AirUTD Connection Procedure | Windows 2000

Important Information

Due to the significant enhancements in Windows XP with regard to wireless networking, users are first encouraged to upgrade their machines to Windows XP. Students, staff, and faculty may obtain a copy of Windows XP from the UTD Bookstore under the UT System Microsoft Licensing Agreement. More information on this can be obtained from http://www.hied.com/ut/index.html.

Enabling 802.1x authentication in Windows 2000 for the AirUTD Wireless Network is a three step process. Service Pack 4 for Windows 2000 includes a 802.1x client much like the client included with Windows XP. Windows 2000, however, does not include the wireless interface configuration functionality that is included with the Wireless Zero Configuration Service in Windows XP. Windows 2000 ONLY includes the 802.1x client portion.

If you need help with any part of this setup at any time, please contact the UTD Computing Help Desk by either calling them at 972-883-2911 or emailing them at assist@utdallas.edu.

Before you Begin

Before beginning this setup, please visit Windows Update and make sure your machine is fully up-to-date with all service packs and patches. You MUST be at Service Pack 4 on Windows 2000 in order to have the 802.1x functionality.

Once you have finished updating your machine, complete the three steps below to configure your wireless adapter for 802.1x:

1. Enable the Windows 2000 802.1x Client

First, open the Control Panel by clicking on the Start menu, selecting "Settings", and choosing "Control Panel." In the Control Panel, find and open the "Administrative Tools" option as seen below.

(Click for Full Size)

Once in the Administrative Tools, find and open the Services tool as seen below.

(Click for Full Size)

Inside the Services Managment Console, scroll down to the bottom of the list of services until you see the "Wireless Configuration" service as seen below.

(Click for Full Size)

Right-click on the Wireless Configuration service and choose properties. This will open the properties window for the Wireless Configuration service, as seen below.

In the properties window, change the "Startup type" to "Automatic" to start the service each time Windows starts then click the "Start" button to start the service immediately.

Once you have completed these steps, click "OK" on the properties window and close any other open windows. The 802.1x client is now enabled.

2. Set Up 802.1x Authentication

Now that the 802.1x client is enabled and ready to authenticate, it will need to be configured with AirUTD 802.1x settings. The actual configuration of the Windows 2000 802.1x client is very similar to the configuration of the Windows XP 802.1x client. To begin, click on the Start menu, select "Settings", and choose "Network and Dial-up Connections." This will open the Network Connections window as seen below.

(Click for Full Size)

Find the adapter in the Network Connections window that corresponds to your wireless card. As seen above, the information pane shows that the "Local Area Connection" adapter is an ORiNOCO PC Card. Once the wireless adapter has been located, right-click on the adapter icon and select "Properties." This will open the adapter properties window, such as the one below.

If the 802.1x client has been properly installed and enabled per the instructions, an "Authentication" tab will be present at the top as seen in the window above. Click on the Authentication tab to open the 802.1x configuration tab, as seen below.

In this window, make sure the "Enable network access control using IEEE 802.1X" option is checked. Next, change the "EAP type" to "Protected EAP (PEAP)." Next, uncheck the "Authenticate as computer when computer information is available" option. Finally, click on the "Properties" button to continue. This will open the PEAP Properties window as seen below.

In the PEAP Properties window, make sure the "Validate server certificate" and "Connect to these servers" options are checked. In the "Connect to these servers" box, enter "8021x.utdallas.edu" as seen above.

Next, scroll down through the list of "Trusted Root Certification Authorities" until you find the "Secure Server Certification Authority" and check the box next to it.

The "Select authentication method" should be set at "Secure password (EAP-MSCHAP v2) and the "Enable Fast Reconnect" option should be unchecked.

Click on the "Configure..." button to open the "EAP MSCHAPv2 Properties" window seen below.

In the EAP MSCHAPv2 Properties window, uncheck the "Automatically use my Windows logon name and password (and domain if any)." option and click "OK"

Click "OK" on each open open configuration window to save the changes. The 802.1x client is now set up.

3. Configure the Wireless Adapter

Windows 2000 does not benefit from the ability available in Windows XP to have the operating system configure the wireless network settings. As such, users must configure the wireless network connection settings using the software supplied with the wireless adapter. The configuration instructions supplied here pertain directly to the Lucent/Proxim ORiNOCO 802.11b cards, however the configuration options will be similar among 802.11b-compliant cards.

To begin configuring the ORiNOCO card for the new 802.1x network, click on the Start menu, select "Settings", and choose "Control Panel". In the Control Panel, find and open the "Wireless Network" option as seen below.

(Click for Full Size)

In the Add/Edit Configuration Profile window that comes up, seen below, click on the "Add" button to add a new profile for the WATERVIEW network.

In the Edit Configuration window, enter WATERVIEW in the "Profile Name" box and select "Access Point" for the "Network Type", as show below. Click "Next >" to continue.

In the "Network Name" box of the next screen, shown below, enter WATERVIEW. This is the ESSID of the network. It is very important that this be input in all capital letters. Click "Next >" to continue.

In the next screen, shown below, several items must be set. First, check the "Enable Data Security" option.

Next, make sure the "Use Alphanumeric Characters" option is selected.

Finally, in the "Key 1" box, enter the letters "qwert" as seen below (with no quotation marks).

Note: The actual letters enterred here do not matter. It only matters that 5 letters or numbers be enterred into this box. Finally, make sure the "Encrypt data with" option is set to "Key 1", and click "Next >" to continue.

In the Power Management section, seen below, leave the default setting of "Off" and click "Next >" to continue.

In the "TCP/IP Behavior" section, check the "Renew IP Address when selecting this profile." option and click "Finish."

Once you have clicked Finish, click "OK" in the Profile window to select your newly created WATERVIEW profile. Since the 802.1x authentication portions have alreadybeen set up, the 802.1x client should automatically detect the authentication requests when the WATERVIEW profile is selected.

When the authentication requests aredetected, Windows will display a login box like the one shown below. Enter your UTD NetID in the "User name" field, and your NetID password in the "Password" field. Leave the "Logon domain" field blank. Click "OK" to log in.

Once you have successfully enterred your NetID and password, you will have access to the AirUTD network. If you hover your mouse pointer over the Network icon on the task bar (the icon that looks like two computers), you should see the authentication status. In the case of a successful authentication, you should see the "Authentication succeeded" like the one below.

Congratulations! You're done!