en:verejne:sit:wi-fi

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
en:verejne:sit:wifi [20.09.2017 22:35] – ↷ Links adapted because of a move operation kapounen:verejne:sit:wi-fi [11.11.2023 15:34] (current) – [Which WiFi network to choose?] more detailed info about different wifi networks Karel Kopecký
Line 1: Line 1:
-====== Connecting to Sincoolka Wifi network ======+{{indexmenu_n>10}}
  
-Right now, the certificate we use is signed by a trusted certification authority (DigiCert or TERENA). The connection should therefore work without bigger issues. If not, then it is necessary to download and install [[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-3-crt-crl.html|CA certificate from CESNET webpage]] (TERENA SSL CA 3) to the **trusted root certificate authorities store**.+====== Wi-Fi ======
  
-===== Windows =====+Members of Club Sincoolka with Network membership can also use the Wi-Fi connection. Use Wi-Fi network **Sincoolka 5G** or **Sincoolka**. We prefer 5G variant, if available.
  
-All done? Great, we can move on to connecting!+To register your device for use in the Sincoolka network, please [[en:verejne:sit:nove-zarizeni|follow the instructions on a separate page]].
  
-  - Turn on Wifi. +===== Login settings =====
-  - Click on the network icon in the bottom right corner - a list of Wifi networks should open. +
-  - Find Sincoolka network in the list. Click on it and click **Connect**. +
-  - After a while, a window appears to enter your login credentials. Enter your school mail and password (the ones you registered with to SINIS). +
-  - //In the background,// a prompt may appear to verify the identity of the server. Check that the server certificate is signed by **TERENA SSL CA 3** and/or that the certificate fingerprint is:\\ +
-CC:77:A0:85:88:CA:0C:F8:89:15:28:FB:3B:1D:70:B2:CA:10:B3:8D\\ +
-//(it is sufficient just to verify first few letters)// and click **Connect or Accept**. +
-  - It might happen that you might need to enter your credentials once more.+
  
-In case you have issues with the login, check that you really enter correct e-mail address and password. If it doesn't work, try adding the network manually:+**User name / Login / Identity:** your SIN username or SIN email (find it [[https://sinis.sin.cvut.cz|in SINIS after logging in]]), \\ 
 +**Password:** your SINIS password, \\ 
 +**Anonymous identity**: anonymous@sin.cvut.cz (optional)
  
-  - Right-click on the Network icon on the bottom right //and// select Open //Network and Sharing Center.// +**CA certificate:** download from [[en:verejne:sit:cert|]], or, with Android, you can use system certificates, \\ 
-  - Click on the //Set Up a Connection or Network.// A new window should open.\\ {{ en:verejne:sit:wiki:win_manual1_en.png?nolink |Set Up a Connection or Network}} +**Domain:** radius.sin.cvut.cz
-  - Select //Manually connect to a wireless network// and click //Next//.\\ {{ en:verejne:sit:wiki:win_manual2_en.png?nolink }} +
-  - Enter network name: Sincoolka, security type: WPA2-Enterprise, then click //Next//.\\ {{ en:verejne:sit:wiki:win_manual3_en.png?nolink }} +
-  - **Do NOT close the window**, click on //Change connection settings// instead.\\ +
-  - Check and correct the following settings on the //Security// tab: +
-    * Network authentication method - Microsoft: Protected EAP (PEAP) or TTLS\\ {{ en:verejne:sit:wiki:win_manual4_en.png?nolink }} +
-    * Advanced settings - Specify authentication mode - User authentication\\ +
-{{ en:verejne:sit:wiki:win_manual7_en.png?nolink }} +
-    * Settings - Select Authentication Method - Secured Password (EAP-MSCHAP v2); +
-    * click //Configure// next to the combo box and **deselect** the only checkbox in that window (//Automatically use my Windows logon name and password//).\\ {{ en:verejne:sit:wiki:win_manual5_en.png?nolink }}\\ {{ en:verejne:sit:wiki:win_manual6_en.png?nolink }} +
-  - Afterwards, **confirm every window with OK** and connect to the Sincoolka network through the list of Wifi networks.+
  
 +<note important>It is vital to set the CA certificate and domain correctly, to prevent anyone from stealing your login credentials. To ensure your settings are correct, you may use the walkthroughs below.</note>
 +<note tip>If there is a choice to use anonymous identity, we recommend you to do so. Without it, your user name / email will be transferred over-the-air unencrypted, available for anyone around to scoop.</note>
  
-===== iPhone =====+==== Which WiFi network to choose? ==== 
 +We offer several WiFi networks on our infrastructure to choose from: 
 +^ Name (SSID)       ^ 2.4 GHz  ^ 5 GHz    ^ Enterprise network (802.1X)  ^ Fast roaming (802.11r)  ^ Note                                                   ^ 
 +| **Sincoolka FT**  | **Yes**  | **Yes**  | **Yes**                      | **Yes**                 | **Prefer this network for modern devices**             | 
 +| Sincoolka         | Yes      | Yes      | Yes                          | No                      | For old devices experiencing issues with fast roaming  | 
 +| Sincoolka 5G      | No       | Yes      | Yes                          | No                      | For devices needlessly preferring the 2.4GHz band      | 
 +| Sincoolka IoT     | Yes      | Yes      | No                           | No                      | For very old or cheap IoT devices                      | 
 +Regarding speed and latency, there is no difference between these networks. The Sincoolka 5G network is not faster than any other network and it's name is completely unrelated to mobile telephone networks! 
 +===== Installation manuals =====
  
-  - Turn on Wifi and go to Settings -> Wifi.\\ {{ en:verejne:sit:wiki:iphone_connect1_cz.png?nolink&400 }} +{{indexmenu>:en:verejne:sit:wi-fi|tsort nsort}}
-  - Choose //Sincoolka// network.  +
-  - Enter your SINIS login email and password.\\ {{ en:verejne:sit:wiki:iphone_connect2_cz.png?nolink&400 }} +
-  - It is likely that you will be required to verify the server certificate. Check that the server certificate is signed by **TERENA SSL CA 3** and/or that the certificate fingerprint is:\\ +
-CC:77:A0:85:88:CA:0C:F8:89:15:28:FB:3B:1D:70:B2:CA:10:B3:8D\\ +
-//(it is sufficient just to verify first few letters)// and click **Accept or Connect**.+
  
 +===== Things that won't work with our Wi-Fi =====
  
-===== Android =====+  * gaming consoles (Xbox, Playstation, Nintendo Switch, Wii etc.) 
 +  * usual IoT devices (from the familiar kinds of Alexa, through some smart lighbulbs, or [[https://www.geekculture.com/joyoftech/joyarchives/2340.html|internet-connected brooms]])
  
-  - Turn on Wifi and go to Settings -> Wifi. +(as in, people have tried to get them to work and failed, usually because they don't support enterprise networks)
-  - Choose Sincoolka network. A window should open to enter login credentials. +
-  - Check that you have either **PEAP or TTLS** chosen in the //EAP method// field. +
-  - In //Identity//, enter your login email to SINIS and in //Password//, enter your password.. +
-  - Tap //Connect//. +
- +
-===== Linux - Ubuntu, NetworkManager ===== +
- +
-It is usually best to obey the instructions of your network manager. The connection settings might be a bit difficult to fill correctly; thus, the following settings for NetworkManager are recommended: +
- +
-  * **Security**: WPA2-Enterprise +
-  * **Authentication mode**: Protected EAP (PEAP) or TTLS +
-  * MSCHAPv2, or PAP for TTLS +
-  * **CA certificate** can be downloaded [[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-3-crt-crl.html|from CESNET]] (TERENA SSL CA 3). //It is usually required for successful connection.// +
-  * **User name** and **Password** - does not require explanation :-) +
- +
- +
- +
-===== Troubleshooting ===== +
- +
-**I cannot see //Sincoolka// network in the network list anymore. Why?** +
- +
-You have probably been using Sincoolka network before. The security settings might have changed, though. The network will be hidden //at the end of the list//. +
- +
-==== Windows ==== +
- +
-=== Windows 7 === +
- +
-The //Sincoolka// network should appear //at the very end of the networks list//, accompanied by a red cross. Click **Open Network and Sharing Center** link on the bottom of the window, then on **Manage wireless networks** and remove Sincoolka network from the list. Now, open the Wifi networks screen again; Sincoolka should be up and available for connection. +
- +
-=== Windows 8, 8.1, 10 === +
- +
-The //Sincoolka// network should appear //at the very end of the networks list//, accompanied by a white cross in red circle. Select it and click //Connect//, or //Delete// and then again //Connect//. +
- +
-==== Linux ==== +
- +
-In case Network Manager is having issues with the network settings change, you'll need to //Edit connections// and either remove or change the network settings (see recommended settings above). +
- +
-===== Other issues ===== +
- +
-**After entering my credentials, a message appears: "Cannot log in to this network."** +
- +
-Check your school email and password //twice//. It is required to enter whole email address, //including domain//. +
- +
-For Linux machines, you need the CA certificate for verification; download it from [[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-3-crt-crl.html|the CESNET website]] (TERENA SSL CA 3). +
- +
-If you weren't able to solve your issue, please come to LAB during office hours.+
  • en/verejne/sit/wi-fi.1505946909.txt.gz
  • Last modified: 02.06.2020 15:18
  • (external edit)