Summit SDC-CF10AG User Manual

User's Guide for 802.11g and 802.11a/g Radios
from Summit Data Communications, Inc.

Windows CE Software Version 2.01

Table of Contents

1.0 Introduction

1.1 Product Overview

1.2 Security Capabilities

2.0 Getting Started

2.1 Install or Upgrade Summit Software

2.2 Install the Radio

2.3 Configure the Manner of Obtaining an IP Address

2.4 Connect to Your WLAN

2.2.1 Preferred Method: Use SCU

2.4.2 Alternative: Use Windows Zero Config

2.5 Interact with the Radio

3.0 Using the Summit Client Utility

3.1 Initializing SCU

3.2 Main Window

3.3 Profile Window

3.3.1 Using Scan To Create a Profile

3.3.2 EAP Credentials

3.3.3 Encryption

3.3.4 ThirdPartyConfig

3.3.5 EAP-FAST

3.4 Status Window

3.5 Diags Window

3.6 Global Window

4.0 Using the Summit System Tray Icon

5.0 Regulatory Domains and Channels

Appendix: FCC Information

1.0 Introduction

Thank you for choosing one of the following wireless LAN (WLAN) radio modules or cards from Summit Data
Communications, Inc.:

802.11g radios, which support 802.11b and 802.11g:
Compact flash: Module with antenna connectors (SDC-CF10G) or card with integrated antennas
(SDC-CF20G)
PCMCIA: Module with antenna connectors (SDC-PC10G) or card with integrated antennas
(SDC-PC20G)
Miniature compact flash: Module with antenna connectors (SDC-MCF10G)

802.11a/g radios, which support 802.11a, 802.11b, and 802.11g
Compact flash: Module with antenna connectors (SDC-CF10AG)
PCMCIA: Module with antenna connectors (SDC-PC10AG)

Your Summit WLAN radio, or WLAN client adapter, enables a computing device to communicate to a computing
network using all of the IEEE 802.11 protocols listed above for that radio.

This manual is a user’s guide for a Summit radio that is installed on a computing device that is running one of the
following operating systems:

Windows CE 4.2, 5.0, or 6.0
Windows Mobile 2003, 5.0, 6, or 6.1

The hardware components and software for all Summit radios are the same. A 20G version is a 10G version with
integrated antennas. (In fact, if you look at the back of a CF20G, you'll see a label for the CF10G.) A PCMCIA
version is a CF version in a specially designed CF-to-PCMCIA carrier. The miniature CF version is essentially the
CF version with a different layout and a different (Molex) connector.

The software that Summit provides for its radios includes:

A device driver for the operating system running on the computing device that uses the radio
An integrated IEEE 802.1X supplicant that supports the highest level of standards-based WLAN security
with a broad range of options
The Summit Client Utility (SCU), a configuration, monitoring, and management application designed for
Summit radios
A service that displays in the Windows System Tray an icon that provides a visual status for the Summit
radio and enables the user to launch SCU by tapping the icon

Your Summit radio is Wi-Fi CERTIFIED® and, with V2.0 of Summit software, certified for Version 4 of Cisco
Compatible Extensions (CCX):

Wi-Fi: The Wi-Fi Alliance certifies that Summit radios support the specified IEEE 802.11 protocols with
support for Wi-Fi Protected Access (WPA) and WPA2, both Personal and Enterprise. The Extensible
Authentication Protocol (EAP) type tested by the Wi-Fi Alliance was PEAP-MSCHAPv2. For details, visit
the Wi-Fi Alliance Web site at http://www.wi-fi.com, click on the “Wi-Fi CERTIFIED® Products” link,
and search for Summit Data Communications.
CCX: Summit radios are certified to Version 4 of the CCX specification for application-specific devices
(ASDs). For an overview of CCX, go to

http://www.cisco.com/web/partners/pr46/pr147/partners_pgm_concept_home.html. For details on the

features in CCX V4 for ASDs, go to

http://www.cisco.com/warp/public/765/ccx/versions_and_features.shtml.

1.1 Product Overview

For an overview of Summit WLAN radios, go to http://www.summitdatacom.com/product.htm.

1.2 Security Capabilities

Summit radios typically are used in business-critical mobile devices that transmit sensitive information, such as
inventory data and patient information, over the air that separates the mobile devices from the network. To protect
transmitted data as well as the mobile devices and network infrastructure that transmit and receive the data, an
organization’s IT department often imposes on mobile devices the same strict security standards imposed on other
client devices. Summit’s integrated approach to security simplifies the task of enforcing a consistent security
policy on all devices.

A foundational element of the IEEE 802.11i WLAN security standard is IEEE 802.1X, and a critical application
on a mobile device is an 802.1X supplicant. Such a supplicant provides an interface between the radio and the
operating system and supports the authentication and encryption elements required for 802.11i, also known as

WPA2, as well as predecessors such as WPA and WEP. Summit software includes an integrated supplicant that
supports a broad range of security capabilities, including:

802.1X authentication using pre-shared keys or an EAP type, required for WPA2 and WPA

Data encryption and decryption using WPA2 AES, WPA TKIP, Cisco TKIP, or WEP

The following EAP types are supported by the Summit software integrated supplicant and can be configured in
SCU:

PEAP: Provides secure user authentication by using a TLS tunnel to encrypt EAP traffic. Two different
inner methods are used with PEAP:

EAP-MSCHAPV2, resulting in PEAP-MSCHAP: This is appropriate for use against Windows Active
Directory and domains
EAP-GTC, resulting in PEAP-GTC: This can be used for authentication with static (login) passwords
against a variety of databases. It also can be used for authentication with one-time passwords (OTPs)
against OTP databases such as SecureID. Because Summit software does not support session resume,
the use of PEAP-GTC with OTPs is not recommended. When a client device is power-cycled, or
when the radio roams from one access point (AP) to another, the user must re-enter the OTP.

EAP-TLS: Provides secure user authentication by using a TLS tunnel to encrypt EAP traffic. Provides very
strong security, but relies on client certificates for user authentication credentials.
LEAP: Is an authentication method for use with Cisco WLAN APs. LEAP does not require the use of server
or client certificates. LEAP supports Windows Active Directory and domains but requires the use of strong
passwords to avoid a vulnerability to offline dictionary attacks.
EAP-FAST: Is a successor to LEAP and does not require strong passwords to protect against offline
dictionary attacks. Like LEAP, EAP-FAST does not require the use of server or client certificates and
supports Windows Active Directory and domains. EAP-FAST requires the provisioning of a protected
access credential (PAC). SCU supports PACs that are provisioned manually and stored on the client device;
SCU also supports dynamic PAC provisioning.

PEAP and EAP-TLS require the use of Windows facilities for the configuration of digital certificates.

With each of the EAP types supported by SCU, if authentication credentials are not stored in the active
configuration profile, then the user is prompted to enter those credentials the first time the radio tries to associate
to an AP that supports 802.1X (EAP).

2.0 Getting Started

Before you can use a Summit radio, you or your device manufacturer must install Summit software and the radio
in your computing device. If you are doing the software and hardware installation, then you will need the
following:

A mobile computing device:

With a compact flash (CF) Type I or Type II slot or a PCMCIA (PC Card) Type II slot
That runs an operating system supported by Summit software (see Section 1.0)

Summit software
A Summit radio module or radio card
For a radio module, antennas, each with a cable that is fitted with a Hirose U.FL connector that can be
attached to an antenna connector on the radio module:

10G: One or two antennas for 2.4 GHz (802.11b and 802.11g)
10AG: One or two antennas for 2.4 GHz (802.11b and 802.11g) and one or two antennas for 5 GHz
(802.11a)

It is recommended that you install the software before you install the hardware. If you insert the card in your
device before you install the software, then the "Found New Hardware Wizard" screen will appear, and you must

select "Cancel" to cancel the Hardware Wizard.

2.1 Install or Upgrade Summit Software

Summit software for Windows CE or Windows Mobile is in a .cab file, which is the software equivalent of a "file
cabinet". A Summit .cab file contains all software components, including the device driver and the Summit Client
Utility (SCU). To install or upgrade Summit software, perform these tasks:

Download the appropriate .cab file for the operating system and processor of your device. You can obtain
your device’s operating system and processor from the system information under Windows Control Panel
(Tap Start, then Settings, and then System or Control Panel)

Pocket PC or Mobile: Select a .cab file with a name that begins with "mobile".
CE .NET: Do a search on your device’s processor to determine if it is an ARM v4i processor or an
ARM v4 processor. If it is an ARM v4i processor, select a .cab file with a name that begins with
"sdc_armv4i". If it is an ARM v4 processor, select a .cab file with a name that begins with
"sdc_armv4".

Copy the file to your device using a supported file transfer mechanism. Common methods of moving the
file include:

Place the file on a supported Compact Flash or SD memory card and use that card for copying the file
to the device.
Use a program such as FTP or Microsoft ActiveSync.

On the device, use the resident File Explorer program to locate the .cab file.
Run the .cab file by single-clicking the file or by right-clicking and selecting "run".
If asked to replace any existing files on the device, answer "Yes to all".

Profiles are sets of radio and security settings that are created on the SCU Profile window. Every profile has a
unique name. Global settings include radio and security settings that apply to all profiles and settings that apply to
SCU itself. Profiles and global settings are stored in the registry.

When you install Summit software, no profile settings or global settings are loaded in the registry. Profile settings
and global settings are placed in the registry only when you use SCU, use the Summit software developer's kit
(SDK), or edit the registry directly. If nothing is specified for a profile setting or a global setting, then Summit
software will use a default value.

When you install or upgrade Summit software over an existing installation, profile settings and global settings in
the registry are not overwritten or removed but are left in place. The first time the driver or SCU is loaded after an
upgrade, all existing profiles and global settings are validated, and invalid values are reset.

2.2 Install the Radio

Once you have installed the Summit software, you must install the Summit radio in a CF or PCMCIA slot.
Instructions on installing a Summit radio module in an internal slot (within a device) are available only to device
manufacturers.

To install a 20G Series radio card, you simply insert the card in an external card slot. To install a 10G Series or
10AG Series radio module in an external slot, you must complete two types of connections:

Module to device: When you slide the radio module into a CF or PCMCIA external slot, a connector on the
end of the module mates with a connector on the device.
Antenna(s) to module: To connect one or two antennas to the radio module, you use an antenna cable that
mates with the antenna on one end and with the radio module’s U.FL connector on the other end.

The standard approach is to insert the module in the external slot first and then connect the antenna(s). If the
antenna connectors on the radio module are not visible when the module is inserted, however, then you will need

to connect the antenna(s) before inserting the module in the external slot.

To connect the antennas, take each antenna and its cable, which is fitted with a Hirose U.FL connector, and attach
the antenna cable to the radio module by mating the U.FL connector on the antenna cable with a U.FL connector
on the radio module. Follow the instructions below for your module:

10G module:
There are two
antenna
connectors. If
you have a
single antenna,
then connect it
to the main
antenna
connector,
which is
located to the
right of the
auxiliary
connector, and
set the Rx
Diversity and

The SDC-CF10G module has two connectors for 2.4

GHz antennas.

Tx Diversity
global settings
to Main Only
(see Section

3.6). If you
have two
antennas for
diversity, then
connect the
primary
antenna to the
main antenna
connector and
the secondary
antenna to the
auxiliary
antenna
connector,
which is
located to the
left of the main
connector.

10AG module:
There are four
antenna
connectors,
two for the 2.4
GHz (802.11b
and 802.11g)
band and two
for the 5 GHz
(802.11a)
band, with the

2.4 GHz
connectors
located to the
right of the 5
GHz
connectors. If
you have a
single antenna
for each band,
then connect it
to the main
antenna
connector for
each band,
which is
located to the
right of the
auxiliary
connector, and
set the Rx
Diversity and
Tx Diversity
global settings
to Main Only
(see Section

3.6). If you
have two
antennas for
each band for
diversity, then
in each band
connect the
primary
antenna to the
main antenna
connector and
the secondary
antenna to the
auxiliary
antenna
connector.

The SDC-CF10AG module has two connectors for

2.4 GHz antennas and two connectors for 5 GHz
antennas.

2.3 Configure the Manner of Obtaining an IP Address

Here are the steps required to use facilities on Windows CE or Windows Mobile to configure the manner of
obtaining an IP address:

Select Programs, then Settings, then the Connections tab at the bottom of the Settings screen
Select Connections and then Advanced
On the Advanced Connections screen, select the Network Card button and then select the Summit WLAN
Adapter from the list of available network devices
On the screen that appears, choose that a server will assign an IP address (using DHCP) or enter a specific
IP address
If you select the Name Servers tab, you can statically configure DNS servers, but if you use DHCP for IP
address assignment then DNS usually is supplied by the same server that hands out IP addresses

2.4 Connect to Your WLAN

Two methods exist for configuring the radio for operation on a wireless network. The first and preferred method
is to use SCU, which is described in detail in the next section of this guide. The other method is to use WZC,
which is the Microsoft program for configuring any WLAN card.

2.4.1 Preferred Method: Use SCU

To use SCU to connect to your wireless network, first initialize SCU (see Section 3.1) and go to the Profile
window by tapping the Profile tab. The Default configuration profile, if not modified, does not specify an SSID,
an EAP type, or a method of data encryption. As a result, if the Default profile is the active profile, then the radio
will associate only to an AP that broadcasts its SSID and requires no EAP type and no encryption. If no profile
has been created for the WLAN to which you want to connect, then use the following steps to create and select a
profile for your WLAN:

Go to the Main window by tapping the Main tab.
Tap the Admin Login button to have privileges to make changes to profiles. The default password is
“SUMMIT”. If you administrator has changed that password, then you must ask your administrator for
assistance in creating a profile for your WLAN.
Go to the Profile window by tapping the Profile tab.
Tap the New button. When a pop-up screen prompts for a name, enter any alpha-numeric name to identify
this profile (as unique from other profiles that are defined).
Tap the OK button to return to the Profile tab.
Tap the Commit button to save the profile name.
When a message pops up to indicate that this command has been saved, select OK on that pop-up to return
to the Profile window.
To configure the SSID for the network to which you wish to associate, enter an SSID in the text box to the
right of “SSID”, and select the Commit button and OK at the pop-up.
To configure authentication and encryption, use the appropriate drop-down boxes on the window, and enter
credentials for IEEE 802.1X EAP types or WEP keys just below the drop-down boxes. (To view the
security drop-down boxes, you may have to minimize the alpha-numeric keyboard provided by the
operating system.)
Configure any other settings that are dictated by the network administrator for the SSID to which you must
associate, being sure to tap Commit after you configure all settings.
Tap the Main tab. In the Active Profile drop-down box will appear the newly created profile. Select this
profile, and the Summit radio will attempt to connect to the network using the following steps:

Associate to the SSID
Authenticate to the network
If EAP authentication is being used, derive dynamic encryption keys
If DHCP is being used by the network, obtain an IP address

To assist with troubleshooting of any connectivity issues, the Status window reflects the current state of the device
and the Diag window allows for DHCP renewal and ICMP Echo Requests, also known as Pings, to be sent by the
device. You can learn more about using these SCU windows in Section 3.

2.4.2 Alternative: Use Windows Zero Config

Another method of configuring the radio is through the operating system’s WZC feature. If the radio is inserted
and the SCU is not configured, then WZC will attempt to use the card to attach to an available WLAN. A pop-up
box will appear that indicates which networks (SSIDs) have been located and asks the user which network the
device should use. Selecting an SSID that requires security will prompt the user for security keys or credentials. If
the correct credentials are entered, then the WZC process will attempt to associate, authenticate, and run the
appropriate encryption required to connect the user to the network.

If you want the Summit radio in your client device to connect not to a WLAN infrastructure but to a WLAN radio
in another client device using ad hoc (or peer-to-peer) mode, then WZC is your only option. Ad hoc mode is not
supported by SCU.

2.5 Interact with the Radio

You can configure radio and security settings, monitor performance and activity, and troubleshoot issues with the
radio using any of the following:

SCU
Another application, such as Wavelink Avalanche, that uses the application programming interface (API)
for SCU
Native facilities in the operating system, such as WZC

The rest of this guide assumes that you are using SCU for all interactions with the radio.

3.0 Using the Summit Client Utility

The Summit Client Utility (SCU) is an application designed for end users and administrators of mobile devices
that use a Summit radio. Using SCU, an end user can:

Disable the radio (turn it off) and enable the radio (turn it on)
View the contents of configuration profiles, or profiles, each of which houses the RF, security, and other
settings for the radio
Select the profile to be used
View global settings, which apply to every profile or to SCU itself
View a snapshot status of the current wireless network connection
View more detailed status information on the radio, the AP to which it is connected, and the RF connection
or link between the two
View in-depth diagnostic information on the connection and the radio, most likely to report it to an
administrator when there is a connection or performance issue
Perform various troubleshooting and diagnostic tests
View other information on the radio, such as software versions and regulatory domain

After completing an administrator login to the utility, a user can perform these additional tasks:

Create, rename, edit, and delete profiles
Alter global settings, which apply to every profile or to SCU itself

The SCU provides a graphical user interface (GUI) for access to all of its functions. Access to these functions also
is available through an application programming interface (API) that is defined in a software developer's kit