This is an old revision of the document!
Set up Wi-Fi on Linux – Ubuntu, NetworkManager, wpa_supplicant
Ubuntu, NetworkManager
When using a GUI, it is likely that you use NetworkManager for network configuration.
It is important to set up RADIUS server identity verification, as it will give you protection against rogue Wi-Fi access points and protect your password as well. That is why you should take the time to set your Wi-Fi connection properly. You will find verified walkthrough below.
- Run command
nm-connection-editor
(Advanced Network Configuration). - Expand the Wi-Fi category and look if you already have an existing Sincoolka profile - it might be a good idea to remove it with a - button (minus sign) if it does not work.
- Then, click the + button (plus sign) in the bottom toolbar.
- In the Choose a Connection Type window, pick Wi-Fi from the list. Then click the Create… button
- A window for describing network configuration will open.
- Fill out the name of the profile (can be anything, e.g. Sincoolka).
- Switch to the Wi-Fi tab and fill out these - SSID:
Sincoolka
orSincoolka 5G
. From the Devices list, choose your Wi-Fi adapter.
- Switch to the Wi-Fi Security tab and set up the following:
- Security: WPA2-Enterprise
- Authentication: Tunneled TLS
- Anonymous identity:
anonymous@sin.cvut.cz
- Domain:
radius.sin.cvut.cz
- CA certificate: download and save it (download format PEM)
- Inner authentication: PAP
- Username: use your SIN username or SIN email (find it after logging in to SINIS)
- Password: the same as for your SINIS login.
- Confirm your settings by pushing the Save button.
Now, your connection should be all set for secure Wi-Fi browsing.
wpa_supplicant
WPA Supplicant is an utility which enables WPA security support for Wi-Fi in Linux. NetworkManager uses wpa_supplicant internally.
In case you want to set up a wpa_supplicant profile manually, we have prepared a Sincoolka network definition below.
Please download the proper **CA certificate** first and save it. You will enter the path to this file in the wpa_supplicant configuration profile.
- wpa_supplicant.conf
network={ ssid="Sincoolka" # or Sincoolka 5G scan_ssid=1 key_mgmt=WPA-EAP eap=TTLS # path to the downloaded CA certificate ca_cert="/etc/cert/sin-wifi-ca.pem" domain_match="radius.sin.cvut.cz" phase2="auth=PAP" pairwise=CCMP group=CCMP # Your credentials identity="jiri.novak@sin.cvut.cz" anonymous_identity="anonymous@sin.cvut.cz" password="YourStr0ngPa$$word" }