Marconi wireless network



C:\MPFiles\Fellows\2006-2007\Orientation\Computer Wireless detailed info setting up Marconi.doc

Marconi wireless network

Subject: Medical Center 802.11b/g Wireless Network Users,

Date: Tue, 25 Apr 2006 07:34:41 -0700

From: "UCSD Healthcare"

 

Medical Center 802.11b/g Wireless Network Users,

 

In order to add additional security to our wireless system, UCSD Medical Center will be changing its 802.11b/g wireless encryption method from WEP to the newer and more secure WPA-PSK.  By the end of the month we are asking all wireless users to reconfigure their wireless devices so they use the newer WPA-PSK encryption method when connecting to the wireless network. Guidelines on how to configure your laptop for both encryption methods can be found at

 



 

To obtain the wireless encryption key, please call the Helpdesk at 619-543-HELP.

 

The timeline and status of this deployment, as well as other wireless information can be found at



 

 

Regards,

 Wireless Support Team

From



[pic]

   Wireless How-To Procedures

Note: Depending on what client software you use to configure your wireless card, WPK-PSK can be referred to by different names.  WPA-HOME, WPA-PASSPHRASE and WPA-PERSONAL are the synonymous with WPA-PSK.

Outline of Wireless Profile Configuration Information for WPA-PSK

WPA-PSK Configuration Screen shots for Dell Laptop Windows 2000/XP Systems

Wireless Connection Trouble Shooting Guide 

[pic]

Outline of Wireless Profile Configuration Information for WPA-PSK  

The instructions below will provide you with the information you will need to properly configure your wireless client device for UCSD Medical Center's 802.11b/g wireless network.

1.        Using the wireless cards management program or the wireless network adapter management interface (for example, the Windows Network control panel icon for the wireless adapter) follow outline below when configuring the wireless card.

a. PROFILE NAME (Some client allow for a free text profile name): UCSDHC

b. NETWORK NAME (or SSID): marconi (case-sensitive)

c. ENCRYPTION / AUTHENTICATION: Use WPA-PSK Network Authentication with TKIP data encryption.(Call 3-Help for current encryption key)

d. NETWORK TYPE: Access Point (sometimes call “infrastructure mode”), in other words your Network access should be to Access Points only , not "any available network" or "computer to computer".

e. Do NOT automatically connect to non-preferred networks.

f. Your network IP address/DNS information should be configured to use DHCP.  In the Windows environment, select the Network and Dial-up Connections, then right click on your Wireless Adaptor and choose properties. From the General Tab, scroll-down the components window and high light Internet Protocol (TCP/IP). Next choose Properties. Ensure the IP and DNS settings are: 

Obtain an IP address automatically (use DHCP)

Obtain DNS server address automatically (uses DHCP)

h. This completes the configuration. Your wireless client device should discover the “marconi” network

2.        When you connect to the wireless network you must authenticate (login) to the wireless network. You can use your:

a. AD login (its the same password you used to login to Weboutlook, Web PCIS and your Outlook client to get your UCSD email).

b. Campus RADIUS login.

To get to the wireless network login screen you MUST start your web browser and connect to any non-secure web site (in other words connect to a http:// website NOT at https:// website). You will be directed to the wireless network login screen automatically (if you are not getting redirected automatically you should close the browser and try one more time.  If this does not work see the Trouble shooting section below.

If your wireless device is not setup to handle interactive authentication and you require automatic authentication, your device’s MAC address (sometimes call a physical address) can be configured into the wireless network to auto-authenticate.

Example of DELL Truemobile wireless adapter WPA-PSK configuration:

How do I get to my Windows Wireless Network Connection dialog box like the one shown below?

1. Get to the Windows Control Panel: Windows 2000 and below: Go to START > SETTINGS > CONTROL PANEL  Windows XP: Go to START > CONTROL PANEL.

2. If in Classic View mode (panel shows a bunch of icons): DOUBLE CLICK ON NETWORK CONNECTIONS ICON  XP View mode (State to Pick a Category): Click on NETWORK AND INTERNET CONNECTIONS > NETWORK CONNECTIONS ICON.

3. Find the icon that is used for your Wireless Connection, highlight it and right mouse clink.  Choose Properties.

1. Go to your Network and Internet Connection Control Panel Window and Select Network Connections.

 

[pic]

 

2. Find your wireless network adapter, high light it and right mouse click. Choose Properties.

 

[pic]

 

3. High light the TCP/IP protocol and click the properties button, In the ‘General Tab’ ensure ‘Obtain an IP address automatically’ and ‘Obtain DNS server address automatically’ are selected.

 

[pic]

4. In the ‘Wireless Networks’ Tab, Clink on the ‘Add’ Button.

 

[pic]

 

5. In the ‘Association’ tab Configure the SSID, Network Authentication, Data Encryption as shown below:

  (Pathria note: Type Marconi for the Network name)

[pic]

 

6. In the ‘Authentication’ tab, all items should be ‘grayed-out’ as shown below:

 

[pic]

 

7. In the ‘Connection’ tab, select ‘connect when this network is in range’

 

[pic]

 

8. Click on the OK button to save the profile, you should see Marconi as a preferred network.

 

[pic]

 

9. Click on the Advance button in the preferred network section and verify the Network Type is infrastructure (or Access Point).

 

[pic] 

END OF SECTION

[pic]

Wireless Connection Process and Trouble shooting Section:

This section is just meant to give the user a basic overview about what is going on when they connect to the UCSD Medical Center's wireless network and provide some trouble shooting guidelines to help locate the problem.

Phase 1: Association - The mobile device’s Radio Card and the UCSDMC Access Point’s radio card establish a connection. What effects this phase is the Network name (SSID), authentication settings and encryption settings and signal strength.

Let's trouble shoot this phase:

|1 |  Do you have the correct SSID (network name) in your wireless profile?  Remember it IS case sensitive. |

|2 |  Do you have the correct authentication and encryption method?  The encryption key IS case sensitive and must be |

| |exact. |

| |  Note: Depending on what client software you use to configure your wireless card, WPK-PSK can be referred to by |

| |different    names.  WPA-HOME, WPA-PASSPHRASE and WPA-PERSONAL are the synonymous with WPA-PSK. |

|3 |  If the above settings are correct you should see a radio signal that is in the 'good' or better range and the |

| |signal strength should be at least 2 times greater than the noise signal on your dell signal strength meter. |

 

 

Phase 2: DHCP Request - After successfully associating, the mobile device asks the network for its network IP address and other networking information by using a protocol called DHCP.  This request is normally satisfied in about 5 seconds after the radios associate. 

Let's trouble shoot this phase:

|1 |  You can verify your DHCP request has been satified on your Windows system by go to START > RUN > Enter "cmd"  > In |

| |the command window, at the prompt, type "ipconfig". |

| |   You should see and IP address of 192.168.160.x, where x is any number between .2 and .254.  If you do not have an |

| |IP address in this range then "9/10 times" the you are not connected to the network because something is wrong with |

| |your wireless profile configuration (see Phase 1 above).   If you sure that nothing is wrong with your setup in phase|

| |1, move to another area with wireless coverage that is a few hundred feet away and issue the follow command at the |

| |prompt, "ipconfig/renew".  This will force another DHCP request to the network.   |

|2 |   If other wireless devices are not working in the same area, report the problem to 3-help and have a trouble ticket|

| |opened with the UCSD Medical Center's wireless support team.  You will need to provide location and room number, for |

| |example "Hillcrest radiology near room 1-121." |

 

 

Phase 3: Authentication -  Before the wireless gateway system lets you on the network it will require you to authenticate. To get to the authentication website you will need to start up your web-browser. If your default home page is to a “http://” site (as opposed to a https:// site), you will be automatically redirected to the authentication page. If your mobile device can’t interactively authenticate through the web, it can be set up so it will auto-authenticate using your device’s MAC address (you will have to register this address with the wireless network).

Let's trouble shoot this phase:

|1 |  If your default home page is not and http:// website, you will not get automatically redirected to the wireless |

| |login page.  Change your default website.  On IE, it would be Tools > Internet Options > General Tab > Home Page |

| |section. |

|2 |  Is your browser configured to use a proxy server, if so disable it.  On IE, you would go to Tools > Internet |

| |Options > Connections Tab > LAN Settings button.  Uncheck "automatically detect.." and "Use proxy server...".  |

|3 |  You need to have a valid IP address before this Phase will work, verify that you have a good IP address by |

| |referring to Phase 2 above. |

|4 | You can try and force a direct connection to the login page by typing the web address is |

| | |

 

Phase 4: Bluesocket Role Assignment - If you successfully authenticate, you will be assigned to a role that governs what kind of access you will have on the UCSDHC network. This could range from no-restrictions (except for security restriction already imposed by UCSDHC network) to no-access at all.  Medical Center employees are given the same kind of access they have with their personal desktop computers.

Let's trouble shoot this phase:

|1 |  You can use your AD login (its the same password you used to login to Weboutlook, Web PCIS and your Outlook client |

| |to get your UCSD email).  For UCSD Medical Center AD password resets please call 3-HELP. |

|2 |  OR you can use your Campus RADIUS login.  Support for Campus RADIUS account information and password resets can be |

| |found at |

 

Phase 5: Connected -You are connected to the UCSD Medical Center network governed by your wireless gateway role.

NOTICE: Wireless users are expected to maintain the UCSD Minimum Network Connection Standards when they have an active VPN account.  Details of these guidelines can be found at

(UCSD Policy and Procedure Manual, Section 135-3, Computing Services)

In summary, devices must:

1. Stay current with mandatory and security software patches.

2. Anti-virus Software must be installed and running with the latest virus definition file.

3. If a service is not necessary for the intended purpose or operation of the device, that service should not be running.

4. Host-based firewall software should be running on the system.

5. Passwords should not be trivial and treated in a protected manner.

6. Unattended devices should "lock" and require a user to re-authenticate if left unattended for more than 20 minutes.

 

END OF SECTION

................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download