≪ View Page

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
en:verejne:sit:wi-fi [20.09.2017 23:13] – newlines valachen:verejne:sit:wi-fi [21.09.2025 19:58] (current) – [Login settings] CA modification Pavel Valach
Line 1: Line 1:
 +{{indexmenu_n>10}}
 +
 ====== Wi-Fi ====== ====== Wi-Fi ======
  
-Members of Club Sincoolka with Full membership can also use Wifi connection. Use Wifi network **Sincoolka** or **Sincoolka 5G**. 5G variant is preferred, if available. +Members of Club Sincoolka with Network membership can also use the Wi-Fi connection. Use Wi-Fi network **Sincoolka FT** or **Sincoolka**.
- +
-**User name / Login / Identity:** your registered e-mail address \\ +
-**Password:** your SINIS password. +
- +
-Your device needs to be registered to access our Wifi network. Bring it to the LAB during office hours, or send us a request //from your registered e-mail address// to [[admin@sin.cvut.cz]]. The request //must// include: +
-    - the MAC address of your Wifi adapter, +
-    - what device you are connecting, +
-    - that it will be connected using Wifi. +
-===== Verifying Wifi network ===== +
- +
-In case you need to verify that you are indeed connecting to our network, here are the certificates of Certification Authority (CA) and RADIUS server which our network uses: +
- +
-[[https://tcs.cesnet.cz/certificate/download/1445704998|RADIUS certificate (PEM)]] \\ +
-[[https://pki.cesnet.cz/cs/ch-tcs-ssl-ca-3-crt-crl.html|CA certificate (TERENA SSL CA 3)]] +
- +
-//RADIUS SHA-1:// ‎CC:77:A0:85:88:CA:0C:F8:89:15:28:FB:3B:1D:70:B2:CA:10:B3:8D +
- +
-===== Windows ===== +
- +
-All done? Great, we can move on to connecting! +
- +
-  - Turn on Wifi. +
-  - Click on the network icon in the bottom right corner - a list of Wifi networks should open. +
-  - Find Sincoolka network in the list. Click on it and click **Connect**. +
-  - After a while, a window appears to enter your login credentials. Enter your school mail and password (the ones you registered with to SINIS). +
-  - //In the background,// a prompt may appear to verify the identity of the server. Check that the server certificate is signed by **TERENA SSL CA 3** and/or that the certificate fingerprint is:\\ CC:77:A0:85:88:CA:0C:F8:89:15:28:FB:3B:1D:70:B2:CA:10:B3:8D\\ //(it is sufficient just to verify first few letters)// \\ and click **Connect or Accept**. +
-  - It might happen that you might need to enter your credentials once more. +
- +
-In case you have issues with the login, check that you really enter correct e-mail address and password. If it doesn't work, try adding the network manually: +
- +
-  - Right-click on the Network icon on the bottom right //and// select Open //Network and Sharing Center.// +
-  - Click on the //Set Up a Connection or Network.// A new window should open.\\ {{ en:verejne:sit:wiki:win_manual1_en.png?nolink |Set Up a Connection or Network}} +
-  - Select //Manually connect to a wireless network// and click //Next//.\\ {{ en:verejne:sit:wiki:win_manual2_en.png?nolink }} +
-  - Enter network name: Sincoolka, security type: WPA2-Enterprise, then click //Next//.\\ {{ en:verejne:sit:wiki:win_manual3_en.png?nolink }} +
-  - **Do NOT close the window**, click on //Change connection settings// instead.\\ +
-  - Check and correct the following settings on the //Security// tab: +
-    * Network authentication method - Microsoft: Protected EAP (PEAP) or TTLS\\ {{ en:verejne:sit:wiki:win_manual4_en.png?nolink }} +
-    * Advanced settings - Specify authentication mode - User authentication\\ +
-{{ en:verejne:sit:wiki:win_manual7_en.png?nolink }} +
-    * Settings - Select Authentication Method - Secured Password (EAP-MSCHAP v2); +
-    * click //Configure// next to the combo box and **deselect** the only checkbox in that window (//Automatically use my Windows logon name and password//).\\ {{ en:verejne:sit:wiki:win_manual5_en.png?nolink }}\\ {{ en:verejne:sit:wiki:win_manual6_en.png?nolink }} +
-  - Afterwards, **confirm every window with OK** and connect to the Sincoolka network through the list of Wifi networks. +
- +
- +
-===== iPhone ===== +
- +
-  - Turn on Wifi and go to Settings -> Wifi.\\ {{ en:verejne:sit:wiki:iphone_connect1_cz.png?nolink&400 }} +
-  - Choose //Sincoolka// network.  +
-  - Enter your SINIS login email and password.\\ {{ en:verejne:sit:wiki:iphone_connect2_cz.png?nolink&400 }} +
-  - It is likely that you will be required to verify the server certificate. Check that the server certificate is signed by **TERENA SSL CA 3** and/or that the certificate fingerprint is:\\ +
-CC:77:A0:85:88:CA:0C:F8:89:15:28:FB:3B:1D:70:B2:CA:10:B3:8D\\ +
-//(it is sufficient just to verify first few letters)// and click **Accept or Connect**. +
- +
- +
-===== Android ===== +
- +
-  - Turn on Wifi and go to Settings -> Wifi. +
-  - Choose Sincoolka network. A window should open to enter login credentials. +
-  - Check that you have either **PEAP or TTLS** chosen in the //EAP method// field. +
-  - In //Identity//, enter your login email to SINIS and in //Password//, enter your password.. +
-  - Tap //Connect//. +
- +
-===== Linux - Ubuntu, NetworkManager ===== +
- +
-It is usually best to obey the instructions of your network manager. The connection settings might be a bit difficult to fill correctly; thus, the following settings for NetworkManager are recommended: +
- +
-  * **Security**: WPA2-Enterprise +
-  * **Authentication mode**: Protected EAP (PEAP) or TTLS +
-  * MSCHAPv2, or PAP for TTLS +
-  * **CA certificate** can be downloaded [[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-3-crt-crl.html|from CESNET]] (TERENA SSL CA 3). //It is usually required for successful connection.// +
-  * **User name** and **Password** - does not require explanation :-) +
- +
  
-===== Troubleshooting =====+To register your device for use in the Sincoolka network, please [[en:verejne:sit:nove-zarizeni|follow the instructions on a separate page]].
  
-**I cannot see //Sincoolka// network in the network list anymore. Why?**+===== Login settings =====
  
-You have probably been using Sincoolka network before. The security settings might have changed, though. The network will be hidden //at the end of the list//.+**User name / Login / Identity:** your SIN username or SIN email (find it [[https://sinis.sin.cvut.cz|in SINIS after logging in]]), \\ 
 +**Password:** your SINIS password, \\ 
 +**Anonymous identity**: anonymous@sin.cvut.cz (optional)
  
-==== Windows ====+**CA certificate:** ISRG Root X1 (temporarily) - download from [[en:verejne:sit:cert|]], or, with Android, you can use system certificates, \\ 
 +**Domain:** radius.sin.cvut.cz
  
-=== Windows 7 ===+<note important>It is vital to set the CA certificate and domain correctly, to prevent anyone from stealing your login credentials. To ensure your settings are correct, you may use the walkthroughs below.</note> 
 +<note tip>If there is a choice to use anonymous identity, we recommend you to do so. Without it, your user name / email will be transferred over-the-air unencrypted, available for anyone around to scoop.</note>
  
-The //Sincoolka// network should appear //at the very end of the networks list//, accompanied by a red cross. Click **Open Network and Sharing Center** link on the bottom of the window, then on **Manage wireless networks** and remove Sincoolka network from the list. Now, open the Wifi networks screen again; Sincoolka should be up and available for connection.+==== Which WiFi network to choose? ==== 
 +We offer several WiFi networks on our infrastructure to choose from: 
 +^ Name (SSID)       ^ 2.4 GHz  ^ 5 GHz    ^ Enterprise network (802.1X)  ^ Fast roaming (802.11r)  ^ Note                                                   ^ 
 +| **Sincoolka FT**  | **Yes**  | **Yes**  | **Yes**                      | **Yes**                 | **Prefer this network for modern devices**             | 
 +| Sincoolka         | Yes      | Yes      | Yes                          | No                      | For old devices experiencing issues with fast roaming  | 
 +| Sincoolka 5G      | No       | Yes      | Yes                          | No                      | For devices needlessly preferring the 2.4GHz band      | 
 +| Sincoolka IoT     | Yes      | Yes      | No                           | No                      | For very old or cheap IoT devices                      | 
 +Regarding speed and latency, there is no difference between these networks. The Sincoolka 5G network is not faster than any other network and it's name is completely unrelated to mobile telephone networks! 
 +===== Installation manuals =====
  
-=== Windows 8, 8.1, 10 === 
  
-The //Sincoolka// network should appear //at the very end of the networks list//, accompanied by a white cross in red circle. Select it and click //Connect//, or //Delete// and then again //Connect//.+<row> 
 +<col><card no-body> 
 +<card-header><icon fa apple> iPhone, iPad, macOS</card-header> 
 +<card-body>[[en:verejne:sit:wi-fi:ios|]]</card-body> 
 +</card></col>
  
-==== Linux ====+<col><card no-body> 
 +<card-header><icon fa android> Android</card-header> 
 +<card-body>[[en:verejne:sit:wi-fi:android|]]</card-body> 
 +</card></col> 
 +</row>
  
-In case Network Manager is having issues with the network settings change, you'll need to //Edit connections// and either remove or change the network settings (see recommended settings above).+<row> 
 +<col><card no-body> 
 +<card-header><icon fa windows> Windows</card-header> 
 +<card-body>[[en:verejne:sit:wi-fi:windows|]]</card-body> 
 +</card></col>
  
-===== Other issues =====+<col><card no-body> 
 +<card-header><icon fa linux> Linux</card-header> 
 +<card-body>[[en:verejne:sit:wi-fi:linux|]]</card-body> 
 +</card></col> 
 +</row>
  
-**After entering my credentials, a message appears: "Cannot log in to this network."** 
  
-Check your school email and password //twice//. It is required to enter whole email address, //including domain//.+===== Things that won't work with our Wi-Fi =====
  
-For Linux machines, you need the CA certificate for verification; download it from [[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-3-crt-crl.html|the CESNET website]] (TERENA SSL CA 3).+  * gaming consoles (Xbox, Playstation, Nintendo Switch, Wii etc.) 
 +  * usual IoT devices (from the familiar kinds of Alexa, through some smart lighbulbs, or [[https://www.geekculture.com/joyoftech/joyarchives/2340.html|internet-connected brooms]])
  
-If you weren't able to solve your issue, please come to LAB during office hours.+(as in, people have tried to get them to work and failed, usually because they don't support enterprise networks)