Note: Provides related information or information of special importance.
Caution: Indicates potential damage to hardware or software, or loss of data.
Warning: Indicates a risk of personal injury.
Document Status
Doc Status: 2.00 Technical Publication: 0.x
For more information, visit our website at: www.marvell.com
Disclaimer
No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording, for any purpose,
without the express written permission of Marvell. Marvell retains the right to make changes to this document at any time, without notice. Marvell makes no warranty of any
kind, expressed or implied, with regard to any information contained in this document, including, but not limited to, the implied warranties of merchantability or fitness for any
particular purpose. Further, Marvell does not warrant the accuracy or completeness of the information, text, graphics, or other items contained within this document.
Marvell products are not designed for use in life-support equipment or applications that would cause a life-threatening situation if any such products failed. Do not use
Marvell products in these types of equipment or applications.
With respect to the products described herein, the user or recipient, in the absence of appropriate U.S. government authorization, agrees:
1) Not to re-export or release any such information consisting of technology, software or source code controlled for national security reasons by the U.S. Export Control
Regulations ("EAR"), to a national of EAR Country Groups D:1 or E:2;
2) Not to export the direct product of such technology or such software, to EAR Country Groups D:1 or E:2, if such technology or software and direct products thereof are
controlled for national security reasons by the EAR; and,
3) In the case of technology controlled for national security reasons under the EAR where the direct product of the technology is a complete plant or component of a plant,
not to export to EAR Country Groups D:1 or E:2 the direct product of the plant or major component thereof, if such direct product is controlled for national security reasons
by the EAR, or is subject to controls under the U.S. Munitions List ("USML").
At all times hereunder, the recipient of any such information agrees that they shall be deemed to have manually signed this document in connection with their receipt of any
such information.
Table of Contents ....................................................................................................................................... 3
List of Figures.............................................................................................................................................5
List of Tables .............................................................................................................................................. 7
3Marvell Wireless Configuration Utility User Interface ..............................................................15
3.1Network Status Tab.........................................................................................................................................16
3.1.2Link Information ................................................................................................................................17
Figure 2:Admin Tab—Stop Windows Wireless Zero Configuration Service ...................................................12
Figure 3:Tray Status Icons Window................................................................................................................12
3Marvell Wireless Configuration Utility User Interface .................................................................. 15
Figure 4:Network Status Tab ..........................................................................................................................16
Figure 6:Link Information Section ...................................................................................................................17
Figure 54: About Tab .........................................................................................................................................64
Marvell high throughput client cards are both IEEE 802.11a/g/b and draft-802.11n compliant.
For information on installing the Marvell Wireless Configuration Utility, the Marvell
Note
For a list of acronyms used throughout this document see Appendix B, Acronyms
®
IEEE 802.11a/g/b and draft-802.11n WLAN client cards:
client card, and the Marvell Windows driver, see the CB-85/MB-85/EC-85/MC-85 Installation Guide.
and Abbreviations, on page 69.
Introduction
Overview
1.2Wireless Networks
The Marvell client cards operate similar to Ethernet cards, except that a radio replaces the wires
between communication devices. All existing applications that operate over Ethernet operate over a
Marvell wireless network without any modification or need for special wireless networking software.
The Marvell client cards support the following network technologies:
Ad-Hoc (peer-to-peer group) mode
Access Point (AP) Infrastructure mode
1.2.1Ad-Hoc Mode
In Ad-Hoc mode (also referred to as peer-to-peer mode), wireless clients send and receive
information to other wireless clients without using an AP. In comparison to Infrastructure mode, this
type of WLAN connection only contains wireless clients. Ad-Hoc mode is useful for establishing a
network where wireless infrastructure does not exist or where services are not required. Two or
more computers can establish an Ad-Hoc network when within range of one another.
Ad-Hoc mode is used to connect network computers at home or in small offices. It can also be used
to set up a temporary wireless network for meetings.
1.2.2Infrastructure Mode
In Infrastructure mode, wireless devices communicate with other wireless devices or devices on the
LAN side wired network through APs. When communicating through wired networks, client cards
send and receive information through APs.
Access Points are typically strategically located within an area to provide optimal coverage for
wireless clients. A large WLAN uses multiple APs to provide coverage over a wide area. APs
connect to a LAN through a wired Ethernet connection. APs send and receive information from the
LAN through this wired connection. Most corporate WLANs operate in Infrastructure mode because
they require access to the wired LAN in order to use services such as file servers or printers.
The Marvell Wireless Client Card Configuration Utility is a Windows® based application that allows
configuration and management of the Marvell high throughput client cards. The Marvell Wireless
Configuration Utility sets up profiles and performs other wireless network management tasks. For
information on installing the Marvell Wireless Configuration Utility see the Installation Guide.
2.2Marvell Wireless Configuration Utility
Once installed, the Marvell Wireless Configuration Utility is accessed from the Start menu or from
the Desktop.
For Windows XP and Windows Server 2003, either the Windows Wireless Zero Configuration
Service or the Marvell Wireless Configuration Utility can be used to configure the Marvell client card.
For further information on the Windows Wireless Configuration Service, refer to the Windows
documentation.
When using the Marvell Wireless Configuration Utility, Marvell recommends turning off
the Windows Wireless Zero Configuration Service, which is enabled by default. Both
Note
Disabling Windows Wireless Zero Configuration Service
To disable the Windows Wireless Zero Configuration Service:
1.Start the Marvell Wireless Configuration Utility.
Implementing a security infrastructure to monitor physical access to WLAN networks is more difficult
than monitoring access on wired networks. Unlike wired networks where a physical connection is
required, anyone within the range of a wireless AP can send and receive frames, as well as listen for
frames being sent.
IEEE 802.11 and IEEE 802.1X define a set of standards and protocols for use in minimizing the
security risks on wireless networks. These include the authentication modes used to authenticate
the wireless client station and the wireless AP to be connected, complemented by different
encryption methods used for data to be transmitted over the wireless network. Four of these security
standards are as follows:
802.1X—802.1X authentication provides authenticated access to 802.11 wireless networks and
to wired Ethernet networks. 802.1X minimizes wireless network security risks by providing user
and computer identification, centralized authentication, and encryption services based on the
Wired Equivalent Privacy (WEP) algorithm. 802.1X supports the Extensible Authentication
Protocol (EAP). EAP allows the use of different authentication methods, such as smart cards
and certificates.
Wired Equivalent Privacy (WEP)—WEP is a basic security implementation according to the
IEEE 802.11 standard. Due to various security issues WEP encryption is vulnerable and was
therefore superseded by WPA and WPA2 encryption.
Wi-Fi Protected Access (WPA)—WPA is a security implementation based on a subset of the
802.11i standard. WPA provides enhanced security for wireless networks when used with the
Temporal Key Integrity Protocol (TKIP) and the Message Integrity Check (MIC) algorithms.
Wi-Fi Protected Access 2 (WPA2)—WPA2 is the next generation Wi-Fi security, based on the
final 802.11i standard. WPA2 offers the strongest available security in the form of Advanced
Encryption Standard (AES) level encryption, plus faster roaming between APs.
Marvell Wireless Configuration Utility Overview
Security
Security Configurations
The Marvell Wireless Configuration Utility supports the following security features:
Authentication Modes
• Open System
• Shared Key
• Auto Switch
• WPA-PSK
• WPA2-PSK
• WPA
• WPA2
• 802.1X Authentication Protocol (including support for Cisco
- EAP/Transport Layer Security (EAP/TLS) (equivalent to Microsoft “Smart Card or other
Certificate”)
Marvell Wireless Configuration Utility User Interface
3Marvell Wireless Configuration Utility
User Interface
The Marvell Wireless Client Card Configuration Utility allows configuration of Marvell high
throughput client cards through the following tabs:
Network Status—displays the status of the network to which the user is connected. The
Marvell Wireless Configuration Utility initializes on this page.
Profile Manager—displays the current profiles and allows the user to set attributes for network
type, security options and protocols, as well as create/modify/delete profiles.
Site Survey—displays site survey information.
Statistics—displays the statistics of the current session.
Advanced—used to set protocol parameters.
AutoLink—to set AutoLink connection
Admin—used to import and export profiles. Additionally, the user can define how to use the
Marvell Wireless Configuration Utility and the Windows Wireless Zero Configuration Service.
About—provides information such as the driver version number, firmware version number,
Marvell Wireless Configuration Utility version number, and Medium Access Controller (MAC)
address of the client card.
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 15
CB-85/MB-85/EC-85/MC-85
User Guide
3.1Network Status Tab
The Network Status tab displays the status of the network. When the Marvell Wireless
Configuration Utility initializes, it displays the Network Status tab.
Figure 4: Network Status Tab
3.1.1Select Profile
The Select Profile section displays the name of the profile in use. Additional information about the
profile is provided in the Profile Manager.
Select one of the profiles previously defined by clicking the down arrow and highlighting a profile
from the pull-down list.
Figure 5: Select Profile Section
Profiles are created, modified, and deleted through the Profile Manager.
The Link Information section contains the current information about the wireless connection.
Figure 6: Link Information Section
Table 1:Link Information Section Description
FieldDescription
StatusStatus of the wireless network connection:
• Card Unplugged
Client card is not plugged in, or client card is plugged in but not recognized.
• Connected
Client card is plugged in and connected to a wireless network.
• No Connection
Client card is plugged in, but no wireless connection.
• No Radio
Client card is plugged in, but the radio is turned off. To turn the radio on, clear
the Radio Off check box.
• Scanning for
Scanning for available APs and wireless stations in the area.
• Waiting for peer
Waiting for a peer station to connect to the wireless network (Ad-Hoc network
only).
Network SSIDNetwork SSID label (i.e., Network Name). The Network Name is a text string of up
to 32 characters.
Network TypeType of environment connected to:
• Infrastructure Mode
In this mode, wireless clients send and receive information through APs. The
APs are strategically located within an area to provide optimal coverage for
wireless clients. A large WLAN uses multiple APs to provide coverage over a
wide area. APs can connect to a LAN through a wired Ethernet connection. APs
send and receive information from the LAN through the wired connection.
• Ad-Hoc Mode
In this mode, wireless clients send and receive information to other wireless
clients without using an AP. This type of WLAN only contains wireless clients.
Use Ad-Hoc mode to connect network computers at home or in small office, or
to set up a temporary wireless network for a meeting.
Network BSSIDNetwork Basic Service Set (BSS) Identifier. The BSSID is a 48-bit identity used to
identify a particular BSS within an area. In Infrastructure BSS networks, the BSSID
is the MAC address of the AP. In Ad-Hoc networks, the BSSID is generated
randomly.
Marvell Wireless Configuration Utility User Interface
Marvell Wireless Configuration Utility User Interface
Table 2:Internet Protocol Section Description
FieldDescription
DHCP OptionDynamic Host Configuration Protocol. Either enabled or disabled.
IP AddressAn identifier for a computer or device on a TCP/IP network. The format of
an IP address is a 32-bit numeric address written as four numbers
separated by periods. Each number can be 0 to 255.
Subnet MaskA mask used to determine what subnet an IP address belongs to. An IP
address has two components, the network part and the host part. The
subnet mask specifies the network part of the IP address.
Default GatewayThe default node on a network that serves as an entrance to another
network. In enterprises, the gateway is the computer that routes the traffic
from a workstation to the outside network that is serving the Web pages.
In homes, the gateway is the Internet Service Provider (ISP) that connects
the user to the Internet.
3.1.5Actual Throughput Performance
This section of the Network Status tab displays the Current Tx Rate and the Current Rx Rate of the
channel being monitored.
Network Status Tab
Figure 9: Actual Throughput Performance Section
3.1.6Radio On/Off Check Box
These are actual throughput diagrams (without the WLAN overhead delivered by the
Note
Selecting the Radio Off check box turns off the radio. Clearing the check box turns on the radio.
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 19
CB-85/MB-85/EC-85/MC-85
User Guide
Another way to turn the radio on or off is to right-click the Configuration Utility icon in System Tray
and select Turn Radio Off to turn the radio off. When the radio is off, select Turn Radio On to turn
the radio back on.
Figure 11: Radio On/Off in the System Tray
The system hot key Alt+F2 can also be used to turn the radio on/off.
When the radio is off, there is no radio activity, and the following tabs are disabled:
The Profile Manager tab displays the profiles available and allows you to create, modify, and delete
profiles.
Figure 12: Profile Manager Tab
Marvell Wireless Configuration Utility User Interface
Profile Manager Tab
Profile Manager—Profile List
The section on the left side of this tab lists all of the profiles available. Highlighting a profile selects it.
If the check box next to the profile is selected, that profile is used in auto-configuration mode when
the link is lost. If it is not selected, that profile is excluded in auto-configuration. The buttons
associated with this window are as follows.
Table 3:Profile List Section Description
ButtonDescription
Apply ProfileApplies the profile selected.
Apply the profile by double-clicking the desired profile.
Move Up/DownMoves the profile up and down in the list.
All profiles with the Network Type set to Infrastructure are displayed before the
profiles with the Network Type set to Ad-Hoc. In auto-configuration mode, the
selected profiles at the top of the list have higher priority than selected profiles at
the bottom of the list.
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 21
CB-85/MB-85/EC-85/MC-85
User Guide
Table 3:Profile List Section Description (Continued)
ButtonDescription
DeleteDeletes a profile.
CreateCreates a profile.
SaveSaves changes made to a selected profile.
Profile Manager—Profile Setting
The Profile Settings are used to set, modify, and display information about the profile selected in the
Profile List section. The information is divided into three tabs:
Network Info
Security
Protocol
3.2.1Profile Setting—Network Info Tab
The Profile Manager initially displays the Network Info tab.
Figure 13: Network Info Tab (Infrastructure Network)
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 23
Field Description
CB-85/MB-85/EC-85/MC-85
User Guide
Table 4:Network Info Tab Description (Continued)
FieldDescription
Region CodeSetsthe region code
Available optionsare Default, USA (FCC), Canada (IC), Europe (ETSI),Spain, France,Japan (MKK), Taiwan (DGT), and Australia/Korea
802.11n NetworkEnables/disables draft-802.11n functionality
If enabled, the Modulation and Coding Scheme (MCS) index and 802.11n
options can be configured.
Channel WidthSets the channel bandwidth
Available options are Auto, 20 MHz, and 40 MHz. The default is Auto.
Guard IntervalSets the Guard Interval
Available options are Auto, Standard, and Short. The default is Auto.
Extension ChannelSets the extension channel mode when bandwidth is 40 MHz
Available options are Auto, None, Lower, and Upper. The default is Auto.
Antenna SelectionSets the antenna selections
Available options are Auto, Antenna A, Antenna B, 2 by 2, and 2 by 3.
The default is Auto.
The fields Wireless Mode and Preferred Channel are used only when a new Ad-Hoc
network is initiated by the client card. These two attributes are ignored when the client
Note
card is connected to an existing Ad-Hoc network with the same desired SSID.
3.2.2Profile Setting—Security Tab
Clicking the Security tab displays the following security options:
Marvell Wireless Configuration Utility User Interface
Figure 15: Security Tab—Authentication Modes
Profile Manager Tab
The authentication modes available depend on the network type selected on the
Network Info tab.
Note
For Ad-Hoc networks, only Open System and Shared Key are available.
3.2.3Legacy Authentication Modes
The Marvell Wireless Configuration Utility currently supports the following legacy authentication
modes:
Open System—Open Authentication (no key or a pre-shared WEP key is required)
Shared Key—Shared Authentication (a pre-shared WEP key is required)
Auto Switch—Auto Select Authentication modes (no key or a pre-shared WEP key is required)
WPA-PSK—WPA Pre-Shared Key
WPA2-PSK—WPA2 Pre-Shared Key
If Open System or Auto Switch is selected as Authentication Mode, Security off and WEP are
available as Encryption Method. If Shared Key is selected as Authentication Mode, WEP is
pre-selected as Encryption Method. For details on how to configure the WEP key(s), see
Section 3.2.3.1.
If WPA-PSK or WPA2-PSK is selected as Authentication Mode, AES and TKIP are available as
Encryption Method. For details on how to define the pre-shared key, see Section 3.2.3.2.
The authentication modes available depend on the network type selected on the
Network Info tab.
Note
For Ad-Hoc networks, only authentication modes without encryption or with WEP key
are available.
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 27
CB-85/MB-85/EC-85/MC-85
User Guide
3.2.3.2WPA-PSK / WPA2-PSK
Figure 19: Security Tab—WPA2-PSK with TKIP
The definition of the pre-shared key is identical for both WPA-PSK/WPA2-PSK with TKIP/AES:
1.Enter the pre-shared key into the Passphrase and Confirm boxes.
The passphrase must contain between 8 and 63 ASCII characters.
2. Click Save to set the configuration.
3.2.4802.1X Authentication Modes
The Marvell Wireless Configuration Utility currently supports the following 802.1X authentication
modes:
802.1X—Open System with 802.1X Authentication (EAP/TLS, PEAP, EAP/TTLS, LEAP or
EAP-FAST)
WPA—WPA with 802.1X Authentication (EAP/TLS, PEAP, EAP/TTLS, LEAP or EAP-FAST)
WPA2—WPA2 with 802.1X Authentication (EAP/TLS, PEAP, EAP/TTLS, LEAP or EAP-FAST)
For all 802.1X authentication modes, CCX support can be enabled.
If 802.1X (Open System) is selected as Authentication Mode, WEP is pre-selected as Encryption
Method. If WPA or WPA2 is selected, TKIP and AES are available as Encryption Method. For details
on how to define the different 802.1X authentication protocols (EAP/TLS, PEAP, EAP/TTLS, LEAP,
and EAP-FAST), see the following subsections.
5. In the Certificates in Store list, click the personal certificate to be used for the client
authentication.
If the required certificate is not yet installed on your system or if you do not know which
Note
certificate to use, contact your network administrator.
6. Click Select to confirm your selection and to return to the EAP/TLS (Use Certificate) window.
7. If you want to specify particular server certificates to be accepted (instead of accepting any
certificate sent by the server), click the Server Authentication tab. For a detailed description of
this window, see Table 8 on page 35.
Otherwise, continue with step 14.
9. For Accept only trusted certificates or Accept certificates from trusted server/domain,
click Add to select the appropriate certificate.
The Select Certificate window is displayed. For a detailed description of this window, see
10. On the Select Certificate window, select the Certificate Store.
11. From the Certificates in Store list, click the certificate to be used for the server authentication.
If the required certificate is not yet installed on your system or if you do not know which
Note
certificate to use, contact your network administrator.
12. Click Select to confirm your selection and to return to the EAP/TLS (Use Certificate) window.
13. If you have selected Accept certificates from trusted server/domain, enter the appropriate
server name or domain name into the Trusted Domain or Server box.
Server Validation MethodCertificates to be accepted for server authentication:
• Accept any server certificate
• Accept only trusted certificates
• Accept certificates from trusted server/domain
Trusted CertificatesLists the trusted certificates installed on the client system
Required, when Accept only trusted certificates or Accept certificates from trusted server/domain is selected. The appropriate root certificate
of the server/domain must also be installed on the client system.
ViewShows the selected certificate
RemoveDeletes the selected certificate from the Trusted Certificates list
AddSelects the certificate from the certificates store
Trusted Domain or ServerDomain or server the certificate to be trusted is received from
Required, when Accept certificates from trusted server/domain is
selected
3. On the Client Authentication tab, enter your Login Name, Password, and Domain.
The domain information is optional.
4.From the Inner EAP Protocols list, select the EAP protocol to be used.
If required, change the order of preference.
5.If you have selected EAP-GTC, select the credentials to be used for login.
6. If you want to specify particular server certificates to be accepted (instead of accepting any
certificate sent by the server), click the Server Authentication tab. For a detailed description of
this window, see Table 11 on page 40.
Otherwise, continue with step 13.
8. For Accept only trusted certificates or Accept certificates from trusted server/domain,
click Add to select the appropriate certificate.
The Select Certificate window is displayed. For a detailed description of this window, see
9. On the Select Certificate window, select the Certificate Store.
10. From the Certificates in Store list, click the certificate to be used for the server authentication.
If the required certificate is not yet installed on your system or if you do not know which
Note
certificate to use, contact your network administrator.
11. Click Select to confirm your selection and to return to the Protected EAP (PEAP) window.
12. If you have selected Accept certificates from trusted server/domain, enter the server name
or the domain name into the Trusted Domain or Server box.
Server Validation MethodCertificates to be accepted for server authentication:
• Accept any server certificate
• Accept only trusted certificates
• Accept certificates from trusted server/domain
Trusted CertificatesLists the trusted certificates installed on the client system
Required, when Accept only trusted certificates or Accept certificates from trusted server/domain is selected. The appropriate root certificate
of the server/domain must also be installed on the client system.
ViewShows the selected certificate
RemoveDeletes the selected certificate from the Trusted Certificates list
3. On the Client Authentication tab, enter your Anonymous Name, Login Name, Password,
and Domain.
The domain information is optional.
4. If you want to specify particular server certificates to be accepted (instead of accepting any
certificate sent by the server), click the Server Authentication tab. For a detailed description of
this window, see Table 14 on page 45.
Otherwise, continue with step 11.
6. For Accept only trusted certificates or Accept certificates from trusted server/domain,
click Add to select the appropriate certificate.
The Select Certificate window is displayed. For a detailed description of this window, see
7. On the Select Certificate window, select the Certificate Store.
8.From the Certificates in Store list, click the certificate to be used for the server authentication.
If the required certificate is not yet installed on your system or if you do not know which
Note
certificate to use, contact your network administrator.
9. Click Select to confirm your selection and to return to the EAP/Tunneled TLS (TTLS) window.
10. If you have selected Accept certificates from trusted server/domain, enter the server name
or the domain name into the Trusted Domain or Server box.
Server Validation MethodCertificates to be accepted for server authentication:
• Accept any server certificate
• Accept only trusted certificates
• Accept certificates from trusted server/domain
Trusted CertificatesLists the trusted certificates installed on the client system
Required, when Accept only trusted certificates or Accept certificates from trusted server/domain is selected. The appropriate root certificate
of the server/domain must also be installed on the client system.
ViewShows the selected certificate
RemoveDeletes the selected certificate from the Trusted Certificates list
AddSelects the certificate from the certificates store
Trusted Domain or ServerDomain or server the certificate to be trusted is received from
Required, when Accept certificates from trusted server/domain is
selected
Marvell Wireless Configuration Utility User Interface
Figure 37: LEAP Configuration Window
Profile Manager Tab
3.Under Logon Settings, select the user credentials (and, if required, Login Name, Password,
and Domain) to be used for the client authentication.
Use Windows user name and password is only available if Enable single sign-on is
selected.
To enable single sign-on, administrator rights are required.
Using single sign-on authentication for the first time requires a restart of your
Note
system after having saved the LEAP configuration.
4.If required, specify further settings under Options.
5. Click OK to return to the Security tab of the Profile Settings.
6.If CCX compatibility is required, select the Enable Cisco Compatible Extensions (CCX) check
box.
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 47
CB-85/MB-85/EC-85/MC-85
User Guide
Table 16: LEAP Configuration Window Description
Area/FieldDescription
Logon SettingsCredentials to be used for login to the authentication server:
• Use stored user credentials below
• Login Name—Login name to the authentication server
• Password—Password for login to the authentication server
• Domain—Domain name for login to the authentication server (optional)
• Prompt for User Credentials
Credentials are to be entered during authentication (are not stored in the
profile).
• Use Windows user name and password (available only when Enable single sign-on is selected)
Windows user name and password are used for login to the authentication
server. Additionally, Include Windows domain in Windows logon information
can be selected.
Options
• Enable single sign-on
Windows user credentials are used for login to the authentication server (see
Logon Settings)
• Allow fast roaming (CCKM)
Enables Cisco Centralized Key Management (CCKM) which allows for fast
roaming without involving the authentication server
• Authentication timeout value (seconds)
Time to be waited before assuming the authentication failed. Default value is
90.
• Restrict time finding domain controller to (seconds)
Maximum time allowed to find the domain controller, included in the overall
authentication time. Default value is 60.
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 49
CB-85/MB-85/EC-85/MC-85
User Guide
Figure 39: EAP-FAST Configuration Window
3.Under Logon Settings, select the user credentials (and, if required, Login Name, Password,
and Domain) to be used for the client authentication.
Use Windows user name and password is only available if Enable single-signon is
selected.
To enable single sign-on, administrator rights are required.
Using single sign-on authentication for the first time requires a restart of your
Note
system after having saved the EAP-FAST configuration.
4.If automatic Protected Access Credentials (PAC) provisioning is required, select the Allow Automatic PAC Provisioning check box, and enter the appropriate Authority ID.
5.If required, specific further settings under Options.
6. Click OK to return to the Security tab of the Profile Settings.
Logon SettingsCredentials to be used for login to the authentication server:
• Use stored user credentials below
• Login Name—Login name to the authentication server
• Password—Password for login to the authentication
server
• Domain—Domain name for login to the authentication
server (optional)
• Prompt for User Credentials
Credentials are to be entered during authentication (are not
stored in the profile).
• Use Windows user name and password (available only
when Enable single sign-on is selected)
Windows user name and password are used for login to the
authentication server. Additionally, Include Windows domain in Windows logon information can be selected.
Protected Access Credentials
(PAC)
ImportSelects authority ID of the authentication server
Options
Allows automatic PAC provisioning
• Enable single sign-on
Windows user credentials are used for login to the
authentication server (see Logon Settings)
• Allow fast roaming (CCKM)
Enables Cisco Centralized Key Management (CCKM) which
allows for fast roaming without involving the authentication
server
• Authentication timeout value (seconds)
Time to be waited before assuming the authentication failed.
Default value is 90.
• Restrict time finding domain controller to (seconds)
Maximum time allowed to find the domain controller,
included in the overall authentication time. Default value
is 60.
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 51
CB-85/MB-85/EC-85/MC-85
User Guide
3.2.5Profile Setting—Protocol Tab
The Protocol tab allows you to set or change the protocol information.
Figure 40: Protocol Tab
Do not change settings
If this check box is selected, the protocol setting is not changed when the profile is applied.
Use below settings
If the Do not change setting check box is not selected, the protocol settings include the following
parameters.
Table 18: Protocol Tab Description
FieldDescription
Power Save ModeSets the power mode. Available options are Continuous Access or Max
Power Save. The default setting is Continuous Access.
Preamble (802.11b) Sets the Radio Preamble to Auto, Short or Long.
Transmit RateThe range of the data rate depends on the type of AP that the client card
is connected to. The default setting is Auto Select.
MCS index will be allowed to select when the 802.11n Network check
box in the Network Info tab is selected.
Fragment ThresholdSets the fragmentation threshold (the size that packets are fragmented
into for transmission). The default setting is 2346.
RTS/CTS ThresholdSets the packet size at which the AP issues a Request-To-Send (RTS) or
Clear-To-Send (CTS) frame before sending the packet. The default
setting is 2347.
ResetResets the protocol settings to their default values
Marvell Wireless Configuration Utility User Interface
3.3.3Site Survey—Filter Button
Clicking the Filter button displays the Advanced Filter window.
Figure 43: Site Survey—Advanced Filter Window
Site Survey Tab
3.3.3.1Network SSID
Any SSID—no specific SSID is used when scanning for available networks in the area.
Find network with this SSID—the utility searches for the specified SSID.
3.3.3.2Network BSSID
Any BSSID—no specific BSSID is used when scanning for available networks in the area.
Find network with this BSSID—the utility searches for the specified BSSID.
3.3.3.3Select Channel
Scan all channels—all channels are scanned when searching for available networks in the
area.
Scan channel Only—only the specified channel is scanned when searching for available
networks in the area.
Scan Channel to Channel—a range of channels are scanned when searching for available
networks in the area.
3.3.4Site Survey—Refresh Button
To request a survey of the wireless networks in the area, click Refresh.
3.3.5Site Survey—Associate Button
To establish a connection, select an available network, and then click Associate. Alternatively, the
connection can be established by double-clicking the selected network.
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 55
CB-85/MB-85/EC-85/MC-85
User Guide
3.4Statistics Tab
Clicking the Statistics tab displays the statistics of the current connect session.
Figure 44: Statistics Tab
3.4.1Signal Strength
The color-coded Signal Strength bar displays the signal strength of the last packet received by the
client card. Signal strength is reported as a percentage. A signal in the red indicates a bad
connection. A signal in the green indicates a good connection.
The Transmit section displays the information on the packets sent.
Figure 45: Transmit Section
Marvell Wireless Configuration Utility User Interface
Statistics Tab
Table 20: Transmit Section Description
FieldDescription
Total PacketReports the total number of packets transmitted
Unicast PacketReports the number of packets transmitted by the client card that were
destined for a single network node
Multicast PacketReports the number of packets transmitted by the client card that were
destined for more than one network node
Single RetriesReports the number of packets that require one retry before the client card
received an acknowledgement.
NOTE: After the client card sends a packet, it waits for an acknowledge
from the receiving radio to confirm that the packet was
successfully received. If the acknowledge is not received within a
specified period of time, the client card retransmits the packet.
Multiple RetriesReports the number of packets that require more than one retry before the
client card received an acknowledgement
Failed CountReports the number of packets that were not successfully transmitted
because the client card did not receive an acknowledge within the
specified period of time
RTS SuccessReports the number of RTS attempts that were successful
RTS FailureReports the number of RTS attempts that were not successful
ACK ErrorReports the number of unicast transmit attempts for which no
Auto connect if link loss or no
connection (use checked profiles in
<Profile Manager>)
Enable WMM Select this check box to enable/disable the Wireless Multimedia
BoostModeSelect this check box for performance enhancement.
Enable WPSSelect this check box to enable Wireless Provisioning Services
Worldwide Regulatory DomainSelect this check box to set the regulatory domain
DFS ModeSelect this check box to enable Dynamic Frequency Selection
Clear this check box to disable the auto-configuration feature.
Whenever there is a link loss, auto-configuration tries to
establish a connection to the checked profiles in the Profile Manager window.
Select the Autostart Marvell Wireless Client Card Configuration Utility at System Startup check
box to automatically start the Marvell Wireless Configuration Utility at system startup
(recommended).
3.7.4Admin Tab—Stop Windows Wireless Zero Configuration
Service
When using the Marvell Wireless Configuration Utility, Marvell recommends turning off the Windows
Wireless Zero Configuration Service, which is enabled by default. Both utilities should not be used at
the same time. To turn off the Windows Wireless Zero Configuration Service, select the Stop
Windows Wireless Zero Configuration Service check box.
3.8About Tab
The About tab displays information about the Marvell Wireless Client Card Configuration Utility.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1)
This device may not cause harmful interference, and (2) this device must accept any interference received,
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with minimum distance
20cm between the radiator & your body.
1) The antenna must be installed such that 20 cm is maintained between the antenna and users, and
2) The transmitter module may not be co-located with any other transmitter or antenna,
3) For all products market in US, OEM has to limit the operation channels in CH1 to CH11 for 2.4G band by supplied
firmware programming tool. OEM shall not supply any tool or info to the end-user regarding to Regulatory Domain change.
As long as 3 conditions above are met, further transmitter test will not be required. However, the OEM integrator is still
responsible for testing their end-product for any additional compliance requirements required with this module installed
IMPORTANT NOTE: In the event that these conditions can not be met (for example certain laptop configurations or colocation with another transmitter), then the FCC authorization is no longer considered valid and the FCC ID can not be used
on the final product. In these circumstances, the OEM integrator will be responsible for re-evaluating the end product (
including the transmitter) and obtaining a separate FCC authorization.
IMPORTANT NOTE: In the event that these conditions can not be met (for example certain laptop configurations or colocation with another transmitter), then the FCC authorization is no longer considered valid and the FCC ID can not be used
on the final product. In these circumstances, the OEM integrator will be responsible for re-evaluating the end product (
including the transmitter) and obtaining a separate FCC authorization.
End Product Labeling
This transmitter module is authorized only for use in device where the antenna may be installed such that 20 cm may be
maintained between the antenna and users. The final end product must be labeled in a visible area with the following:
“Contains FCC ID: MCL74751901”.
Manual Information To the End User
The OEM integrator has to be aware not to provide information to the end user regarding how to install or remove this RF
module in the user’s manual of the end product which integrates this module.
The end user manual shall include all required regulatory information/warning as show in this manual.
Federal Communications Commission (FCC) Compliance
ACompliance Statements
A.1Federal Communications Commission (FCC)
Compliance
A.1.1Transmitter Module Approval Conditions
Antennas must be installed to provide20cm separation distance from the transmitting antenna
to thebody of the user during normal operating condition. Thisdevice must not be co-locatedoroperating inconjunction with any other antenna or transmitter.
Only those antennas filed under FCC ID:UAY-MMC85M canbeused with this device.When the module isinstalledinthefinal system wherethe antenna location is less than 20cm
separation distanceto the body of user, additional equipment authorization must be applied.
FCC ID label on the final system must be labeled with “Contains FCC ID:UAY-MMC85M” or
“Contains transmitter module FCC ID:UAY-MMC85M”.
In the user guide, final system integrator must be ensure that there is no instruction provided in
the user guide toinstall or remove the transmitter module.
The transmitter module must be installed and used in strict accordance with the manufacturer's
instructions as described in the user documentation that comes with the product. This device complies with the following radio frequency and safety standards.
A.1.2USA-Federal Communications Commission (FCC)
This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to Part 15 of FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a residential installation. This equipment generates, uses, and can
radiate radio frequency energy. If not installed and used in accordance with the instructions, it may
cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation.
If this equipment does cause harmful interference to radio or television reception, which can be
determined by tuning the equipment off and on, the user is encouraged to try and correct the
interference by one or more of the following measures:
Reorient or relocate the receiving antenna.
Increase the distance between the equipment and the receiver.
Connect the equipment to outlet on a circuit different from that to which the receiver is
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 65
Consult the dealer or an experienced radio/TV technician for help.
Modifications
Any changes or modifications not expressly approved by the party responsible for compliance could
void the user's authority to operate the equipment.
Exposure to Radio Frequency Radiation
To comply with FCC RF exposure compliance requirements, a separation distance of at
Caution
least 20cm must be maintained between the antenna of this device and all persons. This device must not be co-located or operating in conjunction with any other antenna or transmitter.
A.2 Industry Canada Notice
This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful
interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
Ce dispositif est conforme à la norme CNR-210 d'Industrie Canada applicable aux appareils radio exempts de licence. Son fonctionnement est sujet aux
deux conditions suivantes: (1) le dispositif ne doit pas produire de brouillage préjudiciable, et (2) ce dispositif doit accepter tout brouillage reçu, y compris un
brouillage susceptible de provoquer un fonctionnement indésirable.
IMPORTANT NOTE: (For mobile device use)
Radiation Exposure Statement:
This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with
minimum distance 20cm between the radiator & your body.
NOTE IMPORTANTE: (Pour l'utilisation de dispositifs mobiles)
Déclaration d'exposition aux radiations:
Cet équipement est conforme aux limites d'exposition aux rayonnements IC établies pour un environnement non contrôlé. Cet équipement doit être installé
et utilisé avec un minimum de 20 cm de distance entre la source de rayonnement et votre corps.
(The user manual of transmitter devices equipped with detachable antennas shall contain the following information in a conspicuous location: )
This device has been designed to operate with an antenna having a maximum gain of 4.17 dB. Antenna having a higher gain is strictly prohibited per
regulations of Industry Canada. The required antenna impedance is 50 ohms.
Under Industry Canada regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the
transmitter by Industry Canada. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent
isotropically radiated power (e.i.r.p.) is not more than that necessary for successful communication.
(Le manuel d'utilisation de dispositifs émetteurs équipés d'antennes amovibles doit contenir les informations suivantes dans un endroit bien en vue:)
Ce dispositif a été conçu pour fonctionner avec une antenne ayant un gain maximal de dB 4.17. Une antenne à gain plus élevé est strictement interdite par
les règlements d'Industrie Canada. L'impédance d'antenne requise est de 50 ohms.
Conformément à la réglementation d'Industrie Canada, le présent émetteur radio peutfonctionner avec une antenne d'un type et d'un gain maximal (ou
inférieur) approuvé pourl'émetteur par Industrie Canada. Dans le but de réduire les risques de brouillage radioélectriqueà l'intention des autres utilisateurs, il
faut choisir le type d'antenne et son gain de sorte que lapuissance isotrope rayonnée équivalente (p.i.r.e.) ne dépasse pas l'intensité nécessaire àl'
établissement d'une communication satisfaisante.
This device is intended only for OEM integrators under the following conditions: (For module device use)
1) The antenna must be installed such that 20 cm is maintained between the antenna and users, and
2) The transmitter module may not be co-located with any other transmitter or antenna,
3) For all products market in Canada, OEM has to limit the operation channels in CH1 to CH11 for 2.4G band by supplied firmware programming tool. OEM
shall not supply any tool or info to the end-user regarding to Regulatory Domain change.
As long as 3 conditions above are met, further transmitter test will not be required. However, the OEM integrator is still responsible for testing their endproduct for any additional compliance requirements required with this module installed.
Cet appareil est conçu uniquement pour les intégrateurs OEM dans les conditions suivantes: (Pour utilisation de dispositif module)
1) L'antenne doit être installée de telle sorte qu'une distance de 20 cm est respectée entre l'antenne et les utilisateurs, et
2) Le module émetteur peut ne pas être coïmplanté avec un autre émetteur ou antenne,
3) Pour tous les produits vendus au Canada, OEM doit limiter les fréquences de fonctionnement CH1 à CH11 pour bandes de fréquences 2.4G grâce aux
outils de microprogrammation fournis. OEM ne doit pas fournir d'outil ou d'informations à l'utilisateur final en ce qui concerne le changement de
réglementation de domaine.
Tant que les 3 conditions ci-dessus sont remplies, des essais supplémentaires sur l'émetteur ne seront pas nécessaires. Toutefois, l'intégrateur OEM est
toujours responsable des essais sur son produit final pour toutes exigences de conformité supplémentaires requis pour ce module installé.
IMPORTANT NOTE:
In the event that these conditions can not be met (for example certain laptop configurations or co-location with another transmitter), then the Canada
authorization is no longer considered valid and the IC ID can not be used on the final product. In these circumstances, the OEM integrator will be responsible
for re-evaluating the end product (including the transmitter) and obtaining a separate Canada authorization.
NOTE IMPORTANTE:
Dans le cas où ces conditions ne peuvent être satisfaites (par exemple pour certaines configurations d'ordinateur portable ou de certaines co-localisation
avec un autre émetteur), l'autorisation du Canada n'est plus considéré comme valide et l'ID IC ne peut pas être utilisé sur le produit final. Dans ces
circonstances, l'intégrateur OEM sera chargé de réévaluer le produit final (y compris l'émetteur) et l'obtention d'une autorisation distincte au Canada.
End Product Labeling
This transmitter module is authorized only for use in device where the antenna may be installed such that 20 cm may be maintained between the antenna
and users. The final end product must be labeled in a visible area with the following: “Contains IC: 2878D-74751901”.
Plaque signalétique du produit final
Ce module émetteur est autorisé uniquement pour une utilisation dans un dispositif où l'antenne peut être installée de telle sorte qu'une distance de 20cm
peut être maintenue entre l'antenne et les utilisateurs. Le produit final doit être étiqueté dans un endroit visible avec l'inscription suivante: "Contient des IC:
2878D-74751901".
Manual Information To the End User
The OEM integrator has to be aware not to provide information to the end user regarding how to install or remove this RF module in the user’s manual of the
end product which integrates this module.
The end user manual shall include all required regulatory information/warning as show in this manual.
French translation:
Manuel d'information à l'utilisateur final
L'intégrateur OEM doit être conscient de ne pas fournir des informations à l'utilisateur final quant à la façon d'installer ou de supprimer ce module RF dans le
manuel de l'utilisateur du produit final qui intègre ce module.
Le manuel de l'utilisateur final doit inclure toutes les informations réglementaires requises et avertissements comme indiqué dans ce manuel.
CB-85/MB-85/EC-85/MC-85 User Guide
A.2Industry Canada Notice
This device complies with CanadianRSS-210.
“This Class B digital apparatus complies with Canadian ICES-003”Cet appareil numériquedela classe B est conforme à la norme NMB-003du Canada
Operationis subject to the following two conditions: (1) this devicemay not causeinterference, and (2) this device must accept any interference, including interference that may cause undesiredoperation of thisdevice.”
L'utilisation de ce dispositif est autoriséeseulement aux conditionssuivantes : (1) il ne doit pas produire de brouillage et (2) l'utilisateur du dispositif doit étreprêt à accepter tout brouillageradioélectrique reçu, mêmesi ce brouillage est susceptiblede compromettre lefonctionnement dudispositif.
The term “IC” beforetheequipment certification number only signifies that the Industry Canada technical specificationswere met.
To reducepotential radio interferenceto other users, theantennatype and its gain should be so chosen thatthe equivalent isotropically radiated power (EIRP) is not more than thatrequired for successful communication.
To prevent radio interference to the licensed service, this device is intended to be operated indoors andaway from windows toprovidemaximum shielding. Equipment (or its transmit antenna) that is installed outdoors is subject to licensing.
Europe—EU Declaration of Conformity and Restrictions
A.3Europe—EU Declaration of Conformity and
Restrictions
Hereby, Marvell Semiconductor, Inc., declares that this telecommunication equipment complies with
all the provisions of the EC directives listed below and meets the relevant parts of the related
technical specifications:
EN 300 328 v1.6.1 (2004-11) – Electromagnetic compatibility and Radio spectrum Matters
(ERM); Wideband Transmission Systems; Data transmission equipment operating in the
2,4GHz ISM band and using spread spectrum modulation techniques; Harmonized EN covering
essential requirements under article 3.2 of the R&TTE directive.
EN 301 893 v1.2.3 (2003-08) – Broadband Radio Access Networks (BRAN); 5 GHz high
performance RLAN; Harmonized EN covering essential requirements of article 3.2 of the
R&TTE directive.
Compliance with Electromagnetic Compatibility (EMC) Directive 89/336/EEC
EN 301 489-17 v1.2.1 (2002-08) – Electromagnetic compatibility and Radio Spectrum Matters
(ERM); Electromagnetic Compatibility (EMC) standard for radio equipment and services;
Part 17: Specific conditions for wideband data and high performance RLAN (HIPERLAN)
equipment.
Compliance with Low Voltage Directive 73/23/EEC
EN 60950:2001 – Safety of Information Technology Equipment, including electrical business
equipment.
EN 50371:2002 – Generic standard to demonstrate the compliance of low power electronic and
electric apparatus with the basic restrictions related to human exposure to electromagnetic
fields.
EN 50385:2002 – Product standard to demonstrate the compliances of radio base stations and
fixed terminal stations for wireless telecommunication systems with the basic restrictions or the
reference levels related to human exposure to radio frequency electromagnetic fields.
This equipment is marked with the 0984 symbol and can be used throughout the
European community.
Marking by the symbol indicates that usage restrictions apply.
2.4 GHz for Metropolitan France
In all Metropolitan départements, wireless LAN frequencies can be used under the following
conditions, either for public or private use:
Indoor use: maximum power (EIRP) of 100 mW for the entire 2400 - 2483.5 MHz frequency
band
Outdoor use: maximum power (EIRP) of 100 mW for the 2400 - 2454 MHz band and with
maximum power (EIRP) of 10 mW for the 2454 - 2483 MHz band
802.11a Restrictions
This product is for indoor use only when using channels 36, 40, 44, 48, 52, 56, 60, or 64
DFS and TPC must remain enabled to ensure product compliance with EC regulations.
To ensure compliance with local regulations, be sure to select the country in which the access
August 14, 2007, 2.00Document Classification: Proprietary InformationPage 67
CB-85/MB-85/EC-85/MC-85
User Guide
This product can be used as shown in Table 24.
Table 24: 802.11a Product Usage
5 GHz wireless LAN
IEEE 802.11a
Exposure to Radio Frequency Radiation
To comply with RF exposure compliance requirements, a separation distance of at least
Caution
20 cm must be maintained between the antenna of this device and all persons. This
device must not be co-located or operating in conjunction with any other antenna or
transmitter.
A.4Taiwan DGT
2.4 GHz Band Products
Indoor Use
Only
A, AND, B, CH, D, CY, CZ, DK, ES,
EST, F, FIN, FL, FR, GB, GR, H, I, IRL,
IS, L, LT, M, MC, BN, NL, P, PL, RSM,
S, SK, SLO, V