en:verejne:sit:wi-fi

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision		 Previous revision
Last revisionBoth sides next revision
en:verejne:navody:wifi [19.09.2017 17:14] – created valachen:verejne:sit:wi-fi [11.11.2023 15:33] – [Which WiFi network to choose?] Karel Kopecký
Line 1: Line 1:
-====== Connecting to Sincoolka Wifi network ======+{{indexmenu_n>10}}
  
-Right now, the certificate we use is signed by a trusted certification authority (DigiCert or TERENA). The connection should therefore work without bigger issues. If not, then it is necessary to download and install [[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-3-crt-crl.html|CA certificate from CESNET webpage]] (TERENA SSL CA 3) to the **trusted root certificate authorities store**.+====== Wi-Fi ======
  
-===== Windows =====+Members of Club Sincoolka with Network membership can also use the Wi-Fi connection. Use Wi-Fi network **Sincoolka 5G** or **Sincoolka**. We prefer 5G variant, if available.
  
-All done? Great, we can move on to connecting!+To register your device for use in the Sincoolka network, please [[en:verejne:sit:nove-zarizeni|follow the instructions on a separate page]].
  
-  - Turn on Wifi. +===== Login settings =====
-  - Click on the network icon in the bottom right corner - a list of Wifi networks should open. +
-  - Find Sincoolka network in the list. Click on it and click **Connect**. +
-  - After a while, a window appears to enter your login credentials. Enter your school mail and password (the ones you registered with to SINIS). +
-  - //In the background,// a prompt may appear to verify the identity of the server. Check that the server certificate is signed by **TERENA SSL CA 3** and/or that the certificate fingerprint is:\\ +
-CC:77:A0:85:88:CA:0C:F8:89:15:28:FB:3B:1D:70:B2:CA:10:B3:8D\\ +
-//(it is sufficient just to verify first few letters)// and click **Connect or Accept**. +
-  - It might happen that you might need to enter your credentials once more.+
  
-In case you have issues with the login, check that you really enter correct e-mail address and password. If it doesn't work, try adding the network manually:+**User name / Login / Identity:** your SIN username or SIN email (find it [[https://sinis.sin.cvut.cz|in SINIS after logging in]]), \\ 
 +**Password:** your SINIS password, \\ 
 +**Anonymous identity**: anonymous@sin.cvut.cz (optional)
  
-  - Right-click on the Network icon on the bottom right //and// select Open //Network and Sharing Center.// +**CA certificate:** download from [[en:verejne:sit:cert|]], or, with Android, you can use system certificates, \\ 
-  - Click on the //Set Up a Connection or Network.// A new window should open. +**Domain:** radius.sin.cvut.cz
-  - {{:/sites/default/files/navody/wifi/win_manual1_en.png|Set Up a Connection or Network}} +
-  - Select //Manually connect to a wireless network// and click //Next//.\\ +
-{{:/sites/default/files/navody/wifi/win_manual2_en.png}} +
-  - Enter network name: Sincoolka, security type: WPA2-Enterprise, then click //Next//.\\ +
-{{:/sites/default/files/navody/wifi/win_manual3_en.png}} +
-  - **Do NOT close the window**, click on //Change connection settings// instead..\\ +
-\\ +
-  +
-  - Check and correct the following settings on the //Security// tab: +
-    * Network authentication method - Microsoft: Protected EAP (PEAP) or TTLS\\ +
-{{:/sites/default/files/navody/wifi/win_manual4_en.png}} +
-    * Advanced settings - Specify authentication mode - User authentication\\ +
-{{:/sites/default/files/navody/wifi/win_manual7_en.png}} +
-    * Settings - Select Authentication Method - Secured Password (EAP-MSCHAP v2); +
-    * click //Configure// next to the combo box and **deselect** the only checkbox in that window (//Automatically use my Windows logon name and password//).\\ +
-{{:/sites/default/files/navody/wifi/win_manual5_en.png}}\\ +
-{{:/sites/default/files/navody/wifi/win_manual6_en.png}} +
-  - Afterwards, **confirm every window with OK** and connect to the Sincoolka network through the list of Wifi networks.+
  
 +<note important>It is vital to set the CA certificate and domain correctly, to prevent anyone from stealing your login credentials. To ensure your settings are correct, you may use the walkthroughs below.</note>
 +<note tip>If there is a choice to use anonymous identity, we recommend you to do so. Without it, your user name / email will be transferred over-the-air unencrypted, available for anyone around to scoop.</note>
  
-===== iPhone =====+==== Which WiFi network to choose? ==== 
 +We offer several WiFi networks on our infrastructure to choose from: 
 +^ Name (SSID)       ^ 2.4 GHz  ^ 5 GHz    ^ Enterprise network (802.1X)  ^ Fast roaming (802.11r)  ^ Note                                                   ^ 
 +| **Sincoolka FT**  | **Yes**  | **Yes**  | **Yes**                      | **Yes**                 | **Prefer this network for modern devices**             | 
 +| Sincoolka         | Yes      | Yes      | Yes                          | No                      | For old devices experiencing issues with fast roaming  | 
 +| Sincoolka 5G      | No       | Yes      | Yes                          | No                      | For devices needlessly preferring the 2.4GHz band      | 
 +| Sincoolka IoT     | Yes      | Yes      | No                           | No                      | For very old or cheap IoT devices                      | 
 +Regarding speed and latency, there is no difference between these networks. The Sincoolka 5G network is not faster than other networks and is completely unrelated to mobile telephone networks! 
 +===== Installation manuals =====
  
-  - Turn on Wifi and go to Settings -> Wifi.\\ +{{indexmenu>:en:verejne:sit:wi-fi|tsort nsort}}
-{{:/sites/default/files/navody/wifi/iphone_connect1_cz.png}} +
-  - Choose //Sincoolka// network.\\ +
-  +
-  - Enter your SINIS login email and password.\\ +
-{{:/sites/default/files/navody/wifi/iphone_connect2_cz.png}}\\ +
-  +
-  - It is likely that you will be required to verify the server certificate. Check that the server certificate is signed by **TERENA SSL CA 3** and/or that the certificate fingerprint is:\\ +
-CC:77:A0:85:88:CA:0C:F8:89:15:28:FB:3B:1D:70:B2:CA:10:B3:8D\\ +
-//(it is sufficient just to verify first few letters)// and click **Accept or Connect**.\\ +
-{{:/sites/default/files/navody/wifi/iphone_connect3_cz.png}}{{:/sites/default/files/navody/wifi/iphone_connect4_cz.png}}+
  
 +===== Things that won't work with our Wi-Fi =====
  
-===== Android =====+  * gaming consoles (Xbox, Playstation, Nintendo Switch, Wii etc.) 
 +  * usual IoT devices (from the familiar kinds of Alexa, through some smart lighbulbs, or [[https://www.geekculture.com/joyoftech/joyarchives/2340.html|internet-connected brooms]])
  
-  - Turn on Wifi and go to Settings -> Wifi. +(as in, people have tried to get them to work and failed, usually because they don't support enterprise networks)
-  - Choose Sincoolka network. A window should open to enter login credentials. +
-  - Check that you have either **PEAP or TTLS** chosen in the //EAP method// field. +
-  - In //Identity//, enter your login email to SINIS and in //Password//, enter your password.. +
-  - Tap //Connect//. +
- +
-===== Linux - Ubuntu, NetworkManager ===== +
- +
-It is usually best to obey the instructions of your network manager. The connection settings might be a bit difficult to fill correctly; thus, the following settings for NetworkManager are recommended: +
- +
-  * **Security**: WPA2-Enterprise +
-  * **Authentication mode**: Protected EAP (PEAP) or TTLS +
-  * MSCHAPv2, or PAP for TTLS +
-  * **CA certificate** can be downloaded [[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-3-crt-crl.html|from CESNET]] (TERENA SSL CA 3). //It is usually required for successful connection.// +
-  * **User name** and **Password** - does not require explanation :-) +
- +
-===== Troubleshooting ===== +
- +
-**After 19th August, I cannot see //Sincoolka// network in the network list anymore. Why?** +
- +
-You have probably been using Sincoolka network before. The security settings have changed, though. The network will be hidden //at the end of the list//. +
- +
-==== Windows ==== +
- +
-=== Windows 7 === +
- +
-The //Sincoolka// network should appear //at the very end of the networks list//, accompanied by a red cross. Click **Open Network and Sharing Center** link on the bottom of the window, then on **Manage wireless networks** and remove Sincoolka network from the list. Now, open the Wifi networks screen again; Sincoolka should be up and available for connection. +
- +
-=== Windows 8, 8.1, 10 === +
- +
-The //Sincoolka// network should appear //at the very end of the networks list//, accompanied by a white cross in red circle. Select it and click //Connect//, or //Delete// and then again //Connect//. +
- +
-==== Linux ==== +
- +
-In case Network Manager is having issues with the network settings change, you'll need to //Edit connections// and either remove or change the network settings (see recommended settings above). +
- +
-===== Other issues ===== +
- +
-**After entering my credentials, a message appears: "Cannot log in to this network."** +
- +
-Check your school email and password //twice//. It is required to enter whole email address, //including domain//. +
- +
-For Linux machines, you need the CA certificate for verification; download it from [[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-3-crt-crl.html|the CESNET website]] (TERENA SSL CA 3). +
- +
-If you weren't able to solve your issue, please come to LAB during office hours.+
  • en/verejne/sit/wi-fi.txt
  • Last modified: 11.11.2023 15:34
  • by Karel Kopecký