en:verejne:sit:wi-fi:linux

This translation is older than the original page and might be outdated. See what has changed.

This is an old revision of the document!


Set up Wi-Fi on Linux - Ubuntu, NetworkManager, wpa_supplicant

When using a GUI, it is likely that you use NetworkManager for network configuration.

It is important to set up RADIUS server identity verification, as it will give you protection against rogue Wi-Fi access points and protect your password as well. That is why you should take the time to set your Wi-Fi connection properly. You will find verified walkthrough below.
  1. Run command nm-connection-editor (Advanced Network Configuration).
  2. Expand the Wi-Fi category and look if you already have an existing Sincoolka profile - it might be a good idea to remove it with a - button (minus sign) if it does not work.
  3. Then, click the + button (plus sign) in the bottom toolbar.
  4. In the Choose a Connection Type window, pick Wi-Fi from the list. Then click the Create… button
  5. A window for describing network configuration will open.
    • Fill out the name of the profile (can be anything, e.g. Sincoolka).
    • Switch to the Wi-Fi tab and fill out these - SSID: Sincoolka or Sincoolka 5G. From the Devices list, choose your Wi-Fi adapter.
    • Switch to the Wi-Fi Security tab and set up the following:
      • Security: WPA2-Enterprise
      • Authentication: Tunneled TLS
      • Anonymous identity: you may leave the field blank or fill out anonymous@sin.cvut.cz
      • Domain: radius.sin.cvut.cz
      • CA certificate: download and save it (DigiCert Assured ID Root CA, format PEM)
      • Inner authentication: PAP
      • Username and Password is the same as your SINIS login.
        You may also use the SIN email address, which you will find right after logging in to SINIS.
    • Confirm your settings by pushing the Save button.

Now, your connection should be all set for secure Wi-Fi browsing.

WPA Supplicant is an utility which enables WPA security support for Wi-Fi in Linux. NetworkManager uses wpa_supplicant internally.

In case you want to set up a wpa_supplicant profile manually, we have prepared a Sincoolka network definition below.

Please download the proper CA certificate first (DigiCert Assured ID Root CA, PEM format) and save it. You will enter the path to this file in the wpa_supplicant configuration profile.

wpa_supplicant.conf
network={
    ssid="Sincoolka"  # or Sincoolka 5G
    scan_ssid=1
    key_mgmt=WPA-EAP
    eap=TTLS
    # path to the downloaded CA certificate
    ca_cert="/etc/cert/digicert-ca.pem"
    domain_match="radius.sin.cvut.cz"
    phase2="auth=PAP"
    pairwise=CCMP
    group=CCMP
 
    # Your credentials
    identity="jiri.novak@sin.cvut.cz"
    anonymous_identity="anonymous@sin.cvut.cz"
    password="YourStr0ngPa$$word"
}
  • en/verejne/sit/wi-fi/linux.1591111127.txt.gz
  • Last modified: 02.06.2020 15:18
  • by 127.0.0.1