Intel 533ANH Intel WiFi Link 5300 User Manual Contents

Intel Mobile Communications Intel WiFi Link 5300 Contents

UserManual.wiki >

Intel >

533ANH User Manual >

XP User Guide 1 of 2

Intel(R) PROSet/Wireless WiFi Connection Utility User's GuideSupported wireless adapters:● Intel(R) WiMAX/WiFi Link 5350● Intel(R) WiMAX/WiFi Link 5150● Intel(R) WiFi Link 5300● Intel(R) WiFi Link 5100 ● Intel(R) Wireless WiFi Link 4965AGN● Intel(R) Wireless WiFi Link 4965AG_● Intel(R) PRO/Wireless 3945ABG Network Connection● Intel(R) PRO/Wireless 2915ABG Network Connection● Intel(R) PRO/Wireless 2200BG Network ConnectionWith your wireless network card, you can access wireless networks, share files or printers, or even share your Internet connection. All of these features can be explored using a wireless network in your home or office. This wireless network solution is designed for both home and business use. Additional users and features can be added as your networking needs grow and change.Depending on the model of your Intel wireless adapter, your adapter is compatible with 802.11a, 802.11b, 802.11g, and 802.11n wireless standards. Operating at 5 GHz or 2.4 GHz frequency at data rates of up to 300 Mbps, you can now connect your computer to existing high-speed networks that use multiple access points within large or small environments. Your wireless adapter maintains automatic data rate control according to the access point location and signal strength to achieve the fastest possible connection. All of your wireless network connections are easily managed by the WiFi connection utility. Profiles that are set up through the WiFi connection utility provide enhanced security measures with 802.1X network authentication.Table of Contents● Use the Intel(R) PROSet/Wireless WiFi Connection Utility● Connect to a Network● Use Wi-Fi Protected Setup* ● Use Profiles● Set up Security

● Wireless Network Overview● Administrator Tool● Create Administrator Packages ● Create Profiles for Windows XP*● Security Overview● Safety and Regulatory Information● Specifications● Troubleshooting● Glossary● Customer Support● WarrantyInformation in this document is subject to change without notice. © 2004–2008 Intel Corporation. All rights reserved. Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 USAThe copying or reproducing of any material in this document in any manner whatsoever without the written permission of Intel Corporation is strictly forbidden. Intel(R) is a trademark or registered trademark of Intel Corporation or its subsidiaries in the United States and other countries. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Intel disclaims any proprietary interest in trademarks and trade names other than its own. Microsoft and Windows are registered trademarks of Microsoft Corporation. Windows Vista is either a registered trademark or trademark of Microsoft Corporation in the United States and/or other countries.*Other names and brands may be claimed as the property of others.Intel Corporation assumes no responsibility for errors or omissions in this document. Nor does Intel make any commitment to update the information contained herein."IMPORTANT NOTICE FOR ALL USERS OR DISTRIBUTORS:Intel wireless LAN adapters are engineered, manufactured, tested, and quality checked to ensure that they meet all necessary local and governmental regulatory agency requirements for the regions that they are designated and/or marked to ship into. Because wireless LANs are generally unlicensed devices that share spectrum with radars, satellites, and other licensed and unlicensed devices, it is sometimes necessary to dynamically detect, avoid, and limit usage to avoid interference with these devices. In many instances Intel is required to provide test data to prove regional and local compliance to regional and governmental regulations before certification or approval to use the product is granted. Intel's wireless LAN's EEPROM, firmware, and software driver are designed to carefully control parameters

that affect radio operation and to ensure electromagnetic compliance (EMC). These parameters include, without limitation, RF power, spectrum usage, channel scanning, and human exposure.For these reasons Intel cannot permit any manipulation by third parties of the software provided in binary format with the wireless LAN adapters (e.g., the EEPROM and firmware). Furthermore, if you use any patches, utilities, or code with the Intel wireless LAN adapters that have been manipulated by an unauthorized party (i.e., patches, utilities, or code (including open source code modifications) which have not been validated by Intel), (i) you will be solely responsible for ensuring the regulatory compliance of the products, (ii) Intel will bear no liability, under any theory of liability for any issues associated with the modified products, including without limitation, claims under the warranty and/or issues arising from regulatory non-compliance, and (iii) Intel will not provide or be required to assist in providing support to any third parties for such modified products.Note: Many regulatory agencies consider Wireless LAN adapters to be "modules", and accordingly, condition system-level regulatory approval upon receipt and review of test data documenting that the antennas and system configuration do not cause the EMC and radio operation to be non-compliant."April 2008

Use Intel(R) PROSet/Wireless WiFi Connection Utility as Your Wireless ManagerIntel(R) PROSet/Wireless WiFi software is used to set up, edit, and manage network profiles to connect to a network. It also includes advanced settings such as power management and channel selection for setting up ad-hoc networks.If you use Microsoft* Windows XP* Wireless Zero Configuration as your wireless manager, you can disable it from the Microsoft Windows Wireless Network tab.To disable Microsoft Windows XP Wireless Zero Configuration as your wireless manager:1. Click Start > Control Panel.2. Double-click Network Connections.3. Right-click Wireless Network Connection.4. Click Properties.5. Click Wireless Networks.6. Verify that the Use Windows to configure my wireless network settings is not selected. If it is, clear it.7. Click OK. This confirms that the Intel(R) PROSet/Wireless utility is configured to manage your network profiles.NOTE: Verify that the Application Settings option Notify when another application uses the wireless adapter is selected. This option prompts you when Microsoft Windows XP Wireless Zero Configuration starts to manage your network profiles.Start Intel(R) PROSet/Wireless WiFi Connection Utility To start the WiFi connection utility, use one of the following methods:● Click Start > Programs > Intel PROSet Wireless > WiFi Connection Utility .● Right-click the Taskbar icon located in the lower right corner of your Windows Desktop to open the Taskbar menu. Click Configure WiFi .● Double-click the Taskbar icon.To close the WiFi connection utility from the main window, use one of the following:● Select File > Exit from the main window.● Click Close.● Click the Close button (X) at the top right corner of the window.

Name DescriptionFile Exit: Closes the WiFi connection utility main window.Tools Application Settings: Use to set system wide connection preferences. See Application Settings for information.Intel Wireless Troubleshooter: Use to resolve wireless network connection problems. See Intel Wireless Troubleshooter for more information.Manual Diagnostics Tool: The Manual Diagnostics Tool lets you run a set of diagnostics tests that verify the functionality of your wireless adapter. See Manual Diagnostics Tool for more information.Administrator Tool: Used by administrators or the person who has administrator privileges on this computer to configure shared profiles (Pre-logon/Common, Persistent, and Voice over IP [VoIP]). The Administrator Tool can also be used by an Information Technology department to configure user settings within the WiFi connection utility and to create custom install packages to export to other systems. See Administrator Tool for more information.NOTE: The Administrator Tool is available only if it installed during a custom installation of the Intel(R) PROSet/Wireless WiFi software. See Install Additional Software Featuresfor more information on custom installation.Advanced Adapter Settings: Displays Adapter Settings that are equivalent to the settings in the Microsoft Windows Advanced settings. See Adapter Settings for information.To access Adapter Settings from Microsoft Windows:● Double-click Network Connections from the Windows Control Panel.● Right-click the Wireless Network Connection.● Select Properties from the menu.● Click Configure to display the Advanced settings for the adapter.Advanced Statistics: Select to view detailed information about the wireless adapter and connection. See Advanced Statistics for more information.Use Windows to manage Wi-Fi: Select to enable Microsoft Windows XP as the wireless manager. See Microsoft Windows XP Wireless Zero Configuration for more information.

Profiles Manage Profiles: Select to create or edit profiles.Manage Exclusions: Select to exclude networks from automatic connection. See Manage Exclusions for more information.Help Intel PROSet/Wireless WiFi Help: Starts the online help.About: Displays version information for the currently installed application components.Administrator Tool (Tools menu)The Administrator tool is for administrators or the person who has administrator privileges on this computer. This tool allows the administrator to restrict what level of control the users of this computer have over their wireless connections. This tool is used also to configure common (shared) profiles.Users cannot modify Administrator settings or profiles unless they have the password for this tool. A password should be chosen that is secure and not easily guessed.You can export these settings and profiles as one package to other computers on your network. For more information, See the Administrator Tool section.Name DescriptionAdministrator Packages The Administrator Packages are used to save administrative profiles and other settings. For Windows XP*, you can copy or send this self-extracting executable to clients on your network. When it is run, the contents are installed and configured on the destination computer. See Administrator Tool Packages.Application Settings An administrator can configure the WiFi connection utility Application Settings to control how the application behaves on the user's computer, and to select what level of control users have over various aspects of their wireless connections. See Administrator Tool Application Settings.Administrator Profiles Enable or disable Persistent or Pre-logon/Common profiles and configure Voice over IP (VoIP) settings on the computer. See Administrator Tool Profiles.Adapter Settings An administrator can select which level of control that users have over their wireless network connections. See Administrator Tool Adapter Settings.

EAP-FAST A-ID Groups An administrator can select which Authority Identifier (A-ID) RADIUS server to provision Protected Access Credentials (PACs) for profiles that use EAP-FAST authentication. A-ID groups are shared by all users of the computer and allow EAP-FAST profiles to support multiple PACs from multiple A-IDs. See Administrator Tool EAP-FAST A-ID Groups.Change Password Change the password for the Administrator Tool. See Change Password for more information.Close Closes the page.Help? Provides help information for this page.Use Windows to Manage WiFi (Advanced menu)The Microsoft Windows XP Wireless Zero Configuration feature provides a built-in wireless configuration utility. This feature can be enabled and disabled within the WiFi connection utility. Click Use Windows to manage Wi-Fi on the Advanced menu. If Windows XP Wireless Zero Configuration is enabled, the features in the WiFi connection utility are disabled. To let the WiFi connection utility manage your WiFi connections, click Enable WiFi Control on the main window.

Installing Intel(R) PROSet/Wireless WiFi Connection UtilityTypical Installation The following components are installed in a Typical installation.

Intel(R) Wireless Troubleshooter: Provides valuable assistance in resolving wireless WiFi connection problems. To install these features, select Custom during installation. Follow the instructions below to install features. If the WiFi connection utility is already installed, see the post-installation instructions.Install Intel(R) PROSet/Wireless WiFi Connection Utility1. Insert the Installation CD in your CD drive.2. The installer presents the message: Welcome to the Intel(R) Wireless Installer Prerequisite Wizard. Click Next.3. The next message displays: Welcome to the InstallShield Wizard to Intel(R) PROSet/Wireless WiFi Software. Click Next.

4. Read the license agreement.5. Click I accept the terms in the license agreement. You can click Print if you want a printed copy of the agreement. Then click Next. 6. Click Next to accept the default install destination folder. Otherwise, click Change to specify a different location. Then click OK and Next. 7. Click Typical or Custom. If you click Typical, proceed to step 9. 8. If performing a Custom installation, select from the list of features to install. See Custom Installation for an explanation of the available features. For each feature, you can select: ❍ This feature will be installed on the local hard drive.❍ This feature, and all subfeatures, will be installed on the local hard drive. ❍ The feature will not be available. 9. Click Next.10. The installation may take several minutes. When the installation completes, the message InstallShield Wizard Completed! displays. Click Finish.11. You may be asked to reboot the computer. If so, you should reboot you computer now. Click Yes to do so, or No to reboot later. Install Additional Software Features If the WiFi connection utility is already installed, follow the instructions below to add the Administrator Tool and Pre-logon Connect:1. Click Start > Control > Panel > Add or Remove Programs > Intel PROSet/Wireless WiFi Software.2. Click Change.3. The next message displays: Welcome to the InstallShield Wizard to Intel(R) PROSet/Wireless WiFi Software. Click Next. 4. Click Modify. Then click Next. 5. Click the red X next to any of the features not currently installed that you want to install. 6. For each feature you want to install, click one of the following choices, as appropriate: ❍ This feature will be installed on the local hard drive.❍ This feature, and all subfeatures, will be installed on the local hard drive. 7. Click Next.8. The installation may take several minutes. When the installation completes, the message InstallShield Wizard Completed! displays. Click Finish.9. You may be asked to reboot the computer. If so, you should reboot you computer now. Click Yes to do so, or No to reboot later. Remove Intel(R) PROSet/Wireless WiFi Connection UtilityTo uninstall the WiFi connection utility:1. Click Start > Control Panel > Add or Remove Programs.

2. Click Intel PROSet/Wireless WiFi Software.3. Click Change.4. The next message displays: Welcome to the InstallShield Wizard to Intel(R) PROSet/Wireless WiFi Software. Click Next. 5. Click Remove.6. Click Next.7. The next message appears. Make your selection from the list and click Next. Save User Defined Settings. Choose what to do with your current application: ❍ Save. Save settings and files applicable to the current version of the application.❍ Convert and Save. Save settings and files in the format compatible with PROSet/Wireless WiFi version 10.❍ Remove. Do not save application settings.8. The removal may take several minutes. After the software is removed, the message InstallShield Wizard Completed! displays. Click Finish. 9. A message requests that you restart your computer. Click Yes to restart the computer.Back to TopBack to ContentsTrademarks and Disclaimers

1. Double-click the desktop alert to open the WiFi connection utility main window. 2. Select a network from the WiFi Networks list.

computers equipped with wireless adapters, and optionally attaching external network connectivity (i.e. the Internet, typically by connecting the access point to a DSL or cable modem, or equivalent).Configure an Access Point and Set up a NetworkThe following steps will configure this computer as a registrar for a secure network or access point.1. Locate the device ownership password for the access point. This is set by the manufacturer of the access point. The password is often located on a label on the bottom of the device.2. Turn on the network access point.3. At the computer that you want to establish as the registrar, turn on the WiFi connection utility.4. In the WiFi connection utility, click Tools > Application Settings. 5. In the Advanced Settings area under Wi-Fi Protected Setup, turn on Enable device registration.6. The next message tells you that one or more compatible devices are within range of your

computer. Click this message. (Or, you can select the network from the WiFi Networks list in the WiFi connection utility main window.)7. At the next window, on the Available Networks list, select the network that you want to connect to. The listed network depends on what is detected. Click Next.8. At the next window, enter the Device Ownership Password that you retrieved from the access point in step 1. Click Next to continue.

completed this step, click Next. The following windows show the configuration of the access point and the registrar.

The following window appears briefly and shows the configuration of wireless settings for the access point.

14. After the network receives the Ownership Password, you are notified that you have Successfully connected to <name of wireless network>. Click Finish. This process completes configuration of the access point and the registrar.

$15. If you want to save these settings to a profile for future use by a legacy client, click Save wireless settings. The profile settings are saved to a text file (txt) on your local hard drive. The file is saved to your local C:\ drive by default. Accept the default save location or click Browse to choose another location on your computer.Next, you can connect an enrollee (computer) to the network using the registrar. Connect an Enrollee to a Network or Access Point Perform these steps to connect an enrollee to the network you just created. This assumes that the registrar computer is running the WiFi connection utility. NOTE: To achieve transfer rates greater than 54 Mbps on 802.11n connections, WPA2-AES security must be selected. No security (None) can be selected to enable network setup and troubleshooting.1. At the enrollee you want to connect the network, a message tells you that one or more access points with Wi-Fi Protected Setup capability is within range of your wireless computer. Click on this message. (Or, you can select the network from the WiFi Networks list in the WiFi connection utility main window.)$

2. The Wireless Network Configuration start up page opens. Use the Available Networks list to select the network that you want to connect to (in this example it is MyWPS). Then click Next. 3. The Discovery window opens. The enrollee that you want to connect to the network discovers the registrar for the network. Assuming that the Discovery process succeeds, the name of the registrar or access point is displayed.

4. The next window appears, displaying the Device Password (enrollee password). The password displayed at the enrollee is a unique, randomly generated temporary password for the enrollee. This password is used to ask permission to connect to the network access point. (The password shown below is an example only).

5. At the registrar, enter the password provided by the enrollee. Then click Next. NOTE: This process assumes that the registrar is running the WiFi connection utility; the process and windows displayed at the registrar may be different for software from other vendors. Some access points may have a built in registrar.

7. The last window shows that the enrollee registration with the registrar is complete. Click Finish.

8. At the enrollee, click Next. At the enrollee, you are notified when you have Successfully connected to <name of wireless network>. Click Finish. Add an Enrollee to an Existing Network at the RegistrarThis following procedure lets you add an enrollee to an existing network, where the access point is already configured and the registrar has already joined the AP. NOTE: This process assumes that the registrar is running the WiFi connection utility; the process and windows displayed at the registrar may be different for software from other vendors. 1. Get the Device Password for the enrollee computer that you want to add to the network. 2. At the task tray icon for the WiFi connection utility, right-click and select Add New Device. 3. Perform steps 5 through 8 of the procedure Connect an Enrollee to a Network or Access Point. Other Wireless ManagersIf the WiFi connection utility detects another software application trying to communicate with the wireless device, you are notified of this behavior.

Microsoft Windows XP* Wireless Zero Configuration To switch from the Intel(R) PROSet/Wireless WiFi Connection Utility to the Microsoft Windows XP Wireless Zero Configuration, perform these steps: 1. At the Intel(R) PROSet/Wireless WiFi Connection Utility main window, under the Advanced menu, select Use Windows to manage WiFi. Then click Close. 2. Right-click on the tasktray icon and select Open Wireless Zero Configuration.NOTE: Any wireless profiles created in the WiFi connection utility are not visible in Microsoft Windows XP Wireless Zero Configuration. If you want to use your Intel wireless profiles, click Enable Intel PROSet/Wireless WiFi on the main window.When you are finished using the Microsoft Windows XP Wireless Zero Configuration, you can switch back to the WiFi connection utility To do this, click Enable Intel PROSet/Wireless WiFi on the WiFi connection utility main window. Third-Party Wireless SoftwareIf you use software provided by a hotspot location (coffee shop, airport terminal), the WiFi connection utility notifies you and then disables itself. It cannot manage the wireless device when another wireless manager communicates with the wireless device. To take advantage of the WiFi connection utility features, you want to disable or remove this software when you leave the hotspot. Back to TopBack to ContentsTrademarks and Disclaimers

7. From the General Settings, click Next to open the Security Settings.

8. Select either Personal or Enterprise Security to select the Network Authentication and Data Encryption options. Enter the encryption key settings and configure the 802.1X settings as required.

$Export Profiles from the Profiles List1. Select individual or multiple profiles from the list. 2. Select Export to export one or more profiles from the Profiles list.3. Select the destination folder. Click Browse to search your hard disk for the destination directory. The C:\ drive is the default directory. 4. Click OK to export the selected profile. You are notified: Successfully exported selected profiles to the destination folder: C:\.To select multiple profiles:1. Use your mouse to highlight a profile.2. Press Ctrl.3. Click each profile that you want selected. Follow the instructions from Step 2 above to export multiple profiles. Password Protected ProfilesImport and export password-protected user-based profiles automatically to remote systems. If a profile is password protected, the assigned password must be entered before it can be edited. See Set a Profile Password for more information.Back to TopBack to ContentsTrademarks and Disclaimers$

The following sections describe how to use the WiFi connection utility to set up the required security settings for your wireless adapter. See Personal Security.It also provides information about how to configure advanced security settings for your wireless adapter. This requires information from a systems administrator (corporate environment) or advanced security settings on your access point (for home users). See Enterprise Security.For general information about security settings, See Security Overview.Set up Data Encryption and AuthenticationIn a home wireless network you can use a variety of simple security procedures to protect your wireless connection. These include:● Enable Wi-Fi Protected Access* (WPA).● Change your password.● Change the network name (SSID).Wi-Fi Protected Access (WPA) encryption provides protection for your data on the network. WPA uses an encryption key called a pre-shared key (PSK) to encrypt data before transmission. Enter the same password in all of the computers and access point in your home or small business network. Only devices that use the same encryption key can access the network or decrypt the encrypted data transmitted by other computers. The password automatically initiates the Temporal Key Integrity Protocol (TKIP) or AES-CCMP protocol for the data encryption process.Network KeysWEP encryption provides two levels of security:● 64-bit key (sometimes referred to as 40-bit)● 128-bit key (also known as 104-bit)For improved security, use a 128-bit key. If you use encryption, all wireless devices on your wireless network must use the same encryption keys.You can create the key yourself and specify the key length (64-bit or 128-bit) and key index (the location that a specific key is stored). The greater the key length, the more secure the key.Key Length: 64-bit

Back to ContentsWireless Network OverviewAbout Wireless Networks What do I Need to Set up a Wireless Network? Wireless Networking Basics ● What is a Wireless Network Management Utility?● Network Name● Profiles● Security● Identify a Wireless Network● Select a Wireless Network ModeHow do I Turn My Radio On and Off?About Wireless NetworksA Wireless Local Area Network (WLAN) connects computers without network cables. Instead, computers use radio communications to send data between each other. In a WLAN, a radio communications device called an access point or wireless router connects network computers and provides Internet or network access. You can communicate directly with other wireless computers, or connect to an existing network through a wireless access point. When you set up your wireless adapter, you select the operating mode for the kind of wireless network you want. You can use your Intel(R) PRO/Wireless Network Connection adapter to connect to other similar wireless devices that comply with the 802.11 standard for wireless networking. What do I Need to Set up a Wireless Network? The most common type of wireless network is an infrastructure network. To set up an infrastructure network, you need the following:● A wireless router.● A wireless network adapter for each computer that you want to connect to the

wireless computers to send information directly to other wireless computers. You can use Device-to-Device mode to network computers in a home or small office or to set up a temporary wireless network for a meeting. How do I turn my Radio on and off?You will need to turn the wireless adapter radio off (and on) on different occasions. For example, you may be required to turn the radio off when boarding an airplane. You can also turn it off to conserve battery power. There are three methods to turn the radio on and off:● Using the wireless radio hardware switch (may not be present on all computers). ● Using the WiFi On / WiFi Off button in the WiFi connection utility.● Using Windows.Remember that to connect to wireless networks, the wireless radio needs to be turned back on. If you are unable to connect to a wireless network, verify that your radio is turned on at both the hardware switch and the WiFi On / WiFi Off button in the WiFi connection utility.See Turn the Radio on or off for more information.Back to TopBack to ContentsTrademarks and Disclaimers

you need to create the package on a computer running Windows Vista. You cannot create a package for Windows Vista on a computer running Microsoft Windows XP*.Create a New Package1. At the Tools menu, click Administrator Tool.2. Enter the Administrator Tool password.3. Open Administrator Package: Click Create a Windows XP package, or Open an existing package. Name DescriptionCreate a Windows XP package Create a package that can be exported to a user's computer running Microsoft Windows XP* operating system. This package allows export of all 802.1X authentication EAP-type Pre-logon/Common and Persistent profiles.Create a Windows Vista package Not Available. To create and export a package for a computer running on Microsoft Windows Vista*, you need to create the package on a computer running Windows Vista. You cannot create a package for Windows Vista on a computer running Microsoft Windows XP*.

Open an existing package Select to browse for and open an existing package.4. Click OK.5. Configure the following options to be included in the package:Name DescriptionProfiles Click Include Profiles in this package. Profiles can be shared with other users. Application Settings Click Include Application Settings in this package. Specify application settings to be enabled.Adapter Settings Click Include Adapter Settings in this package. Specify initial values for adapter settings used on this computer.EAP-FAST A-ID Groups Click Include A-ID Groups. Add A-ID Group to support multiple PACs from multiple A-IDs.6. Click Close.7. You are notified: The current package is changed. Would you like to save the changes?8. Click Yes. Save the executable file to a directory on the local disk drive.9. Click Save. The file is created. This may take several minutes.10. Click Finished to view the package contents. ❍ Click Apply this package to this computer if you want to use the package configuration on the Administrator's computer.❍ Copy the executable file to any user's computer to install the configuration that has been saved in the package. When you execute the package file, it is a silent install.11. Click OK.NOTE: You can also select Save Package on the File menu to save the package.Edit a Package1. Access the Administrator Tool.2. On the Open Administrator Package page, click Open an existing package to edit an existing package.3. Click Browse. Locate the package's executable file.4. Click Open. Make your updates to the package settings.5. Click Close.6. You are notified: The current package is changed. Would you like to save the changes?7. Click Yes. Save the executable file to a directory on the local disk drive.NOTE: You can also select Open Package on the File menu to edit an

Administrator Package.Administrator ProfilesAdministrator Profiles are managed by the network administrator. These profiles can be exported to other computers. These profiles are common or shared by all users on this computer. However, end users cannot modify these profiles. They can only be modified from the Administrator Tool, which is password protected.There are two types of Administrator Profiles: Persistent and Pre-logon/Common.You can also configure Voice over IP (VoIP) settings for export to a soft-phone application.

network is displayed in the Exclude List Management and is indicated by this icon: To exclude a network:1. Click Include Profiles in this package.2. Click Exclude.3. Click Add to open the Exclude Network (SSID).4. Network Name: Enter the network name of the network that you want to exclude.5. Click OK to add the network name to the list.To remove a network from exclusion:1. Select the network name in the Exclude list.2. Click Remove. The network is deleted from the list.Voice over IP (VoIP) ConnectionThe WiFi connection utility supports VoIP third-party soft-phone applications. Third-party VoIP applications support voice codecs. Codecs generally provide a compression capability to save network bandwidth. The WiFi connection utility supports the following International Telecommunications Union (ITU) codec standards:Codec AlgorithmITU G.711 PCM (Pulse Code Modulation)ITU G.722 SBADPCM (Sub-Band Adaptive Differential Pulse Code Modulation)

ITU G.723 Multi-rate CoderITU G.726 ADPCM (Adaptive Differential Pulse Code Modulation)ITU G.727 Variable-Rate ADPCMITU G.728 LD-CELP (Low-Delay Code Excited Linear Prediction)ITU G.729 CS-ACELP (Conjugate Structure Algebraic-Code Excited Linear Prediction)An administrator can export VoIP settings to configure various codec data rates and frame rates to improve voice quality in VoIP transmissions.To configure VoIP settings:NOTE: Ensure Voice over IP is not disabled in the Administrator Tool Application Settings. It is enabled by default.1. Click Include Profiles in this package.2. Click VoIP.3. Click Add to open the Create VoIP Profiles page.4. Select the Codec bandwidth, application usage, and frame rate. For Voice Data:G711 has 10ms frame rate with 64kbps bit rate G722 has 10ms frame rate with 64kbps bit rate G723 has 30ms frame rate with either 5.3kbps or 6.4kbps bit rate G726-32 has 10ms frame rate with 32kbps bit rate G728 has 2.5ms frame rate with 16kbps bit rate G729 has 10ms frame rate with 10kbps bit rateSelect parameters from the drop down menus. Codec Usage Frame Rate

To add an A-ID to an A-ID group:1. Select a group from the A-ID Groups list.2. Click Add in the A-IDs section.3. Select an A-ID.4. Click OK. The A-ID is added to the list.Once an A-ID group has been selected, the A-IDs are extracted from the PACs on the A-ID group server. The list of A-IDs is automatically populated.Administrator TasksHow to Obtain a Client CertificateIf you do not have any certificates for EAP-TLS (TLS) or EAP-TTLS (TTLS) you must obtain a client certificate to allow authentication.Certificates are managed from either Internet Explorer or the Microsoft Windows Control Panel.Windows XP: When a client certificate is obtained, do not enable strong private key protection. If you enable strong private key protection for a certificate, you need to enter an access password for the certificate every time this certificate is used. You must disable strong private key protection for the certificate if you configure the service for TLS or TTLS authentication. Otherwise, the 802.1X service fails authentication because there is no logged in user to provide the required password.Notes about Smart CardsAfter a Smart Card is installed, the certificate is automatically installed on your computer and is chosen from the personal certificate store and root certificate store.Set up a Client with TLS Network AuthenticationStep 1: Obtain a certificateTo allow TLS authentication, you need a valid client certificate in the local repository for the logged-in user's account. You also need a trusted CA certificate in the root store.The following information provides two methods for obtaining a certificate:● From a corporate certification authority (CA) implemented on a Windows 2000 server.● Import a certificate from a file with Internet Explorer's certificate import wizard.

If you do not know how to obtain a user certificate from the CA, consult your administrator for the procedure.To install the CA on the local machine:1. Obtain the CA and store it on your local drive.2. Click Import. The Certificate Import Wizard opens.3. Click Next.4. Click Browse to locate the certificate on your local drive.5. Click the exported certificate.6. Click Open.7. Click Next.8. Click Place all certificates in the following store.9. Click Browse to open the Select Certificate Store.10. Click Show physical stores.11. Click OK.12. From the list of stores, scroll up and expand Trusted Root Certificate Authorities.13. Click Local Computer.14. Click OK.15. Click Next.16. Click Finish to complete the process.17. Reboot after a certificate is installed.Use Microsoft Management Console (MMC) to verify that the CA is installed in the machine store.1. In the Start menu, click Run.2. Enter MMC.3. Click OK to open The Microsoft Management Console.4. Click File.5. Click Add/Remove Snap-in.6. Click Add to open the Add Standalone Snap-in page.7. Click Certificates.8. Click Add.9. Click Computer account.10. Click Next.11. Click Finish.12. Click Close.13. Click OK.14. In the console, click Certificates (Local Computer).15. Click Trusted Root Certificate Authorities.16. Click Certificates.17. Verify that the CA you just installed is listed.18. Click File.19. Click Exit to close the console.Obtain a certificate from a Microsoft Windows 2000* CA:1. Start Internet Explorer and browse to the Certificate Authority HTTP Service (use an URL, for example, http://yourdomainserver.yourdomain/certsrv with certsrv being the

$Step 1 of 2: TTLS User1. Authentication Protocol: This parameter specifies the authentication protocol operating over the TTLS tunnel. The protocols are: PAP (Default), CHAP, MS-CHAP and MS-CHAP-V2. See Security Overview for more information.2. User Credentials: For PAP, CHAP, MS-CHAP, and MS-CHAP-V2 protocols, select one of these authentication methods: Use Windows logon, Prompt each time I connect, or Use the following.3. Roaming Identity: A Roaming Identity may be populated in this field or you can use %domain%\%username% as the default format for entering a roaming identity.When 802.1X Microsoft IAS RADIUS is used as an authentication server, the server authenticates the device using the Roaming Identity from Intel PROSet/Wireless WiFi software, and ignores the Authentication Protocol MS-CHAP-V2 user name. Microsoft IAS RADIUS accepts only a valid user name (dotNet user) for the Roaming Identity. For all other authentication servers, the Roaming Identity is optional. Therefore, it is recommended to use the desired realm (for example, anonymous@myrealm) for the Roaming Identity rather than a true identity. 4. Click Next to access the TTLS Server settings.$

$Step 2 of 2: TTLS Server1. Select one of the following credential retrieval methods: Validate Server Certificate or Specify Server or Certificate Name.2. Click OK to save the setting and close the page.Create a Windows XP* Profile with PEAP Network Authentication PEAP authentication: PEAP settings are required for the authentication of the client to the authentication server. The client uses EAP-TLS to validate the server and create a TLS-encrypted channel between client and server. The client can use another EAP mechanism, such as Microsoft Challenge Authentication Protocol (MS-CHAP) Version 2, over this encrypted channel to enable server validation. The challenge and response packets are sent over a non-exposed TLS encrypted channel. The following example describes how to use WPA with AES-CCMP or TKIP encryption with PEAP authentication.To set up a client with PEAP Authentication: Obtain and install a client certificate. See Create a Windows XP* Profile for TLS authentication or consult your administrator.1. Click Profiles on the WiFi connection utility main window. Or if you are acting as the administrator, open the Administrator Tool. 2. On the Profiles list, click Add to open the Create Wireless Profile General Settings.3. Profile Name: Enter a descriptive profile name.4. Wireless Network Name (SSID): Enter the network identifier.5. Operating Mode: Click Network (Infrastructure). (This parameter is set to Infrastructure if you are using the Administrator Tool.)6. Administrator Profile Type: Select Persistent or Pre-logon/Common. (This step applies only if you are using the Administrator Tool.)7. Click Next to open the Security Settings.8. Click Enterprise Security.9. Network Authentication: Select WPA-Enterprise or WPA2-Enterprise (Recommended).10. Data Encryption: Select one of the following: AES-CCMP is recommended. 11. Enable 802.1X: Selected by default.12. Authentication Type: Select PEAP to be used with this connection.Step 1 of 2: PEAP UserPEAP relies on Transport Layer Security (TLS) to allow unencrypted authentication types such as EAP-Generic Token Card (GTC) and One-Time Password (OTP) support. 1. Authentication Protocol: Select either GTC, MS-CHAP-V2 (Default), or TLS. See Authentication Protocols.2. User Credentials: Select one of the following: Use Windows logon, Prompt each time I connect, or Use the following.3. Roaming Identity: A Roaming Identity may be populated in this field or you can use %domain%\%username% as the default format for entering a roaming identity.$

$When 802.1X Microsoft IAS RADIUS is used as an authentication server, the server authenticates the device using the Roaming Identity from Intel PROSet/Wireless WiFi software, and ignores the Authentication Protocol MS-CHAP-V2 user name. Microsoft IAS RADIUS accepts only a valid user name (dotNet user) for the Roaming Identity. For all other authentication servers, the Roaming Identity is optional. Therefore, it is recommended to use the desired realm (for example, anonymous@myrealm) for the Roaming Identity rather than a true identity. Configure Roaming Identity to Support Multiple Users:If you use a Pre-logon/Common profile that requires the roaming identity to be based on the Windows logon credentials, the creator of the profile can add a roaming identity that uses %username% and %domain%. The roaming identity is parsed and the appropriate log on information is substituted for the keywords. This allows maximum flexibility in configuring the roaming identity while allowing multiple users to share the profile.Please see your authentication server user guide for directions about how to format a suitable roaming identity. Possible formats are:%domain%\%user_name% %user_name%@%domain% %user_name%@%domain%.com %user_name%@mynetwork.comIf Roaming Identity is blank, %domain%\%username% is the default. Notes about the credentials: This user name and domain must match the user name that is set in the authentication server by the administrator prior to client authentication. The user name is case-sensitive. This name specifies the identity supplied to the authenticator by the authentication protocol operating over the TLS tunnel. This user identity is securely transmitted to the server only after an encrypted channel has been verified and established.Authentication ProtocolsThis parameter specifies the authentication protocols that can operate over the TTLS tunnel. Next are instructions on how to configure a profile that uses PEAP authentication with GTC, MS-CHAP-V2 (Default), or TLS authentication protocols.Generic Token Card (GTC)$

15. Click Enable Radio Management Support to detect rogue access points.16. Click OK to return to the Security Settings.LEAP User:

$Step 2 of 3: EAP-FAST Additional Information If you selected Use a certificate (TLS Authentication) and Use a user certificate on this computer, click Next (no roaming identity is required) and proceed to Step 3 to configure EAP-FAST Server certificate settings. If you do not need to configure EAP-FAST server settings, click OK to save your settings and return to the Profiles page.If you selected to Use my smart card, add the roaming identity, if required. Click OK to save your settings and return to the Profiles page.If you did not select Use a certificate (TLS Authentication), click Next to select an Authentication Protocol. CCXv4 permits additional credentials or TLS cipher suites to establish the tunnel.Authentication Protocol: Select either GTC, or MS-CHAP-V2 (Default).Generic Token Card (GTC)GTC may be used with Server-Authenticated Mode. This enable peers using other user databases as Lightweight Directory Access Protocol (LDAP) and one-time password (OTP) technology to be provisioned in-band. However, the replacement may only be achieved when used with the TLS cipher suites that ensure server authentication.To configure a one-time password:1. Authentication Protocol: Select GTC (Generic Token Card).2. User Credentials: Select Prompt each time I connect.3. On connection prompt for: Select one of the following:Name DescriptionStatic Password On connection, enter the user credentials.One-time password (OTP) Obtain the password from a hardware token device.PIN (Soft Token) Obtain the password from a soft token program.4. Click OK.5. Select the profile on the WiFi Networks list.6. Click Connect. When prompted, enter the user name, domain and one-time password (OTP).7. Click OK.MS-CHAP-V2. This parameter specifies the authentication protocol operating over the PEAP tunnel.1. Authentication Protocol: Select MS-CHAP-2.2. Select the user credentials: Use Windows logon, Prompt each time I connect, or Use the following.3. Roaming Identity: A Roaming Identity may be populated in this field or you can use %domain%\%username% as the default format for entering a roaming identity.When 802.1X Microsoft IAS RADIUS is used as an authentication server, the server authenticates the device using the Roaming Identity from Intel PROSet/Wireless WiFi software, and ignores the Authentication Protocol MS-CHAP-V2 user name. Microsoft IAS RADIUS accepts only a valid user name (dotNet user) for the Roaming Identity. For all other authentication servers, the Roaming Identity is optional. Therefore, it is recommended to use$

$provisioning automatically. A status message is displayed in the Wireless Event Viewer that an administrator can review on the user's computer.1. Leave unchecked Disable EAP-FAST Enhancements (CCXv4).2. Allow authenticated provisioning and Allow unauthenticated provisioning are both checked.3. Default Server: None selected is the default. Click Select Server to select a PAC from the default PAC authority server. The Protected Access Credentials selection page opens.NOTE: Server groups are only listed if you have installed an Administrator Package that contains EAP-FAST Authority ID (A-ID) Group settings.PAC distribution can also be completed manually (out-of-band). Manual provisioning lets you create a PAC for a user on an ACS server and then import it into a user's computer. A PAC file can be protected with a password, which the user needs to enter during a PAC import.4. To import a PAC:1. Click Import to import a PAC from the PAC server.2. Click Open.3. Enter the PAC password (optional).4. Click OK to close this page. The selected PAC is used for this wireless profile.5. Click Next. 6. If this is not a Pre-logon/Common profile, then click Next and jump to Step 3 of 3: EAP-FAST Server. 7. If this is a Pre-logon/Common profile, or if you are not using the Administrator Tool to create this profile, proceed to the next step.Step 2 of 3: EAP-FAST Additional Information1. Authentication Protocol: Select MS-CHAP-V2 or GTC2. User Credentials: Select Use Windows Logon or Use the following. 3. If you selected Use the following, then enter the User Name, Domain, Password, and Confirm Password. 4. Enter the Roaming Identity: %DOMAIN%\%USERNAME5. Click Next.Step 3 of 3: EAP-FAST Server 1. Click Validate Certificate if desired and select the Certificate Issuer from the drop down menu. The default selection is Any Trusted CA. 2. If desired, click Specify Server or Certificate Name and enter the name. Then click Server Name must match the specified entry exactly or Domain name must end with the specified entry. 3. Click OK.Back to TopBack to ContentsTrademarks and Disclaimers$

Intel 533ANH Intel WiFi Link 5300 User Manual Contents

Intel Mobile Communications Intel WiFi Link 5300 Contents

Contents

XP User Guide 1 of 2

Navigation menu

Namespaces

Views

Navigation