-48, 5-52, 5-57

802.1x option     5-28, 5-33, 5-45, 5-48, 5-52, 5-57

A

About, menu option     1-4

ACAU

See Aironet Client Administration Utility (ACAU)

access points

entering MAC addresses     5-13

reporting those that fail LEAP authentication     5-20, 5-24

security settings     5-21 to  5-24

specifying     5-13

ad hoc network, selecting     5-9

advanced parameters

described     5-3, 5-6

setting     5-6 to  5-13

AES-CCMP, with WPA2     5-19

Aironet Client Administration Utility (ACAU)

client adapters supported     1-5

compatibility with Install Wizard     1-2

components     1-3 to  1-4

configuration tabs     1-3 to  1-4

configuring global settings     4-1 to  4-14

default installation location     2-4

icon     2-8

installing     2-2 to  2-6

main window     1-3

menus     1-4

obtaining     2-2

operating systems supported     viii, 1-2

overview     1-2

running     2-8

uninstalling     2-9

upgrading     2-7 to  2-8

using     3-1 to  3-12

Aironet Desktop Utility (ADU)

enabling or disabling     4-5

enabling or disabling profile management feature     4-10

opening from ASTU     4-13

placing icon in system tray     4-6

placing icon on desktop     4-5

preventing access to     4-9

Aironet System Tray Utility (ASTU)

accessing online help     4-12

accessing troubleshooting utility     4-13

configuring user privileges     4-11 to  4-14

described     4-11

disabling client adapter radio     4-13

displaying Connection Status window     4-14

enabling manual EAP login     4-13

exiting ADU     4-12

forcing reauthentication     4-13

opening ADU     4-13

selecting profiles     4-14

Aironet System Tray Utility Preferences window     4-12

Allow Association to Mixed Cells parameter

setting with EAP-FAST     5-42

setting with EAP-TLS     5-47

setting with LEAP     5-31

setting with PEAP (EAP-GTC)     5-51

setting with PEAP (EAP-MSCHAP V2)     5-55

setting with static WEP     5-26

Allow Automatic PAC Provisioning for this Profile parameter     5-41

Allow Modification of Automatic PAC Provisioning in Profiles parameter     4-10

-AllowReRun, profile migration tool command line option     D-5

Allow user to Create a Profile parameter     4-9

Allow user to Export a Profile parameter     4-9

Allow user to Import a Profile parameter     4-9

Allow user to Modify a Profile parameter     4-9

Allow user to Remove a Profile parameter     4-9

Always Resume the Secure Session parameter

for LEAP     5-30

for PEAP (EAP-GTC)     5-50

antenna gains

IEEE 802.11a     B-4

IEEE 802.11b     B-4

IEEE 802.11g     B-5

ASTU Settings parameters

configuring     4-11 to  4-14

described     1-3

overview     4-11

audience of document     viii

authentication process     5-18

Authentication Timeout Value parameter

for LEAP     5-31

Automatically Prompt for User Name and Password option

for EAP-FAST     5-37

for LEAP     5-30

auto profile selection

enabling     3-11

forcing in ADU     4-11

including a profile in     3-9 to  3-11

prioritizing profiles     3-11

removing a profile from     3-11

rules     3-10

Auto Profile Selection Management window     3-10, 3-11

Auto Select Profiles parameter     3-11

B

broadcast key rotation

described     5-21

setting on client and access point     5-24

broadcast SSIDs     5-5

C

CAM     5-8

Canadian compliance statement     A-3

-CardOrder, profile migration tool command line option     D-5

caution, defined     ix

-CB20A, profile migration tool command line option     D-5

CB21AG client adapter, described     1-5

CCKM fast secure roaming

described     5-19 to  5-20

enabling with EAP-FAST     5-33

enabling with EAP-TLS     5-45

enabling with LEAP     5-28

enabling with PEAP (EAP-GTC)     5-48

enabling with PEAP (EAP-MSCHAP V2)     5-52

setting on client and access point     5-24

certificates, required for EAP-TLS and PEAP authentication     5-44

Channel parameter     5-11

channels, supported by regulatory domains

IEEE 802.11a     B-2

IEEE 802.11b/g     B-3

CiscoAdminConfig.dat file

components     3-2

creating     3-2 to  3-5

default location     1-4

described     1-4

saving     3-5

Cisco Key Integrity Protocol (CKIP), with LEAP     5-16

client adapters

disabling radio     4-13

models supported     viii, 1-5

client adapter software

configuring silent installation     4-6

configuring silent uninstall     4-7

configuring silent upgrade     4-7

defined     1-2

installing     2-9

obtaining     2-9

uninstalling     2-9

Client Name parameter     5-4

command line options, for profile migration tool     D-4 to  D-6

-ConfigFile, profile migration tool command line option     D-5

configuration file

components     3-2

creating     3-2 to  3-5

default location     1-4

described     1-4 to  1-5

modifying     3-6

saving     3-5, 3-6

configuration tabs     1-3

configuring global settings     4-1 to  4-14

Constantly Awake Mode (CAM)

See CAM

Contents, menu option     1-4

conventions of document     ix

D

declarations of conformity

European community, Switzerland, Norway, Iceland, and Liechtenstein     A-3 to  A-4

FCC     A-2

information     A-4 to  A-6

RF exposure     A-7

Define Certificate window     5-45

Define PEAP (EAP-GTC) Configuration window     5-49

Define PEAP (EAP-MSCHAP V2) Configuration window     5-53

Disable Radio parameter     4-13

document

audience     viii

conventions     ix

organization     viii

purpose     viii

domain name

including in Windows login

for EAP-FAST     5-37

for LEAP     5-31

specifying for saved user name and password

for EAP-FAST     5-37

for LEAP     5-30

dynamic WEP keys, overview     5-16 to  5-18

E

EAP authentication, overview     5-16 to  5-18

EAP-Cisco Wireless

See LEAP authentication

EAP-FAST authentication

described     5-16 to  5-18

enabling     5-32

RADIUS servers supported     5-16

requirements     5-32

setting on client and access point     5-22

user databases supported     5-17

EAP-FAST option     5-33

EAP-FAST Settings window     5-34, 5-35

EAP-TLS authentication

described     5-17 to  5-18

enabling     5-44 to  5-47

RADIUS servers supported     5-17

requirements     5-44

setting on client and access point     5-23

EAP-TLS machine authentication with machine credentials

requirements     5-44

setting     5-41, 5-46

EAP-TLS option     5-45

EIRP, maximum supported by regulatory domains

IEEE 802.11a     B-4

IEEE 802.11b     B-4

IEEE 802.11g     B-5

Enable Profile Management parameter     4-10

Enter Password window     5-40

error messages     C-2 to  C-7

Exit

menu option     1-4

parameter     4-12

Export button     3-9

Export Profile window     3-9

F

Fast PSP     5-8

FCC declaration of conformity statement     A-2

File drop-down menu     1-4

finding domain controller timeout value

for EAP-FAST     5-42

for LEAP     5-14

Force Auto Select Profiles parameter     4-11

frequencies, supported by regulatory domains

IEEE 802.11a     B-2

IEEE 802.11b/g     B-3

frequency, setting     5-10

G

general parameters

described     5-3

setting     5-3 to  5-5

global PACs     5-17, 5-40

Global Settings tab

changing parameter values     4-3

described     1-3

displayed     4-2, 4-3, 4-4

groups of parameters     1-3, 4-2

overview     4-2 to  4-5

parameter dependencies     4-4 to  4-5

Global Settings window     3-2

Group Policy Delay parameter

setting with EAP-FAST     5-43

setting with EAP-TLS     5-47

setting with LEAP     5-32

setting with PEAP (EAP-GTC)     5-52

setting with PEAP (EAP-MSCHAP V2)     5-56

setting with PEAP (EAP-MSCHAP V2) machine authentication with machine credentials     5-57

setting with WPA/WPA2 passphrase     5-27

H

Help

drop-down menu     1-4

parameter     4-12

Host Based EAP option     5-57

I

Import button     3-8

Import EAP-FAST PAC File window     5-39

Import Profile window     3-8

Include Windows Logon Domain with User Name parameter

for EAP-FAST     5-37

for LEAP     5-31

infrastructure network, selecting     5-9

Installation Location window     2-4

Installation Type parameter     4-7

installing

ACAU     2-2 to  2-6

client adapter software     2-9

profile migration tool     D-3

InstallShield Wizard Complete window     2-6

InstallShield Wizard window     2-3

Install Site Survey Utility parameter     4-7

J

Japan, guidelines for operating client adapters     A-7

L

LEAP authentication

described     5-16 to  5-18

enabling     5-28 to  5-32

RADIUS servers supported     5-16

requirements     5-28

setting on client and access point     5-22

timeout value     5-31

LEAP option     5-28

LEAP Settings window     5-29

Limit the functionalities to System Tray icon parameter     4-9

locking a profile     5-15

-logfile, profile migration tool command line option     D-6

long radio headers, using     5-9

M

machine authentication with machine credentials

using EAP-TLS     5-41, 5-46

using PEAP (EAP-MSCHAP V2)     5-56 to  5-58

machine authentication with user credentials

using PEAP (EAP-GTC)     5-49

using PEAP (EAP-MSCHAP V2)     5-54

Manual Login parameter     4-13

Manually Prompt for User Name and Password option

for EAP-FAST     5-37

for LEAP     5-30

Max PSP     5-8

message integrity check (MIC)

described     5-21

setting on client and access point     5-24

with WPA     5-19

Microsoft Wireless Configuration Manager

enabling or disabling     4-5

role in switching between host-based EAP and non-host-based EAP profiles     5-56, 5-57

-miniPCI, profile migration tool command line option     D-6

MMH MIC, with LEAP     5-16

N

Network Type parameter     5-9

New, menu option

described     1-4

using     3-2

No Network Connection Unless User Is Logged In parameter

for EAP-FAST     5-42

for LEAP     5-31

note, defined     ix

O

Open, menu option

described     1-4

using     3-6, 3-7

Open Aironet Desktop Utility parameter     4-13

open authentication, setting     5-12

Open window     3-6

operating systems supported     viii

Order Profiles button     3-10

organization of document     viii

P

PAC authority, selecting     5-39, 5-41

PAC provisioning

automatic     5-41

manual     5-41

setting user privileges     4-10

PACs

copying from private store to global store     5-42

described     5-16, 5-17, 5-41

entering password for     5-40 to  5-41

exporting     3-8

importing     5-39 to  5-41

rules for storage     5-17

types of     5-17

PAC stores

selecting     5-40

types of     5-40

PC-Cardbus card, described     1-5

-pci350, profile migration tool command line option     D-6

PCI card, described     1-5

-pcmcia350, profile migration tool command line option     D-6

PEAP (EAP-GTC) authentication

described     5-18

enabling     5-48 to  5-52

RADIUS servers supported     5-18

requirements     5-44

setting on client and access point     5-23

user databases supported     5-18

PEAP (EAP-GTC) machine authentication with user credentials, setting     5-49

PEAP (EAP-GTC) option     5-48

PEAP (EAP-MSCHAP V2) authentication

Certificate option     5-54

described     5-18

enabling     5-52 to  5-56

RADIUS servers supported     5-18

requirements     5-44

setting on client and access point     5-23

User Name and Password option     5-54

PEAP (EAP-MSCHAP V2) machine authentication with machine credentials, setting     5-56 to  5-58

PEAP (EAP-MSCHAP V2) machine authentication with user credentials, setting     5-54

PEAP (EAP-MSCHAP V2) option     5-52

peer-to-peer network     5-9

PI21AG client adapter, described     1-5

Place ADU icon in the System Tray parameter     4-6

Place ADU icon on Desktop parameter     4-5

power level

maximum     B-4 to  B-5

setting     5-7

Power Save Mode parameter     5-8

Preferences parameter     4-12

Preferred Access Points window     5-13

Preferred APs button     5-13

Preparing Setup window     2-3, 2-7

Pre-Shared Key (Static WEP) option     5-25

Previous Installation Detected window     2-8

private PACs     5-17, 5-40

product model numbers     1-5

Profile Editor

Advanced window     5-6

General window     3-4, 5-4

Security window     5-14

windows     5-3

Profile Management tab

described     1-4

overview     5-2 to  5-3

selecting     3-3

using     3-6

Profile Management window     3-3, 5-2

profile manager, opening     5-2 to  5-3

profile migration tool

command line options     D-4 to  D-6

compatibility with Install Wizard     D-2

configuring installation settings     4-8

entering command line options     4-8, D-4

finding version number     D-2

installing     D-3

name and location of generated log file     D-4, D-6

name mangling     D-2

overview     D-2

rules governing profile migration     D-2 to  D-3

running     D-3 to  D-4

running multiple times     D-5

uninstalling     D-7

using     D-1 to  D-7

viewing generated log file     D-4

Profile Migration Tool parameter     4-8

Profile Migration Tool Parameters window     4-8

Profile Name parameter     5-4

profiles

allowing user to create     4-9

allowing user to export     4-9

allowing user to import     4-9

allowing user to modify     4-9

allowing user to remove     4-9

defined     5-2

described     1-2

exporting     3-8 to  3-9

importing     3-7 to  3-8

including in auto profile selection     3-9 to  3-11

locking     5-15

overwriting or appending     4-11

removing     3-7

removing from auto profile selection     3-11

retrieving from registry     3-12

selecting from ASTU     4-14

Profile Settings parameters

configuring     4-10 to  4-11

described     1-3

overview     4-10

Prompt the User Before Initiating Automatic PAC Provisioning parameter     4-10

purpose of document     viii

R

radio, disabling     4-13

RADIUS servers

additional information     5-18

defined     5-16

supported     5-16 to  5-18

Read from registry, menu option

described     1-4

using     3-12

Reauthenticate parameter     4-13

Reboot after Silent Setup parameter     4-7

registry, retrieving a profile from     3-12

regulatory

domains

IEEE 802.11a     B-2

IEEE 802.11b/g     B-3

information     A-2 to  A-9

related publications     ix

-replace, profile migration tool command line option     D-6

Restrict Time Finding Domain Controller parameter

setting with EAP-FAST     5-42

running ACAU     2-8

S

Save, menu option     1-4

Save As, menu option

described     1-4

using     3-5

Save As window     3-5

saved username and password

described

for LEAP     5-29

entering

for EAP-FAST     5-37

for LEAP     5-30

security features

overview     5-15 to  5-21

synchronizing     5-21 to  5-24

security parameters

described     5-3, 5-14

setting     5-14 to  5-58

Select Profile parameter     4-14

Setup Settings parameters

configuring     4-5 to  4-9

described     1-3

overview     4-5

Setup Status window     2-5

shared authentication, setting     5-12

short radio headers, using     5-9

Show Connection Status parameter     4-14

Silent setup parameter     4-6

site survey utility, installing     4-7

SSID1 parameter     5-5

SSID2 parameter     5-5

SSID3 parameter     5-5

static WEP

enabling     5-25 to  5-26

with open authentication, setting on client and access point     5-21

with shared key authentication, setting on client and access point     5-21

static WEP keys

guidelines for entering     5-26

overview     5-16

selecting transmit key     5-26

size of     5-25

T

Taiwan, administrative rules for client adapters     A-8 to  A-9

Temporal Key Integrity Protocol (TKIP)

described     5-21

setting on client and access point     5-24

with WPA     5-19

temporary username and password

automatically prompt for

for EAP-FAST     5-37

for LEAP     5-30

described

for EAP-FAST     5-36, 5-37

for LEAP     5-29

manually prompt for

for EAP-FAST     5-37

for LEAP     5-30

selecting options

for EAP-FAST     5-37

for LEAP     5-30

using Windows credentials

for LEAP     5-30

throughput     5-8, 5-9

transmit key     5-26

Transmit Power Level parameter     5-7

Troubleshooting parameter     4-13

troubleshooting utility, accessing from ASTU     4-13

U

uninstalling

ACAU     2-9

client adapter software     2-9

profile migration tool     D-7

Update existing Profiles parameter     4-11

upgrading ACAU     2-7 to  2-8

Use Machine Information For Domain Logon parameter

for EAP-TLS     5-41, 5-46

for PEAP (EAP-GTC)     5-49

for PEAP (EAP-MSCHAP V2)     5-54

Use Microsoft Zero Configuration parameter     4-5

User Settings parameters

configuring     4-9 to  4-10

described     1-3

overview     4-9

Use Saved User Name and Password option

for EAP-FAST     5-37

for LEAP     5-29

Use Temporary User Name and Password option

for EAP-FAST     5-36, 5-37

for LEAP     5-29

Use Windows User Name and Password option

for EAP-FAST     5-37

for LEAP     5-30, 5-37

W

WEP key hashing, described     5-21

WEP keys

additional security features     5-21

defined     5-15

size of     5-15

types of     5-15

Wi-Fi Protected Access (WPA)

described     5-19

enabling with EAP-FAST     5-33

enabling with EAP-TLS     5-45

enabling with PEAP (EAP-GTC)     5-48

enabling with PEAP (EAP-MSCHAP V2)     5-52

Wi-Fi Protected Access 2 (WPA2)

described     5-19

enabling with EAP-FAST     5-33

enabling with EAP-TLS     5-45

enabling with PEAP (EAP-GTC)     5-48

enabling with PEAP (EAP-MSCHAP V2)     5-52

Wireless Mode parameter     5-10

Wireless Mode When Starting Ad Hoc Network parameter     5-10

WPA

See Wi-Fi Protected Access (WPA)

WPA/WPA2/CCKM EAP Type parameter

with EAP-FAST     5-33

with EAP-TLS     5-45

with LEAP     5-28

with PEAP (EAP-GTC)     5-48

with PEAP (EAP-MSCHAP V2)     5-52

WPA/WPA2/CCKM option

used to enable CCKM fast secure roaming     5-20

with EAP-FAST     5-33

with EAP-TLS     5-45

with LEAP     5-28

with PEAP (EAP-GTC)     5-48

with PEAP (EAP-MSCHAP V2)     5-52

WPA/WPA2 Passphrase option     5-27

WPA2 passphrase

described     5-19

enabling     5-27

setting on client and access point     5-22

WPA passphrase

described     5-19

enabling     5-27

setting on client and access point     5-22

WPA Pre-Shared Key

See WPA passphrase or WPA2 passphrase

WPA-PSK, described     5-19