Cisco Aironet CB21AG Installation And Configuration Manual page 111

Chapter 5 Configuring the Client Adapter
Note
Note
Step 15 If you want to limit the amount of time that is spent searching for a domain controller during the
authentication process, check the Limit Time for Finding Domain Controller To check box. Then in
the edit box, enter the amount of time (in seconds) to which you want to limit the search for the domain
controller. A timeout value of 0 causes the authentication process to bypass the "Finding Domain
Controller" step altogether.
Range of timeout value: 0 to 300 seconds
Default: Unchecked; 0 seconds
Note
Note
Note
Note
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide
OL-4211-05
This parameter is available only if the 802.1x security option is selected.
For security reasons, Cisco recommends that WEP-enabled and WEP-disabled clients not be
allowed in the same cell because broadcast packets are sent unencrypted, even to clients running
WEP. However, you can enable VLANs on the access point to separate WEP-enabled and
WEP-disabled clients.
When the "Finding Domain Controller" step is reached during the authentication process, a
timer starts based on the number of seconds you specified for finding the domain controller. If
either this value or the EAP-FAST authentication timeout value expires before the domain
controller is found, the authentication process times out. For example, if the authentication
timeout value is 60 seconds and the finding domain controller timeout value is 10 seconds, the
client adapter has up to 60 seconds to complete the entire authentication process, up to 10
seconds of which is allocated for finding the domain controller. However, if authentication
happens quickly, the software might reach the "Finding Domain Controller" step in 5 seconds.
If the domain controller could not be found within 10 seconds, the authentication process would
timeout in just 15 seconds.
The finding domain controller timeout value can never extend the authentication process beyond
the EAP-FAST authentication timeout value, even if the finding domain controller timeout value
is greater than the EAP-FAST authentication timeout value.
If you require domain services such as login scripts and roaming desktops, Cisco recommends
that you uncheck the Limit Time for Finding Domain Controller To check box.
Regardless of whether the check box is checked or unchecked, the "Finding Domain Controller"
step is bypassed once you are logged into Windows or if you log into the local machine and not
into a domain.
Setting Security Parameters
5-43