Cisco Aironet CB21AG Installation And Configuration Manual page 100

Setting Security Parameters
If you work in an environment with multiple domains and therefore want your Windows login domain
Step 6
to be passed to the RADIUS server along with your username, check the Include Windows Logon
Domain with User Name check box. The default setting is checked.
Note
Step 7 If you want to force the client adapter to disassociate after you log off so that another user cannot gain
access to the wireless network using your credentials, check the No Network Connection Unless User
Is Logged In check box. The default setting is checked.
In the Authentication Timeout Value field, choose the amount of time (in seconds) before a LEAP
Step 8
authentication attempt is considered to be failed and an error message appears.
Range: 30 to 300 seconds
Default: 90 seconds
Click OK to save your settings and return to the Profile Management (Security) window.
Step 9
Perform one of the following to set the Allow Association to Mixed Cells parameter, which indicates
Step 10
whether the client adapter can associate to an access point that allows both WEP and non-WEP
associations:
Check the Allow Association to Mixed Cells check box if the access point to which the client
•
adapter is to associate (or the VLAN to which the client will be assigned) has WEP set to Optional.
Otherwise, the client is unable to establish a connection with the access point.
Uncheck the Allow Association to Mixed Cells check box if the access point to which the client
•
adapter is to associate (or the VLAN to which the client will be assigned) does not have WEP set to
Optional. This is the default setting.
Note
Note
If you want to limit the amount of time that is spent searching for a domain controller during the
Step 11
authentication process, check the Limit Time for Finding Domain Controller To check box. Then in
the edit box, enter the amount of time (in seconds) to which you want to limit the search for the domain
controller. A timeout value of 0 causes the authentication process to bypass the "Finding Domain
Controller" step altogether.
Range of timeout value: 0 to 300 seconds
Default: Unchecked; 0 seconds
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide
5-32
If you chose to use a saved username and password, the Include Windows Logon Domain with
User Name check box is grayed out and the saved domain name is passed to the RADIUS server.
This parameter is available only if the 802.1x security option is selected.
For security reasons, Cisco recommends that WEP-enabled and WEP-disabled clients not be
allowed in the same cell because broadcast packets are sent unencrypted, even to clients running
WEP. However, you can enable VLANs on the access point to separate WEP-enabled and
WEP-disabled clients.
Chapter 5 Configuring the Client Adapter
OL-4211-05