Gemeinsame Systemgruppe IfI/b-it

You are here: aktuelles » en » wifistd

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
en:wifistd [2023-08-08 13:15] Thomas Thielen:wifistd [2024-04-05 08:46] (current) Thomas Thiel
Line 7: Line 7:
 We secured our WiFi Network mainly via TTLS, so make sure you have the necessary root certificate installed and do not forget to check the fingerprints of the used Certificates. Here are the current fingerprints: We secured our WiFi Network mainly via TTLS, so make sure you have the necessary root certificate installed and do not forget to check the fingerprints of the used Certificates. Here are the current fingerprints:
  
-Current Certificate:+Current Certificates: 
 + 
 +radius.informatik.uni-bonn.de:
  
 ^ Hashtype ^ Fingerprint ^ ^ Hashtype ^ Fingerprint ^
-| MD5     71:90:A7:2A:B3:51:4B:0A:1F:31:37:45:BE:3D:0E:00 +| MD5    F7:EC:1C:AE:61:E9:C4:C4:FA:62:73:8E:2B:CF:43:CB 
-| SHA1    50:1A:A7:0A:22:66:BB:39:DA:4C:5D:6B:5B:16:BE:D3:F3:CD:4E:E8 +| SHA1   | 1A:E2:06:9A:2A:88:9E:5D:63:A4:82:EC:2A:79:3C:76:81:8B:1D:A9 
-| SHA256  78:1A:00:C3:E5:19:E5:75:B6:DF:F9:73:2A:E5:9D:D0:F5:48:D8:C0:7D:B2:88:DE:F5:16:26:89:71:0C:8D:CD |+| SHA256 | B9:EC:FB:DD:FF:50:AC:10:D2:56:E5:00:FC:33:B0:31:B3:95:2E:76:B3:DF:65:C1:E2:2B:3A:53:D4:3A:3B:58 |
 \\ \\
 +
 +All certificates are signed by "GEANT OV RSA CA 4", GEANT Vereniging, NL.
 +
 === Generic Parameters === === Generic Parameters ===
  
Line 24: Line 29:
 | Keytype                                            | AES                                                        |  | Keytype                                            | AES                                                        | 
 | Phase 2 Authentification                           | PAP                                                        | | Phase 2 Authentification                           | PAP                                                        |
-Root Certificate                                   | [[https://gsg.cs.uni-bonn.de/files/chainGEANT.crt|GEANT OV RSA CA 4]] | +CA Certificate                                     use system certificates (or [[https://gsg.cs.uni-bonn.de/files/chainGEANT.crt|GEANT OV RSA CA 4]] if this does not work for you) 
-| valid CN (Common Name) Radius-Server Certificates ise0.informatik.uni-bonn.de                                |+| valid CN (Common Name) Radius-Server Certificates radius.informatik.uni-bonn.de                      |
 | Anonymous Identity                                 | anonymous@(bit%%|%%informatik)((only use your domain here, i.e anonymous@bit.uni-bonn.de for b-it accounts or anonymous@informatik.uni-bonn.de for C.S. Dept. Accounts. Use anonymous@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wifi password]].)).uni-bonn.de                    | | Anonymous Identity                                 | anonymous@(bit%%|%%informatik)((only use your domain here, i.e anonymous@bit.uni-bonn.de for b-it accounts or anonymous@informatik.uni-bonn.de for C.S. Dept. Accounts. Use anonymous@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wifi password]].)).uni-bonn.de                    |
 | Identity                                           | username@(bit%%|%%informatik)((only use your domain here, i.e username@bit.uni-bonn.de for b-it accounts or username@informatik.uni-bonn.de for C.S. Dept. Accounts. Use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wifi password]]. Please do not forget to substitute username with YOUR username!)).uni-bonn.de                     | | Identity                                           | username@(bit%%|%%informatik)((only use your domain here, i.e username@bit.uni-bonn.de for b-it accounts or username@informatik.uni-bonn.de for C.S. Dept. Accounts. Use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wifi password]]. Please do not forget to substitute username with YOUR username!)).uni-bonn.de                     |
 | Domain (Android 11)                                | informatik.uni-bonn.de | | Domain (Android 11)                                | informatik.uni-bonn.de |
-| Authentification Server                            | ise0.informatik.uni-bonn.de, radius.informatik.uni-bonn.de |+| Authentification Server                            | radius.informatik.uni-bonn.de |
  
 === Windows 10 and above === === Windows 10 and above ===
  
 If you want to use our wifi network on your Windows System (for all releases starting with Windows Vista), ​we provide a  If you want to use our wifi network on your Windows System (for all releases starting with Windows Vista), ​we provide a 
-[[http://​gsg.bit.uni-bonn.de/files/add-802.1X.zip|helper script]] to assist you in this endeavor. Just download it, extract the compressed directory, and start the file add-wifi.bat within with a double click or by using a command prompt. This script will install the wifi profile bitinf.xml, so that you will see the network "Informatik/​b-it (802.1X)"​ in your network list afterwards. +[[https://​gsg.bit.uni-bonn.de/files/add-802.1X.zip|helper script]] to assist you in this endeavor. Just download it, extract the compressed directory, and start the file add-wifi.bat within with a double click or by using a command prompt. This script will install the wifi profile bitinf.xml, so that you will see the network "Informatik/​b-it (802.1X)"​ in your network list afterwards. 
  
 After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wlan password]].) and of course your password. Please verify the server certificate against the fingerprints issued on the top of this page. After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wlan password]].) and of course your password. Please verify the server certificate against the fingerprints issued on the top of this page.
Line 42: Line 47:
 Users of windows 7 do not have the luxury of native TTLS Support, so it has to be provided by an external supplicant. One of these supplicants is GEANTLink, which is part of the [[https://cat.eduroam.org/|eduroam CAT Tool]], which is used to prepare your system for eduroam usage. If you do not want to use eduroam at all, you can install a standalone version of GEANTLink by downloading one of their official binaries from [[https://github.com/Amebis/GEANTLink/releases|here]].  Users of windows 7 do not have the luxury of native TTLS Support, so it has to be provided by an external supplicant. One of these supplicants is GEANTLink, which is part of the [[https://cat.eduroam.org/|eduroam CAT Tool]], which is used to prepare your system for eduroam usage. If you do not want to use eduroam at all, you can install a standalone version of GEANTLink by downloading one of their official binaries from [[https://github.com/Amebis/GEANTLink/releases|here]]. 
  
-After the installation of GEANTLink using one of the methods specified above, we provide a [[http://gsg.bit.uni-bonn.de/files/add-802.1X-windows7.zip|Hilfsprogramm]] to assist you in configure the 802.1X wifi-profile. Just download it, extract the compressed directory, and start the file add-wifi-windows7.bat within with a doubleclick or by using a command prompt. This script will install the wifi profile bitinf-windows7.xml, so that you will see the network "Informatik/b-it (802.1X)" in your network list afterwards.+After the installation of GEANTLink using one of the methods specified above, we provide a [[https://gsg.bit.uni-bonn.de/files/add-802.1X-windows7.zip|helper script]] to assist you in configure the 802.1X wifi-profile. Just download it, extract the compressed directory, and start the file add-wifi-windows7.bat within with a doubleclick or by using a command prompt. This script will install the wifi profile bitinf-windows7.xml, so that you will see the network "Informatik/b-it (802.1X)" in your network list afterwards.
  
 After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wlan password]].) and of course your password. After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wlan password]].) and of course your password.
  
 === Android === === Android ===
 +
 +{{ :de:android12.jpg?direct&300| }}
  
 For recent Android versions (>4.0), the configuration of wifi at the computer science dept. is rather simple. Just connect to the SSID “802.1X” and fill in the configuration dialog with the Values from the table [[#Generic Parameters|above]] (-> Generic Parameters). For recent Android versions (>4.0), the configuration of wifi at the computer science dept. is rather simple. Just connect to the SSID “802.1X” and fill in the configuration dialog with the Values from the table [[#Generic Parameters|above]] (-> Generic Parameters).
Line 53: Line 60:
  
 === MacOS/IOS === === MacOS/IOS ===
 +[[ :en:macos8021xstepbystep|Click here for a step-by-step installation guide for MacOS ]]  \\  
 +[[ :en:ios8021xstepbystep|Click here for a step-by-step installation guide for iOS ]]  
 +\\
 For all Apple products which do not support configuring wifi connection parameters manually, we provide a connection-profile for your convenience: For all Apple products which do not support configuring wifi connection parameters manually, we provide a connection-profile for your convenience:
  
 ^ Apple Mobile config Profile: | [[https://gsg.cs.uni-bonn.de/files/bitinf.mobileconfig|bitinf.mobileconfig]] |\\ ^ Apple Mobile config Profile: | [[https://gsg.cs.uni-bonn.de/files/bitinf.mobileconfig|bitinf.mobileconfig]] |\\
 \\ \\
 +