Manuals

Connecting to an Advanced Network Using the Dell Wireless WLAN Card Utility: Dell Wireless WLAN Card User Guide Back to Contents Page

Connecting to an Advanced Network Using the Dell Wireless WLAN Card Utility: Dell Wireless WLAN Card User Guide

Overview

Available Network Authentication Protocols

Obtaining Certificates

Saving Preferred Network Connection Profiles to a File

Importing a Preferred Network Connection Profiles File

Overview

The Wireless Network Connection Settings component of the Dell Wireless WLAN Card Utility enables you to easily connect to an advanced network. You can use this tool, rather than the Wireless Network Wizard, to connect to a basic network as well.

For the purposes of this user guide, an advanced network is defined as an infrastructure network that uses some form of EAP (also called 802.1X) authentication.

To connect to a network, you must first create a network connection profile (see "Creating Network Connection Profiles"). The profile comprises the network name and the security settings required by the network.

When you create a connection profile for an infrastructure network, your computer adds the profile to the top of the Preferred network connections list on the Wireless Networks tab of the Dell Wireless WLAN Card Utility and automatically attempts to connect to the network using that profile. If the network is in range, the connection is made. If the network is out of range, the profile is still added to the top of the list, but your computer uses the next profile in the list to attempt a connection until it finds a listed network that is in range. You can arrange the profiles in the order you prefer by moving any connection profile up or down in the list. To attempt to connect to a network that is not at the top of the list, you can use the Connect command on the menu that is available when you right-click the name of the network.

You can tell if you have successfully connected to a network by the appearance of the network type icon. The infrastructure icon changes to .

NOTE: Any changes you make to any of the network connection profiles do not take effect until you click either Apply or OK.

You can save the preferred network connection profiles to a file and later import the file. For instructions, see Saving Preferred Network Connection Profiles to a File and Importing a Preferred Network Connection Profiles File.

The various controls on Wireless Network Connection Settings are keyed to the type of network authentication, EAP method, and inner EAP method that you select and whether the This is an ad hoc network checkbox is cleared or selected. For example, if you select Open authentication, the EAP method and Inner EAP method controls are unavailable, but the Network Key tab is available. If you select 802.1X authentication, the EAP method control is available, and the Inner EAP method control is either available or not, depending on the type of EAP method you select. If you select the This is an ad hoc network checkbox, the items in the Network authentication list are limited to Open and Shared.

The colored square to the left of the tab label indicates if user action is necessary. If the square is red, user action is required. When you take the required action, the color of the square changes to green.

See Available Network Security Protocols for guidance in selecting the appropriate authentication method, EAP method, and inner EAP method for your network.

Before you proceed, be sure you have reviewed "Before You Begin" in "Introduction."

Available Network Authentication Protocols

The security protocols (network authentication) that are available in the Dell Wireless WLAN Card Utility include:

Security Protocol	Description	Data Encryption Method	Authentication Method	Authentication Description
Basic Network Security Types
Open system	Open system authentication is not really authentication because it only identifies a wireless node using its wireless adapter hardware address.	WEP	Open	A network key can be used.
Shared key	Shared key authentication verifies that the wireless client joining the wireless network has been configured with a secret key. With an infrastructure network, all of the wireless clients and the wireless AP use the same shared key. With an ad hoc network, all of the wireless clients of the ad hoc wireless network use the same shared key.	WEP	Shared	A network key is used.
WPA-Personal (PSK)	For infrastructure environments without the RADIUS infrastructure. WPA-Personal (PSK) supports the use of a preshared key. WPA-Personal (PSK) is the next generation of wireless network security for home and small office environments. The WPA-Personal (PSK) protocol uses either WPA-PSK or WPA2-PSK protocols based on the WPA-PSK/WPA2-PSK security protocols available on the AP.	Auto (TKIP or AES)	WPA-Personal (PSK)	A network key is used.
Advanced Network Security Types
802.1X	802.1X security enforces authentication of a network node before it can begin to exchange data with the network. This mode is for environments with a Remote Access Dial-In User Service (RADIUS) infrastructure. This environment requires heavy technical support to set up and maintain and is intended for use by large corporations.	WEP –or– CKIP	TLS	TLS EAP authentication with no inner authentication. Requires a client certificate.
		WEP –or– CKIP	TTLS/PAP	TTLS EAP authentication with PAP inner authentication. Requires user name and password.
			TTLS/CHAP	TTLS EAP authentication with CHAP inner authentication. Requires user name and password.
			TTLS/MD5	TTLS EAP authentication with MD5 inner authentication. Requires user name and password.
			TTLS/MS-CHAP	TTLS EAP authentication with MS-CHAP inner authentication. Requires user name and password.
			TTLS/MS-CHAPv2	TTLS EAP authentication with MS-CHAPv2 inner authentication. Requires user name and password.
		WEP –or– CKIP	LEAP	LEAP EAP authentication with no inner authentication. Requires user name and password.
			PEAP/MS-CHAPv2	PEAP EAP authentication with MS-CHAPv2 inner authentication. Requires user name and password.
			PEAP/TLS	PEAP EAP authentication with TLS inner authentication. Requires a client certificate.
			PEAP/GTC	PEAP EAP authentication with GTC inner authentication. Requires user name and password to log on.
		WEP	MD5	MD5 EAP authentication with no inner authentication. Requires user name and password. A network key is used.
		WEP –or– CKIP	EAP-FAST/NONE	EAP-FAST EAP authentication with no inner authentication. NOTE: Use this method to connect to a Cisco Compatible Extensions v3 network. If you are connecting to a Cisco Compatible Extensions v4 network, you must use one of the EAP-FAST inner EAP methods, such as MS-CHAPv2, TLS, or GTC.
			EAP-FAST/MS-CHAPv2	EAP-FAST EAP authentication with MS-CHAPv2 inner authentication. Requires user name and password. Has option for using Cisco Compatible Extensions v4 authenticated provisioning. If the option for using authenticated provisioning is selected, a client certificate must also be supplied when provisioning a PAC. NOTE: Use this method to connect to a Cisco Compatible Extensions v4 network. If you are connecting to a Cisco Compatible Extensions v3 network, you must use the EAP-FAST/NONE method.
			EAP-FAST/TLS	EAP-FAST EAP authentication with TLS inner authentication. Requires a client certificate. Has option for using Cisco Compatible Extensions v4 authenticated provisioning. NOTE: Use this method to connect to a Cisco Compatible Extensions v4 network. If you are connecting to a Cisco Compatible Extensions v3 network, you must use the EAP-FAST/NONE method.
			EAP-FAST/GTC	EAP-FAST EAP authentication with GTC inner authentication. Requires a client certificate. Cisco Compatible Extensions v4 authenticated provisioning is used. NOTE: Use this method to connect to a Cisco Compatible Extensions v4 network. If you are connecting to a Cisco Compatible Extensions v3 network, you must use the EAP-FAST/NONE method.
WPA-Enterprise	The network is operating in IEEE 802.1X authentication mode. This mode is for environments with a Remote Access Dial-In User Service (RADIUS) infrastructure. This environment requires heavy technical support to set up and maintain and is intended for use by large corporations. The WPA-Enterprise protocol uses either WPA or WPA2 protocols based on the WPA/WPA2 security protocols available on the AP.	TKIP (WPA) AES (WPA2)	TLS	TLS EAP authentication with no inner authentication. Requires a client certificate.
			TTLS/PAP	TTLS EAP authentication with PAP inner authentication. Requires user name and password.
			TTLS/CHAP	TTLS EAP authentication with CHAP inner authentication. Requires user name and password.
			TTLS/MD5	TTLS EAP authentication with MD5 inner authentication. Requires user name and password.
			TTLS/MS-CHAP	TTLS EAP authentication with MS-CHAP inner authentication. Requires user name and password.
			TTLS/MS-CHAPv2	TTLS EAP authentication with MS-CHAPv2 inner authentication. Requires user name and password.
			LEAP	LEAP EAP authentication with no inner authentication. Requires user name and password.
			PEAP/MS-CHAPv2	PEAP authentication with MS-CHAPv2 inner authentication. Requires user name and password.
			PEAP/TLS	PEAP EAP authentication with TLS inner authentication. Requires a client certificate.
			PEAP/GTC	PEAP EAP authentication with GTC inner authentication. Requires user name and password to log on.
			EAP-FAST/NONE	EAP-FAST EAP authentication with no inner authentication. NOTE: Use this method to connect to a Cisco Compatible Extensions v3 network. If you are connecting to a Cisco Compatible Extensions v4 network, you must use one of the EAP-FAST inner EAP methods, such as MS-CHAPv2, TLS, or GTC.
			EAP-FAST/MS-CHAPv2	EAP-FAST EAP authentication with MS-CHAPv2 inner authentication. Requires user name and password. Has option for using Cisco Compatible Extensions v4 authenticated provisioning. If the option for using authenticated provisioning is selected, a client certificate must also be supplied when provisioning a PAC. NOTE: Use this method to connect to a Cisco Compatible Extensions v4 network. If you are connecting to a Cisco Compatible Extensions v3 network, you must use the EAP-FAST/NONE method.
			EAP-FAST/TLS	EAP-FAST EAP authentication with TLS inner authentication. Requires a client certificate. Has option for using Cisco Compatible Extensions v4 authenticated provisioning. NOTE: Use this method to connect to a Cisco Compatible Extensions v4 network. If you are connecting to a Cisco Compatible Extensions v3 network, you must use the EAP-FAST/NONE method.
			EAP-FAST/GTC	EAP-FAST EAP authentication with GTC inner authentication. Requires a client certificate. Cisco Compatible Extensions v4 authenticated provisioning is used. NOTE: Use this method to connect to a Cisco Compatible Extensions v4 network. If you are connecting to a Cisco Compatible Extensions v3 network, you must use the EAP-FAST/NONE method.
CCKM	An authentication method in which an access point is configured to provide Wireless Domain Services (WDS) to take the place of the RADIUS server and to authenticate the client so quickly that there is no perceptible delay in voice or other time-sensitive applications.	WEP –or– CKIP –or– TKIP	TLS	TLS EAP authentication with no inner authentication.
			LEAP	LEAP EAP authentication with no inner authentication. Requires user name and password.
			EAP-FAST/NONE	EAP-FAST EAP authentication with no inner authentication. NOTE: Use this method to connect to a Cisco Compatible Extensions v3 network. If you are connecting to a Cisco Compatible Extensions v4 network, you must use one of the EAP-FAST inner EAP methods, such as MS-CHAPv2, TLS, or GTC.
			EAP-FAST/MS-CHAPv2	EAP-FAST EAP authentication with MS-CHAPv2 inner authentication. Requires user name and password. Has option for using Cisco Compatible Extensions v4 authenticated provisioning. If the option for using authenticated provisioning is selected, a client certificate must also be supplied when provisioning a PAC. NOTE: Use this method to connect to a Cisco Compatible Extensions v4 network. If you are connecting to a Cisco Compatible Extensions v3 network, you must use the EAP-FAST/NONE method.
			EAP-FAST/TLS	EAP-FAST EAP authentication with TLS inner authentication. Requires a client certificate. Has option for using Cisco Compatible Extensions v4 authenticated provisioning. NOTE: Use this method to connect to a Cisco Compatible Extensions v4 network. If you are connecting to a Cisco Compatible Extensions v3 network, you must use the EAP-FAST/NONE method.
			EAP-FAST/GTC	EAP-FAST EAP authentication with TLS inner authentication. Requires a client certificate. Cisco Compatible Extensions v4 authenticated provisioning is used. NOTE: Use this method to connect to a Cisco Compatible Extensions v4 network. If you are connecting to a Cisco Compatible Extensions v3 network, you must use the EAP-FAST/NONE method.
			PEAP/MS-CHAPv2	PEAP EAP authentication with MS-CHAPv2 inner authentication. Requires user name and password.
			PEAP/GTC	PEAP EAP authentication with GTC inner authentication. Requires user name and password to log on.

Obtaining Certificates

Obtaining a Certificate from Windows 2000 Server/Windows Server 2003

Obtaining a Certificate from a File

NOTES:

The information in this section is intended for network administrators. For enterprise users, contact your network administrator to obtain a client certificate for TLS authentication.
TLS EAP, PEAP EAP with TLS inner EAP authentication, and EAP-FAST EAP with TLS or GTC inner EAP authentication require a client certificate in the user store for the logged-on user account and a trusted certification authority (CA) certificate in the root store. Certificates can be obtained from a corporate certification authority stored on a Windows 2000 Server/Windows Server 2003 system or by using the Internet Explorer Certificate Import Wizard.

Obtaining a Certificate from Windows 2000 Server/Windows Server 2003

Open Microsoft Internet Explorer and browse to the Certificate Authority (CA) HTTP Service.
Log on to the CA Authority with the user name and password of the user account created on the authentication server. This user name and password are not necessarily the same as your Windows user name and password.
On the Welcome page, click Request a Certificate.
On the Request a Certificate page, click advanced certificate request.
On the Advanced Certificate Request page, click Create and submit a request to this CA.
On the next Advanced Certificate Request page under Certificate Template, click User in the list.
Under Key Options, verify that the Mark keys as exportable check box is selected, and then click Submit.
On the Certificate Issued page, click Install this certificate, and then click Yes to continue.
If your certificate was correctly installed, a message is displayed, indicating that your new certificate has been successfully installed.
To verify the installation, from the Tools menu in Microsoft Internet Explorer, click Internet Options. Click the Content tab, and then click Certificates. The new certificate is listed on the Personal tab.

Obtaining a Certificate from a File

Right-click the Internet Explorer icon on the desktop, and then click Properties.
Click the Content tab, and then click Certificates.
Click Import under the list of certificates. This starts the Certification Import Wizard.
Click Next.
Select the file and click the password page.
Type the password for the file and ensure that the Strong private key protection option is not selected.
On the certification store page, select Automatically select certificate store, based on the type of certificate.
Complete the certificate import, and then click Finish.

Saving Preferred Network Connection Profiles to a File

On the Wireless Networks tab, click the Options arrow, and then click Export.
Choose how you want the exported profiles to be handled when importing, and then click OK.
Type the file name in the File name box, and then click Save.

Network administrators can also include the advanced properties of the Dell Wireless WLAN Card in the file, by selecting the Include advanced adapter settings checkbox.

NOTE: You must have system rights or administrator rights to be able to export locked preferred network connection profiles, to lock a preferred network connection profile, or to alter a locked preferred network connection profile.

Importing a Preferred Network Connection Profiles File

On the Wireless Networks tab, click the Options arrow, and then click Import.
Select the WPN file you want to import, and then click Open.

NOTE: If the file you are importing includes the saved advanced properties of the Dell Wireless WLAN Card, the advanced properties of the Dell Wireless WLAN Card are automatically reset to those being imported. Only network administrators are allowed to import such files. To set the advanced properties of Dell Wireless WLAN Card, see Setting Advanced Properties.

If you saved the file to the same folder where the Dell Wireless WLAN Card Utility service (bcmwltry.exe) is located (usually C:\WINDOWS\System32), the saved preferred network connection profile is automatically added to the list of preferred network connections each time you start your computer and the Dell Wireless WLAN Card Utility manages the wireless settings.

NOTES:

Depending on which export option was selected when the file was saved, the imported preferred network connection profiles are inserted at either the top or bottom of your list of preferred network connection profiles, or they replace all configured network connection profiles.
A preferred network connection profile is overwritten if a network connection profile being imported has the same name.
You must have system rights or administrator rights to be able to import a locked preferred network connection profiles file.
If you import a preferred network connection profile that is certificate-based, the certificate must be in the certificate store. Otherwise, you must select the certificate before you can connect to the network using that profile (see "Creating Network Connection Profiles").

Back to Contents Page