User's Manual

5-32
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide
OL-4211-05
Chapter 5 Configuring the Client Adapter
Setting Security Parameters
Step 6 If you work in an environment with multiple domains and therefore want your Windows login domain
to be passed to the RADIUS server along with your username, check the Include Windows Logon
Domain with User Name check box. The default setting is checked.
Note If you chose to use a saved username and password, the Include Windows Logon Domain with
User Name check box is grayed out and the saved domain name is passed to the RADIUS server.
Step 7 If you want to force the client adapter to disassociate after you log off so that another user cannot gain
access to the wireless network using your credentials, check the No Network Connection Unless User
Is Logged In check box. The default setting is checked.
Step 8 In the Authentication Timeout Value field, choose the amount of time (in seconds) before a LEAP
authentication attempt is considered to be failed and an error message appears.
Range: 30 to 300 seconds
Default: 90 seconds
Step 9 Click OK to save your settings and return to the Profile Management (Security) window.
Step 10 Perform one of the following to set the Allow Association to Mixed Cells parameter, which indicates
whether the client adapter can associate to an access point that allows both WEP and non-WEP
associations:
• Check the Allow Association to Mixed Cells check box if the access point to which the client
adapter is to associate (or the VLAN to which the client will be assigned) has WEP set to Optional.
Otherwise, the client is unable to establish a connection with the access point.
• Uncheck the Allow Association to Mixed Cells check box if the access point to which the client
adapter is to associate (or the VLAN to which the client will be assigned) does not have WEP set to
Optional. This is the default setting.
Note This parameter is available only if the 802.1x security option is selected.
Note For security reasons, Cisco recommends that WEP-enabled and WEP-disabled clients not be
allowed in the same cell because broadcast packets are sent unencrypted, even to clients running
WEP. However, you can enable VLANs on the access point to separate WEP-enabled and
WEP-disabled clients.
Step 11 If you want to limit the amount of time that is spent searching for a domain controller during the
authentication process, check the Limit Time for Finding Domain Controller To check box. Then in
the edit box, enter the amount of time (in seconds) to which you want to limit the search for the domain
controller. A timeout value of 0 causes the authentication process to bypass the “Finding Domain
Controller” step altogether.
Range of timeout value: 0 to 300 seconds
Default: Unchecked; 0 seconds