Intellinet 524438 User manual

Wireless
150N
UsB
AdApter
User mANUAl
MODEL 524438
INT-524438-UM-0908-03

Thank you for purchasing the INTELLINET NETWORK SOLUTIONS
™
Wireless 150N USB Adapter, Model 524438.
The Wireless 150N USB Adapter is a compact high-speed adapter that
allows you to connect your notebook or desktop PC to wireless networks
at faster speeds than ever before. Now you can transfer or receive digital
images, videos and MP3 les faster than ever, connecting to the wireless
network with link speeds of up to 150 Mbps using the latest in wireless
technology. This adapter is also compatible with 802.11b and 802.11g
wireless access points and wireless routers, giving you the exibility to
start upgrading your wireless network without the need to replace your
existing equipment.
With the easy-to-follow instructions in this manual, you’ll soon be able to
enjoy the benets of these additional features:
• Includes USB stand and extension cable (Hi-Speed USB 2.0)
• Supports WMM for increased multimedia data throughput
• Supports WEP (64/128 bit), WPA and WPA2 data encryption
• Supports Software AP function; Windows 2000, XP, Vista;
• Lifetime Warranty
FCC Ce r t i F i C a t i o n s
This equipment has been tested and found to comply with the limits for a
Class B digital device, pursuant to Part 15 of the FCC Rules. These limits
are designed to provide reasonable protection against harmful interference
in a residential installation. This equipment generates, uses and can radiate
radio frequency energy and, if not installed and used in accordance with the
instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off
and on, the user is encouraged to try to correct the interference by one or
more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the receiver.
• Connect the equipment to an outlet on a circuit different from that to
which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
3

CAUTION: Any changes or modications not expressly approved by the
party responsible for compliance could void the user’s authority to operate
the equipment.
This device complies with Part 15 of the FCC Rules. Operation is subject
to the following two conditions: (1) This device may not cause harmful
interference; and (2) this device must accept any interference received,
including interference that may cause undesired operation.
FCC rF ra d i a t i o n ex p o s u r e st a t e m e n t
This equipment complies with FCC RF radiation exposure limits set forth
for an uncontrolled environment, and should be installed and operated with
a minimum distance of 2.5 cm (1 in.) between the radiator and your body.
SAR (specic absorption rate) compliance has been established in laptop
computer congurations with a USB port on the side near the center, as
tested in the application for certication, and can be used in laptops with
substantially similar physical dimensions, construction and electrical and
RF characteristics. Use in other devices, such as PDAs or lap pads, is
not authorized. This transmitter is restricted for use with the specic
antenna(s) tested in the application for certication. The antenna(s) used
for this transmitter must not be co-located or operated in conjunction with
any other antenna or transmitter.
r&tte Co m p l i a n C e st a t e m e n t
This equipment complies with all the requirements of Directive 1999/5/EC
of the European Parliament and the Council of March 9, 1999, on radio
equipment and telecommunication terminal equipment (R&TTE) and the
mutual recognition of their conformity. The R&TTE directive repeals and
replaces Directive 98/13/EEC (Telecommunications Terminal Equipment
and Satellite Earth Station Equipment) as of April 8, 2000.
eu Co u n t r i e s in t e n d e d F o r us e
The ETSI version of this device is intended for home/ofce use in Austria,
Belgium, Denmark, Finland, France, Germany, Greece, Ireland, Italy,
Luxembourg, the Netherlands, Portugal, Spain, Sweden and the U.K., and
is also authorized for use in EFTA member states Iceland, Liechtenstein,
Norway and Switzerland. (EU countries not intended for use: none.)
4

tABle of coNteNts
Installation .......................................................................................... 6
 ....................................................................................7
Network........................................................................................ 9
Prole ................................................................................................10
Prole Conguration ............................................................. 12
Prole Authentication & Encryption (Security)...................... 13
802.1x Setting/Certication................................................... 16
802.1x Setting/CA Server...................................................... 17
Statistics .................................................................................... 18
Advanced................................................................................... 18
WMM.......................................................................................... 21
About..........................................................................................22
WPS Conguration .................................................................... 22
SoftAP ......................................................................................................24
Conguration ............................................................................. 24
Security Setting ......................................................................... 26
Access Control .......................................................................... 28
MAC Table ................................................................................. 29
Event Log................................................................................... 29
Statistics .................................................................................... 30
About..........................................................................................30
 .................................................................................. 31
NOTE: Some screen-shot images have been modied to t the format
of this user manual.
CONTENTS
section page
5

iNstAllAtioN
Prior to connecting the Wireless N USB Adapter:
• Uninstall any previously loaded versions of the driver and utility.
• Install the software program from the CD. NOTE: The following Windows
XP procedure is similar for Windows 98SE/Me/2000/2003/Vista.
1. Insert the setup CD in the CD-ROM drive and run the setup program.
2. Read the license agreement that displays; click “Yes” to proceed.
3. On the Setup Type screen, select “Install driver and INTELLINET WLAN
Utility.” Only select “Install driver only” if you prefer to use Windows’
integrated WLAN function. Click “Next.”
4. In Windows XP, a “Microsoft Zero Conguration Tool” option displays.
It’s recommended that the alternative “INTELLINET Conguration
Tool” option be selected, as it features more functions. Click “Next.”
6
INSTALLATION

5. Once the software installation is complete, select “Yes, I want
to restart my computer.” Once the reboot is complete, connect the
Wireless N USB Adapter to your computer. When the Found New
Hardware Wizard screen displays, select the option that allows
Windows to automatically search for the correct driver. Your adapter is
now installed.
coNfigUrAtioN
The conguration utility — which displays automatically once the adapter
is connected — is a powerful application that helps you congure the
adapter and monitor link status and statistics during the communication
process. This adapter will auto-connect to the wireless device that
has the better signal strength and no wireless security setting.
7
CONFIGURATION

The conguration utility appears as an icon in the Windows system tray
while the adapter is running. You can
open it by double-clicking on the icon.
In Windows XP, there is a “Windows Zero
Conguration Tool” option for setting up wireless clients. If you prefer to
use the conguration utility, there are two ways to switch to it instead of
using the Windows tool.
op t i o n 1
1. Right-click the utility icon in the
system tray and select “Use
INTELLINET Conguration
utility.”
op t i o n 2
1. Right-click the icon on the left side of the system tray and select
“View Available Wireless Networks.”
2. Click “Change advanced settings.”
CONFIGURATION
8

3. Uncheck “Use Windows
to congure my wireless
network settings” to
enable the utility for the
adapter. NOTE: If
“Wireless Zero
Conguration Tool” is
enabled, you can only
congure the advanced
settings or check the
link status and statistics
from the conguration
utility of the adapter.
NETWORK
When you open the conguration utility, the system scans all the channels
to nd access points/stations within the accessible range of the adapter
and automatically connect to the wireless device with the highest signal
strength. On the Network screen, all the networks nearby are listed.
You can change the connection to another network or add one of the
networks to your own prole list.
CONFIGURATION
9

 This list shows all available wireless networks within
the range of the adapter. It also displays network information: SSID,
BSSID, Signal Strength, Channel, Encryption, Authentication and
Network Type. To connect to a network on the list, double-click the
item and the adapter will connect automatically to it.
 Click “Rescan” to collect the new information of all the wireless
networks nearby.
 Click “Connect” to connect to the selected network.
 Click to add the selected network to the Prole list.
PROFILE
The Prole screen is for managing networks you connect to frequently.
You can add, delete, edit and activate a prole on this screen.
 The Prole List displays all the proles and their related
settings, including Prole Name, SSID, Channel, Authentication,
Encryption and Network Type.
 Click the corresponding button to add, edit or delete
the selected prole(s). Clicking “Add” displays the Add Prole screen,
which presents 1) Conguration and 2) Authentication and Encryption
(Security).
 To display status information about your current wireless
connection, select the prole and click “Activate.” When a prole is
activated, the adapter will be initially connected to it.
10
CONFIGURATION

This eld displays the SSID and MAC ID of the network the
adapter is connecting to.
 This eld displays the link status.
 This eld displays the number of the radio channel and the
frequency used for the networking.
 These elds display the transmission (Tx) and the
reception (Rx) rates of the network. The maximum transmission rate
is 54 Mbps.
 These elds display the speed of data being
 transmitted (Tx) and received (Rx).
 This status bar indicates the quality of the link. The
higher the percentage, the better the quality.
 To display the signal strength measured in dBm (decibels in
milliwatts), click this box on the Network screen (see Page 9).
 This bar shows the signal strength level. The higher
the percentage being shown in the bar, the more radio signal being
received by the adapter. This indicator helps to nd the proper position
of the wireless device for quality network operation.
 This bar displays the noise level in the wireless
environment.
CONFIGURATION
11

pr o F i l e Co n F i g u r a t i o n
 Dene easily recognizable prole names to identify the
different networks.
 The SSID (up to 32 printable ASCII characters) is the unique name
identied in a WLAN. The ID prevents the unintentional merging of
two co-located WLANs. If you specify an SSID for the adapter, then
only the device with the same SSID can interconnect to the adapter.
To add a nearby network to the prole list, pull down the menu to view
all the networks that can be selected.
 The two power-saving functions are available only
when Network Type (see below) is set to “Infrastructure.”
  With this selected, the adapter
will remain in an active mode.
  Enable the adapter in the power-save
mode when it is idle.
 Select from the drop-down menu.
 This operation mode requires the presence of an
802.11 access point. All communication is done via the AP or router.
 Select this mode to connect to another wireless station in
the wireless LAN network without using an access point or router.
To lower the transmit power of the adapter to reduce the power
used by the system, select a lower percentage from the drop-down
menu. NOTE: A lower power level will result in lower signal strength
and reduced coverage range.
CONFIGURATION
12

 This is the minimum packet size required for an RTS
(request to send). For packets smaller than this threshold, an RTS is
not sent and the packet is transmitted directly to the wireless network.
Select a setting within a range of 0 to 2347 bytes. NOTE: A minor
change is recommended.
 This value denes the maximum size of packets;
any packet size larger than the value will be fragmented. If you’ve
decreased this value and experience high packet-error rates, you
can increase it again, but it will likely decrease overall network
performance. Select a setting within a range of 256 to 2346 bytes.
NOTE: A minor change is recommended.
pr o F i l e au t h e n t i C a t i o n a n d en C r y p t i o n (se C u r i t y )
 This pull-down menu setting has to be consistent
with the wireless networks that the adapter is intended to connect.
 No authentication is needed within the wireless network.
 Only wireless devices using a shared key (WEP key
identied) are allowed to connect to each other.
 This is a pre-EAP, Cisco-proprietary protocol with many of
the features of EAP protocols. Cisco controls the ability of other
vendors to implement this protocol, so it should be selected for use
only when a limited vendor choice for client, access point and server
products is not a concern. When you’ve set up LEAP authentication,
you need to enter the username and password of your computer.
 WPA provides a scheme of mutual authentication using either
IEEE 802.1x/Extensible Authentication Protocol (EAP) authentication
13
CONFIGURATION

or pre-shared key (PSK) technology. It provides a high level of
assurance to enterprises, small businesses and home users that
data will remain protected and that only authorized users may access
their networks. For enterprises that have already deployed IEEE
802.1x authentication, WPA offers the advantage of leveraging
existing authentication databases and infrastructure.
 This is a special mode designed for home and small
business users who do not have access to network authentication
servers. In this mode, known as Pre-Shared Key, you manually
enter the starting password in your access point or gateway, as
well as in each wireless station in the network. WPA-PSK takes
over automatically from that point, keeping unauthorized users who
don’t have the matching password from joining the network, while
encrypting the data traveling between authorized devices.
 Like WPA, WPA2 supports IEEE 802.1x/EAP authentication,
or PSK, technology. It also includes a new advanced encryption
mechanism using the Advanced Encryption Standard (AES). AES is
required for corporate or government users. The difference between
WPA and WPA2 is that WPA2 provides data encryption via AES. In
contrast, WPA uses the Temporal Key Integrity Protocol (TKIP).
 This is also for home and small business use. The
difference between WPA-PSK and WPA2-PSK is that WPA2-PSK
provides data encryption via the AES. In contrast, WPA-PSK uses
the Temporal Key Integrity Protocol (TKIP).
 This is dened for Ad Hoc mode and behaves like
WPA-PSK (WPA-PSK is only dened for Infrastructure mode). The
user manually enters the Pre-Shared Key in each wireless station
in the network, and WPA-NONE controls unauthorized users who
don’t have the matching Pre-Shared Key from joining the network.
It also encrypts the data traveling between authorized devices.
 When Authentication Type is set to “Open,” “Shared,”
“WPA” or “WPA2,” you can also enable IEEE 802.1x Setting to use the
authentication server or certication server to authenticate client users.
NOTE: See the two separate 802.1x Setting sections below for details.
 Select from the drop-down menu.
 Disables the encryption mode.
CONFIGURATION
14

Enables the WEP Data Encryption. When the item is selected,
you need to continue setting the WEP Encryption keys.
 The Temporal Key Integrity Protocol changes the temporal key
every 10,000 packets (a kind of message transmitted over a network.)
This ensures much greater security than the standard WEP security.
 AES has been developed to ensure the highest degree of
security and authenticity for digital information. It’s the most advanced
solution dened by IEEE 802.11i for security in the wireless network.
NOTE: All devices in the network should use the same encryption
method to ensure the security of communications.
 The WPA-PSK key can be 8 to 64 characters in
length and can be letters or numbers. This same key must be used on
all the wireless stations in the network.
 WEP keys are used to encrypt data transmitted
in the wireless network. There are two types of key length: 64-bit and
128-bit. Assign a default encryption key (Key#1 to Key#4) by clicking
on the corresponding radio button. To ll in each text eld:
 Input 10-digit hex values (in the A-F, a-f and 0-9 range) or
5-digit ASCII characters (a-z and 0-9) as the encryption keys.
For example: “0123456aef“ or “test1.”
 Input 26-digit hex values (in the A-F, a-f and 0-9 range) or
13-digit ASCII characters (“a-z” and “0-9”) as the encryption keys.
For example: “01234567890123456789abcdef“ or “administrator.”
The IEEE 802.1X specication describes a protocol that can be used for
authenticating both clients (802.1x Setting/Certication below) and servers
(802.1x Setting/CA Server below) on a network. The authentication
algorithms and methods are those provided by the Extensible Authentication
Protocol (EAP), a method of authentication that has been in use for a
number of years on networks that provide Point-to-Point Protocol (PPP)
support (as many Internet service providers and enterprises do). EAP
runs before network layer protocols transmit data over the link.
When an AP acting as an authenticator detects a wireless station on the
LAN, it sends an EAP request for the user’s identity to the device. In
turn, the device responds with its identity, and the AP relays this identity
to an authentication server (typically an external RADIUS server).
CONFIGURATION
15

802 .1xse t t i n g /Ce r t i F i C a t i o n
 The EAP authentication protocols supported by this
adapter require that settings be consistent with the wireless access
points or routers that the adapter is intended to connect.
 These protocols are similar and easier to use than
TLS (below) in that they specify a stand-alone authentication protocol
to be used within an encrypted tunnel. TTLS supports any protocol
within its tunnel, including CHAP, MS-CHAP, MS-CHAPv2, PAP and
EAP-MD5. PEAP species that an EAP-compliant authentication
protocol be used; this adapter supports EAP-MSCHAP v2, EAP-TLS/
Smart Card and Generic Token Card. The client certicate is optional.
 This is the most secure of the EAP protocols, but
isn’t easy to use: It requires that digital certicates be exchanged in
16
CONFIGURATION
RADIUS
Server
Windows 2000 IAS
(Internet Authentication
Service)
IEEE 802.1x
Access Client
Access Point
RADIUS
Client
1
2
3
4
(2) Login with username,
password.
(1) Client requests to login the
network.
(4) Approve or deny user
login to the LAN.
(3) Send username, password to
RADIUS server.
1
24
3
1 Client requests to log in to the network 3 Username and password sent to RADIUS server
2 Log in with username and password 4 User login to the LAN approved or denied
IEEE 802.1x Access Client RADIUS Client RADIUS Server

the authentication phase. The server presents a certicate to the
client and, after validating the server’s certicate, the client presents
a client certicate to the server for validation.
 Click/check the box to activate or de-activate.
 Enter the password as the identity for the server.
 A client certicate is required for TLS, but is
optional for TTLS and PEAP. This forces a client certicate to be
selected from the appropriate Windows Certicate Store and made
available to the RADIUS server for certication.
 When the authentication type is
PEAP or TTLS, select a protocol for building the encrypted tunnel.
 Select one of three options from the drop-
down menu: “EAP-MSCHAPv2,” “EAP-TLS/Smart card” or “Generic
Token Card.”
802 .1xse t t i n g /Ca se r v e r
 When the Extensible Authentication Protocol
(EAP) authentication type — such as TLS, TTLS or PEAP — is
selected and requires certication to tell the client what credentials to
accept from the authentication server in order to verify the server, you
need to enable this function. Choose the preferred server from the
drop-down menu to issue the certicate. If “Any Trusted CA” is
selected, any CA (certication authority) on the list (which is provided
by the Microsoft Certicate Store) is permitted.
 A server designates an issuer as a
trusted root authority by placing the issuer’s self-signed certicate,
CONFIGURATION
17

which contains the issuer’s public key, into the trusted root certication
authority certicate store of the host computer. Intermediate or
subordinate certication authorities are trusted only if they have a
valid certication path from a trusted root certication authority.
 Enter the authentication server name.
 When selected, the server name
must exactly match the server name found on the certicate.
 When this is selected,
the server name eld identies a domain. The certicate must use a
server name belonging to this domain or one of its sub-domains (e.g.,
zeelans.com, where the server is blueberry.zeelans.com), but it may
be any name used in the certicate name eld.
STATISTICS
This screen enables you to view/compare the transmit and receive
statistical information of the connection. To reset the counters, click
”Reset Counter.”

This screen enables you to congure more advanced settings, such as
the wireless mode and the protection mode.
 Select from the drop-down menu.
 If you have a mix of 802.11b and 802.11g wireless
stations in your network, it is recommended that the adapter be set
18
CONFIGURATION

to this mode. This mode is also the default setting.
 Though the adapter is compatible with both 802.11g
and 802.11b wireless stations, if there are only 802.11b wireless
stations in the network, you can set the adapter to this mode.
 When the adapter is set in Ad Hoc (Peer to
Peer) mode, you can designate the wireless connection mode for the
Ad Hoc network.
 Though the adapter is compatible with both 802.11g and
802.11b wireless stations, if there are only 802.11b wireless stations
in the network, you can set the adapter to this mode.
 If you have a mix of 802.11b and 802.11g wireless
stations in your network, it is recommended that the adapter be set
to this mode. This mode is also the default setting.
 Though the adapter is compatible with both 802.11g and
802.11b wireless stations, if there are only 802.11g wireless stations
in the network, you can set the adapter to this mode.
 If you have a mix of 802.11b and 802.11g wireless
stations in the network, it’s recommended that you enable the protection
mechanism, which can decrease the rate of data collisions between
802.11b and 802.11g wireless stations. When the protection mode is
enabled, the throughput of the adapter will be a little lower.
Depending on the status of the network, this automatically
disables/enables the protection mode.
 Always enables the protection mode.
 Always disables the protection mode.
CONFIGURATION
19

 There are several options in the drop-down menu: “Auto” and a
range of speeds from “1 Mbps” to “54 Mbps.” When “Auto” is selected,
the device automatically chooses the most suitable transmission rate.
The higher the data rate designated in the network, the shorter the
distance allowed between the adapter and the wireless stations.
 This enables the adapter to deliver better throughput
in the same period and environment.
 The TCP window is the amount of data a
sender can deliver on a particular connection before it gets an
acknowledgment back from the receiver that it has gotten some of it.
When the router or AP the adapter is connecting to has set up the
TCP window, you can enable the parameter to meet the data size for
the router or AP connection. The larger the TCP window, the better
the performance.
 To fast roam to a nearby network without
interrupting the wireless connection (such as a multimedia application
or a voice call), you can set this parameter. The adapter will fast roam
when the receive sensitivity (signal strength) is below the value entered.
 Select to display.
 Channel availability varies from
country to country; for example, USA (FCC) channels are 1-11, while
Europe (ETSI) channels are 1-13.
 Cisco Compatible Extensions, for radio monitoring and
fast roaming.
 During normal operation, LEAP-enabled client devices
mutually authenticate with a new AP by performing a complete LEAP
authentication, including communication with the main RADIUS server.
When a wireless LAN is congured for fast re-association, however,
LEAP-enabled client devices roam from one access point to another
without involving the main server. Using Cisco Centralized Key
Management (CCKM), an access point congured to provide wireless
domain services (WDS) takes the place of the RADIUS server and
authenticates the client so quickly that there is no perceptible delay
in voice or other time-sensitive applications.
20
CONFIGURATION