Gemeinsame Systemgruppe IfI/b-it

This translation is older than the original page and might be outdated. See what has changed.
Translations of this page:

You are here: aktuelles » en » wifistd

En:wifistd

This is an old revision of the document!


WiFi Access

Everyone who is in possession of valid login credentials to central systems of the c.s. dept. or the b-it has the opportunity to use our wifi networks to access the local resources and of course the internet. Please follow these instructions to gain access to the wifi network.

We secured our WiFi Network mainly via TTLS, so make sure you have the necessary root certificate installed and do not forget to check the fingerprints of the used Certificates. Here are the current fingerprints:

Hashtype Fingerprint
MD5 E9:74:DF:DD:31:79:14:64:39:D7:40:0A:16:9E:52:90
SHA1 E9:08:6B:2D:FA:14:B5:22:96:2F:94:A8:C4:BA:7F:3D:DC:8A:BD:5F
SHA256 FF:97:23:3A:F7:A3:A1:F1:ED:91:94:00:72:6A:48:5C:FE:39:F4:42:42:53:CC:ED:72:30:2E:74:AF:A5:43:79

Generic Parameters

Please use the following connection parameters:

Parameter Value
SSID 802.1X
WPA-Type WPA2 Enterprise
EAP-Method TTLS
Keytype AES
Phase 2 Authentification PAP
Root Certificate T-TeleSec GlobalRoot Class 2
valid CN (Common Name) Radius-Server Certificates ise0.informatik.uni-bonn.de
Anonymous Identity anonymous@(bit|informatik)1).uni-bonn.de
Identity username@(bit|informatik)2).uni-bonn.de
Authentification Server ise0.informatik.uni-bonn.de, radius.informatik.uni-bonn.de

Windows Vista and above

If you want to use our wifi network on your Windows System (for all releases starting with Windows Vista), ​we provide a helper script to assist you in this endeavour. Just download it, extract the compressed directory, and start the file add-wifi.bat within with a doubleclick or by using a command prompt. This script will install the wifi profile bitinf.xml, so that you will see the network “Informatik/​b-it (802.1X)“​ in your network list afterwards.

After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the alternative wlan password.) and of course your password. Please verify the server certificate against the fingerprints issued on the top of this page.

Windows 7

Users of windows 7 do not have the luxury of native TTLS Support, so it has to be provided by an external supplicant. One of these supplicants is GEANTLink, which is part of the eduroam CAT Tool, which is used to prepare your system for eduroam usage. If you do not want to use eduroam at all, you can install a standalone version of GEANTLink by downloading one of their official binaries from here.

After the installation of GEANTLink using one of the methods specified above, we provide a helper script to assist you in configure the 802.1X wifi-profile. Just download it, extract the compressed directory, and start the file add-wifi-windows7.bat within with a doubleclick or by using a command prompt. This script will install the wifi profile bitinf-windows7.xml, so that you will see the network “Informatik/b-it (802.1X)” in your network list afterwards.

After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the alternative wlan password.) and of course your password.

Android

For recent Android versions (>4.0), the configuration of wifi at the computer science dept. is rather simple. Just connect to the SSID “802.1X” and fill in the configuration dialog with the Values from the table above (→ Generic Parameters).

If your system cannot use the root certificates installed to verify the wifi certificate, you have to download the necessary root certificate via mobile network and install it as a wifi Certificate. Do not install it as a VPN certificate, it will not be available to you for wifi configuration!

MacOS/IOS

For all Apple products which do not support configuring wifi connection parameters manually, we provide a connection-profile for your convenience:

Apple Mobile config Profile: bitinf.mobileconfig


1)
only use your domain here, i.e anonymous@bit.uni-bonn.de for b-it accounts or anonymous@informatik.uni-bonn.de for C.S. Dept. Accounts. Use anonymous@wlan.informatik.uni-bonn.de for the alternative wifi password.
2)
only use your domain here, i.e username@bit.uni-bonn.de for b-it accounts or username@informatik.uni-bonn.de for C.S. Dept. Accounts. Use username@wlan.informatik.uni-bonn.de for the alternative wifi password. Please do not forget to substitute username with YOUR username!