img
.
.
.
.
Haas Computing Services
.
.
.
.
.
.
AirBears @ Haas
How do I: Configure My Laptop for Wireless Ethernet Access
Windows NT/2000
.
.
.
.
.
.
.
.
.
.
NOTE: Microsoft Windows 95/98/ME and XP--Home Edition are not supported by HCS--please see
introduction for details
Updated November 2002
How Do I\2002-docs \AirBears.doc
img
Introduction
The University of California Berkeley has begun an evaluation of wireless internet access
throughout campus (AirBears). Haas, which had its own pilot program running over Summer
2001, has now joined AirBears, the University's pilot program.
This documentation details how to configure the Lucent Orinoco Silver/Gold and Dell
Truemobile 1150 802.11b wireless cards to access the internet using AirBears. If you own
another 802.11b based wireless card (i.e.: Linksys, D-link, or Intel), these configuration steps
may not necessarily match. There will be similar dialogue boxes in which you will specify
settings, but likely will not be located in the same manner, nor appear like what is shown in this
documentation.
We recommend purchasing the Orinoco (Silver or Gold) or Truemobile 1150 cards because
they support multip le network configurations; it much easier to move from a wireless network
setup at your home, to the AirBears network here at Berkeley using these cards. Currently
(06/2002), 802.11b cards run as low as 90US$
The Linksys and D-Link cards do not support multiple network configurations --thus if you
are planning on using a wireless network at your home, you will be required to change your
settings every time you switch locations if you have purchased either of these cards (this issue is
not limited to these two cards and may be true with other manufacturers).
These instructions were designed and tested with Microsoft Windows 98/NT/2000 and XP
Professional. Haas Computing Services does not support Windows 95/98/ME/or XP Home
Edition. If you are using any of these operating systems your wireless drivers should appear
similar to what is shown in this guide, however HCS does not guarantee success. If you are
using one of the operating systems we do not support, for best results we recommend that you
consider upgrading to Windows NT, 2000, or XP Professional.
Please read the Security Notes at the end of this document
Supported Locations @ Haas
Wireless access is currently supported in these locations
Courtyard
F421 Conference room
Cheit Hall
F502G Conference room
F251 Jimmie Bean's Cafe
F580 Faculty Lounge
F295 Andersen Auditorium
F678 Conference room
F299 Helzel Board Room
S205 - 211 Library Group Study Rooms
F320, F318 Classrooms
S270 MFE Collaboration lab
F330 MBA lounge
S300 Bakar Computer Center
F365 Forum
S330 Career Center
F371 Undergraduate lounge
S420 Career Center
F402F Conference room
S470, S480 CED Classrooms
S522 Dean's Suite / Conference room
Once configured, you will be able to access the internet from these locations, plus any AirBears sites
around the University. Please go to http://www.net.berkeley.edu/wireless/ for more information on
AirBears sites outside of Haas.
img
Requirements
NOTE: These instructions and support are primarily for registered Haas Students. If you are a faculty or staff member
and need further assistance, you will need to enter a helpdesk job at (http://helpdesk.haas.berkeley.edu) to have your
wireless card and AirBears connection configured.
802.11b based (wireless) Ethernet Adapter (Lucent Orinoco Silver/Gold or Dell
Truemobile 1150 recommended)
Your wireless adapter must have its driver properly installed prior to following the
instructions to this guide. Please refer to documentation provided with your card for driver
installation. We recommend downloading and installing latest version of drivers for your
wireless card.
Valid CalNet Identification (this is your Student or employee ID number & a pass phrase)
CalNet Identification
If you are a student and you need to set your calnet ID for the first time please go to the
website: https://net-auth.berkeley.edu/cgi-bin/krbcpw
You will need the PIN assigned to you from the Office of the Registrar.
If you are a faculty or staff member, please see Diana Burks to obtain a token. You will
need this temporary token to change your Calnet pass phrase at the following website:
https://net-auth.berkeley.edu/cgi-bin/krbreg. Diana is located in the Mail Room (S545).
If you are a visiting scholar, you were not given a SID, you may obtain one by visiting the
University's User & Accounts Services located in 206 Evans Hall (open M-F 10am - 4pm)
If you are a student and you have forgotten your pass phrase you must go in person to the
University's User & Accounts Services and present valid identification (your Student or
Staff ID) so that you can be issued a new pass phrase.
For more information on CalNet IDs please go to this website: http://calnet.berkeley.edu
img
Configuring AirBears @ Haas
The following steps outline how to setup your computer to use AirBears-- UC Berkeley's wireless
internet service.
Open Wireless Network Properties:
1.
1.
Click on Start Menu
2.
Select Settings
3.
Click on Control Panel
4.
Open the icon Wireless Network
If you own a non-Lucent/Dell card, please look in your
system tray for a Wireless Client Utility of some sort to
access your wireless network settings
2.
Creating a New Wireless Profile
1. After opening the Wireless Network
on Control Panel, click on Add to
create a new profile. Click Next to
continue.
2. Name the profile AirBears and make
sure the network type is Access Point.
Click Next to proceed
NOTE: Older drivers for the Lucent/Dell cards may
not have an Add option, but instead limit you to four
different profiles. In this case, simply select a profile
that is not in use and click Edit Profile to continue.
For non-Lucent/Dell cards, the network type is
sometimes called Infrastructure (means A ccess
Point)
Configuring Wireless Profile
3.
1. When prompted to enter a Network
Name, leave the field EMPTY and
press Next to proceed
NOTE:
 Sometimes older drivers require that a
Network Name be entered. This can also
occur with non -Lucent/Dell cards.
 On non-Lucent/Dell cards, Network Name is
often listed as a SSID.
If you are unable to continue without entering
something into the Network Name, please enter
AirBears and click Next to continue.
img
4.
Configuring Encryption
1. Disable all Data Security (encryption)
and do not enter any security keys.
2. Click Next to continue.
Wireless traffic on AirBears is NOT
NOTE:
ENCRYPTED.
5.
Miscellaneous Settings
1. Disable power management if you
wish to gain higher performance from
your wireless card.
If your laptop is usually plugged into an AC power
source then you should disable power management
2. Enable power management if you
usually use your laptop off a battery.
Wireless cards will draw power from your battery.
If you find your battery being drained too quickly
while using a wireless card, enable on power
management.
3. Click Next to continue, and Enable
"Renew IP Address when selecting
this profile".
4. Click Finish to complete the
configuration of your wireless adapter
and select the profile you just created.
Click OK to enable the profile.
5. Your wireless card should now pickup
the AirBears network.
img
CalNet ID Authentication
Before your computer can access the internet, you will need to verify your status as a Berkeley
student/staff/ or faculty member by entering your CalNet ID and pass phrase to the Vernier Secure
Login.
If you are unable to access the Vernier Secure Logon site, ensure that the settings you entered
are correct. Also attempt to manually enter in a Network Name (SSID)--instructions are given
in Step 3 of this document.
1.
Authentication
1. Open any Web browser
(Internet Explorer is shown to
the right).
2. If you have a homepage setup,
your web browser will redirect
you to the Vernier Secure
Logon site so you can
authenticate first.
3. If you do not have a homepage
setup, simply attempt to go to
any website and you will be
redirected to the secure login
screen shown on the right.
4. Enter your Student or
Employee ID under Username
and your pass phrase under
Password. Click Logon User.
5. If your Password and
Username are accepted you
will immediately be redirected
to your homepage or the
webpage you previously typed
into the Address field.
6. Your laptop is now connected
and authenticated to the
AirBears wireless network.
NOTE: Your computer will remain
authenticated as long as your computer remains
connected to the net work. If you disconnect,
your authentication will expire after a given
amount of time (around 30 minutes), and the
next time you attempt to use the network you
will need to re-authenticate by following the
steps in this section again.
img
Security Issues
Please be aware that the traffic on the AirBears wireless network is NOT encrypted. Traffic you
send and receive over the AirBears wireless network is visible to any other person with a
computer and 802.11b wireless ethernet card. Due to this, we strongly recommend that you only
use applications that encrypt data for security, that is:
Only read from and submit confidential data to webpages that are secure - the lock in
your browser window should be closed (https and not simply http).
Haas students with e-mail accounts are now required to configure their mail clients
with Secure Sockets Layer (SSL) so that mail is encrypted as it is sent or received.
(instructions at: http://groups.haas.berkeley.edu/hcs/howdoi/ssl.htm)
For students with UC Link e- mail accounts, you should retrieve your email via
BearMail and NOT via Eudora1 or any mail client that uses unencrypted POP or
IMAP. (http://labmail.berkeley.edu)
Login to UNIX shell accounts using Secure Shell Client (SSH) or kerberized-telnet and
NOT telnet.
Be especially careful in ensuring that the application is encrypted and secure when
providing usernames and passwords.
(from the Airbears FAQ site - http://airbears.berkeley.edu/faq.shtml#5)
Your CalNet login to AirBears is encrypted (that's why you must have an SSL capable browser
to access AirBears), but after login your traffic is only encrypted if you use encrypted
applications. Therefore you should :
Configure your email to use the encrypted POP, IMAP and SMTP services.
Always use the Secure File Transfer Client for access and file transfers
.
And use ONLY SSL web sites if sending sensitive information
The Haas e-mail server requires that Eudora or Outlook (whichever program you use) is setup with SSL. But this isn't true for the uc
1
link e-mail servers. Even if you try to set up these clients with SSL, your uc link account may not work. But the BearMail server is
secure, so if you are reading your uc link mail via a wireless connection, BearMail would be the most secure place to read it.