Intellinet 525152 User manual

WIRELESS 150N
HIGH-POWER
USB ADAPTER
USER MANUAL
MODEL 525152
INT-525152-UM-0411-01

2
Thank you for purchasing the INTELLINET NETWORK SOLUTIONS
™
Wireless 150N HIgh-Power USB Adapter, Model 525152.
This adapter is a compact high-speed model that allows you to connect
your notebook or desktop PC to any Wi-Fi network at faster speeds
and longer ranges than ever before. Transfer or receive digital images,
streaming video and MP3 les at lightning speeds by connecting to the
wireless network with link speeds of up to 150 Mbps using the latest in
wireless technology. This adapter is also compatible with 802.11b and
802.11g wireless access points and wireless routers, giving you the
exibility to start upgrading your wireless network without the need to
replace existing equipment.
Additional features:
• Strong 20 dBm output power rating
• Includes detachable 3 dBi high-gain antenna with reverse SMA male
connector
• Supports WMM (IEEE 802.11e QoS standard) prioritizing bandwidth
for multi-media applications
• Supports WEP (64/128 bit), WPA and WPA2 data encryption
• Supports Hi-Speed USB 2.0/1.1 interface
• Supports Software AP function (turns your wireless client into a
wireless access point)
• Supports CCX 2.0 (Cisco Compatible Extensions) for radio monitoring
and fast roaming
• Supports the most popular operating systems: Windows 7, Vista, XP
• Three-Year Warranty
FCC CertiFiCations
This equipment has been tested and found to comply with the limits for a
Class B digital device, pursuant to Part 15 of the FCC Rules. These
limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates, uses
and can radiate radio frequency energy and, if not installed and used in
accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not
occur in a particular installation. If this equipment does cause harmful

interference to radio or television reception, which can be determined by
turning the equipment off and on, the user is encouraged to try to correct
the interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the receiver.
• Connect the equipment to an outlet on a circuit different from that to
which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
CAUTION: Any changes or modications not expressly approved by the
party responsible for compliance could void the user’s authority to operate
the equipment.
This device complies with Part 15 of the FCC Rules. Operation is subject
to the following two conditions: (1) This device may not cause harmful
interference; and (2) this device must accept any interference received,
including interference that may cause undesired operation.
FCC rF radiation exposure statement
This equipment complies with FCC RF radiation exposure limits set forth
for an uncontrolled environment, and should be installed and operated with
a minimum distance of 2.5 cm (1 in.) between the radiator and your body.
SAR (specic absorption rate) compliance has been established in laptop
computer congurations with a USB port on the side near the center, as
tested in the application for certication, and can be used in laptops with
substantially similar physical dimensions, construction and electrical and
RF characteristics. Use in other devices, such as PDAs or lap pads, is
not authorized. This transmitter is restricted for use with the specic
antenna(s) tested in the application for certication. The antenna(s) used
for this transmitter must not be co-located or operated in conjunction with
any other antenna or transmitter.
r&tte ComplianCe statement
This equipment complies with all the requirements of Directive 1999/5/EC
of the European Parliament and the Council of March 9, 1999, on radio
equipment and telecommunication terminal equipment (R&TTE) and the
mutual recognition of their conformity.
3

eu Countries intended For use
The ETSI version of this device is intended for home/ofce use in Austria,
Belgium, Denmark, Finland, France, Germany, Greece, Ireland, Italy,
Luxembourg, the Netherlands, Portugal, Spain, Sweden and the U.K., and
is also authorized for use in EFTA member states Iceland, Liechtenstein,
Norway and Switzerland. (EU countries not intended for use: none.)
4

TABLE OF CONTENTS
Installation ..........................................................................................6
Conguration ....................................................................................7
Network........................................................................................ 9
Prole ................................................................................................10
Prole Conguration ............................................................. 12
Prole Authentication & Encryption (Security)...................... 13
802.1x Setting/Certication................................................... 16
802.1x Setting/CA Server...................................................... 17
Statistics .................................................................................... 18
Advanced................................................................................... 18
WMM.......................................................................................... 21
About..........................................................................................22
WPS Conguration .................................................................... 22
SoftAP ..................................................................................................... 26
Conguration ............................................................................. 26
Security Setting ......................................................................... 28
Access Control ..........................................................................30
MAC Table ................................................................................. 31
Event Log ................................................................................... 31
Statistics .................................................................................... 32
About.......................................................................................... 32
Specications .................................................................................. 33
NOTE: The Windows XP screen images are similar for Windows Vista/7.
Some images have been modied to t the format of this user manual.
CONTENTS
section page
5

INSTALLATION
1. Remove the adapter’s protective cap and
attach the antenna by securely screwing it
onto the antenna connector.
2. With your computer on, gently insert the
adapter into a USB 2.0 port. NOTE: If the
adapter doesn’t easily slide into the port,
ip the adapter over and try again.
3. The Welcome to the Found New Hardware Wizard screen will display
automatically. Click “Cancel” to continue.
4. Insert the included setup CD and run the “Setup.exe” program. Read
the license agreement that displays; select “I accept the terms of the
license agreement” and click “Next” to continue.
5. On the Setup Type screen, select “Install driver and INTELLINET WLAN
Utility.” Select
“Install driver
only” if you
prefer to use
the Windows
integrated
WLAN function.
Click “Next.”
6. In Windows XP, a “Microsoft Zero Conguration Tool” option displays. It’s
recommended
that the
alternative
“INTELLINET
Conguration
Tool” option be
selected, as it
features more
functions. Click
“Next.”
6
INSTALLATION

7. Once the software installation is complete, select “Yes, I want to restart
my computer.” Once the reboot is complete, connect the Wireless N
USB Adapter to your computer. When the Found New Hardware
Wizard screen displays, select the option that allows Windows to
automatically search for the correct driver. Your adapter is now
installed.
CONFIGURATION
The conguration utility — which displays automatically once the adapter
is connected — is a powerful application that helps you congure the
adapter and monitor link status and statistics during the communication
process. This adapter will auto-connect to the wireless device that
has the better signal strength and no wireless security setting.
7
CONFIGURATION

The conguration utility appears as an icon in the Windows system tray
while the adapter is running. You can
open it by double-clicking on the icon.
In Windows XP, there is a “Windows Zero
Conguration Tool” option for setting up wireless clients. If you prefer to
use the conguration utility, there are two ways to switch to it instead of
using the Windows tool.
option 1
1. Right-click the utility icon in the
system tray and select “Use
INTELLINET Conguration
utility.”
option 2
1. Right-click the icon on the left side of the system tray and select “View
Available Wireless Networks.”
2. Click “Change advanced settings.”
CONFIGURATION
8

3. Uncheck “Use Windows
to congure my wireless
network settings” to
enable the utility for the
adapter. NOTE: If
“Wireless Zero
Conguration Tool” is
enabled, you can only
congure the advanced
settings or check the
link status and statistics
from the conguration
utility of the adapter.
NETWORK
When you open the conguration utility, the system scans all the channels
to nd access points/stations within the accessible range of the adapter
and automatically connect to the wireless device with the highest signal
strength. On the Network screen, all the networks nearby are listed.
You can change the connection to another network or add one of the
networks to your own prole list.
CONFIGURATION
9

Available Networks: This list shows all available wireless networks within
the range of the adapter. It also displays network information: SSID,
BSSID, Signal Strength, Channel, Encryption, Authentication and
Network Type. To connect to a network on the list, double-click the
item and the adapter will connect automatically to it.
Rescan: Click “Rescan” to collect the new information of all the wireless
networks nearby.
Connect: Click “Connect” to connect to the selected network.
Add to Prole: Click to add the selected network to the Prole list.
PROFILE
The Prole screen is for managing networks you connect to frequently.
You can add, delete, edit and activate a prole on this screen.
Prole List: The Prole List displays all the proles and their related
settings, including Prole Name, SSID, Channel, Authentication,
Encryption and Network Type.
Add, Edit, Delete: Click the corresponding button to add, edit or delete
the selected prole(s). Clicking “Add” displays the Add Prole screen,
which presents 1) Conguration and 2) Authentication and Encryption
(Security).
Activate: To display status information about your current wireless
connection, select the prole and click “Activate.” When a prole is
activated, the adapter will be initially connected to it.
10
CONFIGURATION

Status: This eld displays the SSID and MAC ID of the network the
adapter is connecting to.
Extra Info: This eld displays the link status.
Channel: This eld displays the number of the radio channel and the
frequency used for the networking.
Link Speed (Mbps): These elds display the transmission (Tx) and the
reception (Rx) rates of the network. The maximum transmission rate
is 54 Mbps.
Throughput (Kbps): These elds display the speed of data being
transmitted (Tx) and received (Rx).
Link Quality: This status bar indicates the quality of the link. The
higher the percentage, the better the quality.
dBm: To display the signal strength measured in dBm (decibels in
milliwatts), click this box on the Network screen (see Page 9).
Signal Strength: This bar shows the signal strength level. The higher
the percentage being shown in the bar, the more radio signal being
received by the adapter. This indicator helps to nd the proper position
of the wireless device for quality network operation.
Noise Strength: This bar displays the noise level in the wireless
environment.
CONFIGURATION
11

proFile ConFiguration
Prole Name: Dene easily recognizable prole names to identify the
different networks.
SSID: The SSID (up to 32 printable ASCII characters) is the unique name
identied in a WLAN. The ID prevents the unintentional merging of
two co-located WLANs. If you specify an SSID for the adapter, then
only the device with the same SSID can interconnect to the adapter.
To add a nearby network to the prole list, pull down the menu to view
all the networks that can be selected.
Power Save Mode: The two power-saving functions are available only
when Network Type (see below) is set to “Infrastructure.”
• CAM (Constantly Awake Mode): With this selected, the adapter
will remain in an active mode.
• PSM (Power Save Mode): Enable the adapter in the power-save
mode when it is idle.
Network Type: Select from the drop-down menu.
• Infrastructure: This operation mode requires the presence of an
802.11 access point. All communication is done via the AP or router.
• Ad-Hoc: Select this mode to connect to another wireless station in
the wireless LAN network without using an access point or router.
Tx Power: To lower the transmit power of the adapter to reduce the power
used by the system, select a lower percentage from the drop-down
menu. NOTE: A lower power level will result in lower signal strength
and reduced coverage range.
CONFIGURATION
12

RTS Threshold: This is the minimum packet size required for an RTS
(request to send). For packets smaller than this threshold, an RTS is
not sent and the packet is transmitted directly to the wireless network.
Select a setting within a range of 0 to 2347 bytes. NOTE: A minor
change is recommended.
Fragment Threshold: This value denes the maximum size of packets;
any packet size larger than the value will be fragmented. If you’ve
decreased this value and experience high packet-error rates, you
can increase it again, but it will likely decrease overall network
performance. Select a setting within a range of 256 to 2346 bytes.
NOTE: A minor change is recommended.
proFile authentiCation and enCryption (seCurity)
Authentication Type: This pull-down menu setting has to be consistent
with the wireless networks that the adapter is intended to connect.
• Open: No authentication is needed within the wireless network.
• Shared: Only wireless devices using a shared key (WEP key
identied) are allowed to connect to each other.
• LEAP: This is a pre-EAP, Cisco-proprietary protocol with many of
the features of EAP protocols. Cisco controls the ability of other
vendors to implement this protocol, so it should be selected for use
only when a limited vendor choice for client, access point and server
products is not a concern. When you’ve set up LEAP authentication,
you need to enter the username and password of your computer.
• WPA: WPA provides a scheme of mutual authentication using either
IEEE 802.1x/Extensible Authentication Protocol (EAP) authentication
13
CONFIGURATION

or pre-shared key (PSK) technology. It provides a high level of
assurance to enterprises, small businesses and home users that
data will remain protected and that only authorized users may access
their networks. For enterprises that have already deployed IEEE
802.1x authentication, WPA offers the advantage of leveraging
existing authentication databases and infrastructure.
• WPA-PSK: This is a special mode designed for home and small
business users who do not have access to network authentication
servers. In this mode, known as Pre-Shared Key, you manually
enter the starting password in your access point or gateway, as
well as in each wireless station in the network. WPA-PSK takes
over automatically from that point, keeping unauthorized users who
don’t have the matching password from joining the network, while
encrypting the data traveling between authorized devices.
• WPA2: Like WPA, WPA2 supports IEEE 802.1x/EAP authentication,
or PSK, technology. It also includes a new advanced encryption
mechanism using the Advanced Encryption Standard (AES). AES is
required for corporate or government users. The difference between
WPA and WPA2 is that WPA2 provides data encryption via AES. In
contrast, WPA uses the Temporal Key Integrity Protocol (TKIP).
• WPA2-PSK: This is also for home and small business use. The
difference between WPA-PSK and WPA2-PSK is that WPA2-PSK
provides data encryption via the AES. In contrast, WPA-PSK uses
the Temporal Key Integrity Protocol (TKIP).
• WPA-NONE: This is dened for Ad Hoc mode and behaves like
WPA-PSK (WPA-PSK is only dened for Infrastructure mode). The
user manually enters the Pre-Shared Key in each wireless station
in the network, and WPA-NONE controls unauthorized users who
don’t have the matching Pre-Shared Key from joining the network.
It also encrypts the data traveling between authorized devices.
802.1x Setting: When Authentication Type is set to “Open,” “Shared,”
“WPA” or “WPA2,” you can also enable IEEE 802.1x Setting to use the
authentication server or certication server to authenticate client users.
NOTE: See the two separate 802.1x Setting sections below for details.
Encryption: Select from the drop-down menu.
• None: Disables the encryption mode.
CONFIGURATION
14

• WEP: Enables the WEP Data Encryption. When the item is selected,
you need to continue setting the WEP Encryption keys.
• TKIP: The Temporal Key Integrity Protocol changes the temporal key
every 10,000 packets (a kind of message transmitted over a network.)
This ensures much greater security than the standard WEP security.
• AES: AES has been developed to ensure the highest degree of
security and authenticity for digital information. It’s the most advanced
solution dened by IEEE 802.11i for security in the wireless network.
NOTE: All devices in the network should use the same encryption
method to ensure the security of communications.
WPA Pre-Shared Key: The WPA-PSK key can be 8 to 64 characters in
length and can be letters or numbers. This same key must be used on
all the wireless stations in the network.
WEP Key (Key#1–4): WEP keys are used to encrypt data transmitted
in the wireless network. There are two types of key length: 64-bit and
128-bit. Assign a default encryption key (Key#1 to Key#4) by clicking
on the corresponding radio button. To ll in each text eld:
• 64-bit: Input 10-digit hex values (in the A-F, a-f and 0-9 range) or
5-digit ASCII characters (a-z and 0-9) as the encryption keys.
For example: “0123456aef“ or “test1.”
• 128-bit: Input 26-digit hex values (in the A-F, a-f and 0-9 range) or
13-digit ASCII characters (“a-z” and “0-9”) as the encryption keys.
For example: “01234567890123456789abcdef“ or “administrator.”
The IEEE 802.1X specication describes a protocol that can be used for
authenticating both clients (802.1x Setting/Certication below) and servers
(802.1x Setting/CA Server below) on a network. The authentication
algorithms and methods are those provided by the Extensible Authentication
Protocol (EAP), a method of authentication that has been in use for a
number of years on networks that provide Point-to-Point Protocol (PPP)
support (as many Internet service providers and enterprises do). EAP
runs before network layer protocols transmit data over the link.
When an AP acting as an authenticator detects a wireless station on the
LAN, it sends an EAP request for the user’s identity to the device. In
turn, the device responds with its identity, and the AP relays this identity
to an authentication server (typically an external RADIUS server).
CONFIGURATION
15

802.1xsetting/CertiFiCation
EAP Method: The EAP authentication protocols supported by this
adapter require that settings be consistent with the wireless access
points or routers that the adapter is intended to connect.
• PEAP & TTLS: These protocols are similar and easier to use than
TLS (below) in that they specify a stand-alone authentication protocol
to be used within an encrypted tunnel. TTLS supports any protocol
within its tunnel, including CHAP, MS-CHAP, MS-CHAPv2, PAP and
EAP-MD5. PEAP species that an EAP-compliant authentication
protocol be used; this adapter supports EAP-MSCHAP v2, EAP-TLS/
Smart Card and Generic Token Card. The client certicate is optional.
• TLS/Smart Card: This is the most secure of the EAP protocols, but
isn’t easy to use: It requires that digital certicates be exchanged in
16
CONFIGURATION
RADIUS
Server
Windows 2000 IAS
(Internet Authentication
Service)
IEEE 802.1x
Access Client
Access Point
RADIUS
Client
1
2
3
4
(2) Login with username,
password.
(1) Client requests to login the
network.
(4) Approve or deny user
login to the LAN.
(3) Send username, password to
RADIUS server.
1
24
3
1 Client requests to log in to the network 3 Username and password sent to RADIUS server
2 Log in with username and password 4 User login to the LAN approved or denied
IEEE 802.1x Access Client RADIUS Client RADIUS Server

the authentication phase. The server presents a certicate to the
client and, after validating the server’s certicate, the client presents
a client certicate to the server for validation.
Session Resumption: Click/check the box to activate or de-activate.
ID/Password: Enter the password as the identity for the server.
Client Certication: A client certicate is required for TLS, but is
optional for TTLS and PEAP. This forces a client certicate to be
selected from the appropriate Windows Certicate Store and made
available to the RADIUS server for certication.
Tunneled Authentication/Protocol: When the authentication type is
PEAP or TTLS, select a protocol for building the encrypted tunnel.
Tunnel Authentication: Select one of three options from the drop-
down menu: “EAP-MSCHAPv2,” “EAP-TLS/Smart card” or “Generic
Token Card.”
802.1xsetting/Ca server
Use certicate chain: When the Extensible Authentication Protocol
(EAP) authentication type — such as TLS, TTLS or PEAP — is
selected and requires certication to tell the client what credentials to
accept from the authentication server in order to verify the server, you
need to enable this function. Choose the preferred server from the
drop-down menu to issue the certicate. If “Any Trusted CA” is
selected, any CA (certication authority) on the list (which is provided
by the Microsoft Certicate Store) is permitted.
Allow intermediate certicates: A server designates an issuer as a
trusted root authority by placing the issuer’s self-signed certicate,
CONFIGURATION
17

which contains the issuer’s public key, into the trusted root certication
authority certicate store of the host computer. Intermediate or
subordinate certication authorities are trusted only if they have a
valid certication path from a trusted root certication authority.
Server Name: Enter the authentication server name.
Server name must match exactly: When selected, the server name
must exactly match the server name found on the certicate.
Domain name must end in specied name: When this is selected,
the server name eld identies a domain. The certicate must use a
server name belonging to this domain or one of its sub-domains (e.g.,
zeelans.com, where the server is blueberry.zeelans.com), but it may
be any name used in the certicate name eld.
STATISTICS
This screen enables you to view/compare the transmit and receive
statistical information of the connection. To reset the counters, click
”Reset Counter.”
ADVANCED
This screen enables you to congure more advanced settings, such as
the wireless mode and the protection mode.
Wireless Mode: Select from the drop-down menu.
• 802.11 B/G mix: If you have a mix of 802.11b and 802.11g wireless
stations in your network, it is recommended that the adapter be set
18
CONFIGURATION

to this mode. This mode is also the default setting.
• 802.11 B only: Though the adapter is compatible with both 802.11g
and 802.11b wireless stations, if there are only 802.11b wireless
stations in the network, you can set the adapter to this mode.
Ad Hoc Wireless Mode: When the adapter is set in Ad Hoc (Peer to
Peer) mode, you can designate the wireless connection mode for the
Ad Hoc network.
• Only B: Though the adapter is compatible with both 802.11g and
802.11b wireless stations, if there are only 802.11b wireless stations
in the network, you can set the adapter to this mode.
• B/G Mixed: If you have a mix of 802.11b and 802.11g wireless
stations in your network, it is recommended that the adapter be set
to this mode. This mode is also the default setting.
• Only G: Though the adapter is compatible with both 802.11g and
802.11b wireless stations, if there are only 802.11g wireless stations
in the network, you can set the adapter to this mode.
Wireless Protection: If you have a mix of 802.11b and 802.11g wireless
stations in the network, it’s recommended that you enable the protection
mechanism, which can decrease the rate of data collisions between
802.11b and 802.11g wireless stations. When the protection mode is
enabled, the throughput of the adapter will be a little lower.
• Auto: Depending on the status of the network, this automatically
disables/enables the protection mode.
• On: Always enables the protection mode.
• Off: Always disables the protection mode.
CONFIGURATION
19

Tx Rate: There are several options in the drop-down menu: “Auto” and a
range of speeds from “1 Mbps” to “54 Mbps.” When “Auto” is selected,
the device automatically chooses the most suitable transmission rate.
The higher the data rate designated in the network, the shorter the
distance allowed between the adapter and the wireless stations.
Enable Tx Burst: This enables the adapter to deliver better throughput
in the same period and environment.
Enable TCP Window Size: The TCP window is the amount of data a
sender can deliver on a particular connection before it gets an
acknowledgment back from the receiver that it has gotten some of it.
When the router or AP the adapter is connecting to has set up the
TCP window, you can enable the parameter to meet the data size for
the router or AP connection. The larger the TCP window, the better
the performance.
Fast Roaming at [-70] dBm: To fast roam to a nearby network without
interrupting the wireless connection (such as a multimedia application
or a voice call), you can set this parameter. The adapter will fast roam
when the receive sensitivity (signal strength) is below the value entered.
Show Authentication Status Dialog: Select to display.
Select Your Country Region Code: Channel availability varies from
country to country; for example, USA (FCC) channels are 1-11, while
Europe (ETSI) channels are 1-13.
Enable CCX: Cisco Compatible Extensions, for radio monitoring and
fast roaming.
Turn on CCKM: During normal operation, LEAP-enabled client devices
mutually authenticate with a new AP by performing a complete LEAP
authentication, including communication with the main RADIUS server.
When a wireless LAN is congured for fast re-association, however,
LEAP-enabled client devices roam from one access point to another
without involving the main server. Using Cisco Centralized Key
Management (CCKM), an access point congured to provide wireless
domain services (WDS) takes the place of the RADIUS server and
authenticates the client so quickly that there is no perceptible delay
in voice or other time-sensitive applications.
Enable Radio Measurement: When this parameter is enabled, the Cisco
20
CONFIGURATION