Eduroam wireless network Windows Vista

Transcription

1 Eduroam wireless network Windows Vista university for the creative arts How to configure laptop computers to connect to the eduroam wireless network Contents Contents Introduction Prerequisites Instructions for Microsoft Windows Vista Technical Information Access for visitors to the University for the Creative Arts Access for University for the Creative Arts users visiting other institutions 2 Introduction The University for the Creative Arts offers wireless network access to students using their own or loan laptops across all campuses. A good wireless signal is available in all libraries and in some other areas. Network access is restricted almost exclusively to internet access for normal purposes. These include web browsing, ftp download, imap and pop mailbox access, and instant messaging. The name of the wireless network is eduroam. It is not an open wireless network: a username and password must be supplied. The instructions below tell you how to configure a laptop running Microsoft Vista. In all cases the instructions are for the most recent version of the operating system. If you have an older version, you are encouraged to update it. The next section of this document gives some technical details to help students with laptops running Linux or other operating systems to connect. With these details it should be possible to configure most modern operating systems to connect to eduroam. However, only Windows XP, Vista and Mac OS 0.5 have been tested: ucreative IT cannot offer help with any other platform. The eduroam network has some further features. It allows enhanced network access to staff using ucreative laptops. It can also be used to give network access here to students and staff from other academic institutions. And it permits University students and staff to access the network at other academic institutions. These features are briefly documented in the final two sections of this document. Prerequisites To access the eduroam wireless network, you need: A laptop equipped with a wireless network card. Many laptops now come with a wireless network card built in make sure you switch this on when you are trying to configure your laptop. You will get best performance from a modern card that supports 802.g, but older cards which support 802.b will also work. Your ucreative login and password. Your ucreative login is the username you use to log in to University computers. It is the same as the first part of your University address and usually consists of one of your initials, followed by your family name, sometimes followed by a number. Somewhere to sit within range of the wireless networks. You should configure your laptop for the first time in one of the libraries, where the wireless signal is good, to avoid the risk that a weak wireless signal may cause the connection to fail.

2 . From the Start menu, select Control Panel. The Control Panel opens. If the Control Panel is in category view, click Switch to Classic View to go to Classic View. 2. Double-click Network and Sharing Center. The Network and Sharing Center opens. 3. Click Manage wireless networks under Tasks on the left hand side of the window. The Manage Wireless Networks window opens. 4. Click Add to add a wireless network. A wizard opens. 5. Click Manually create a network profile. The wizard moves forward a screen, prompting you to enter information for the wireless network you want to add. 6. In the Network name field, type eduroam.. From the Security type drop-down menu, select WPAEnterprise. 8. From the Encryption type drop-down menu, select AES. 9. Leave the Security Key/ Passphrase field empty. 0. Ensure that the two check boxes on this wizard screen are unticked.. Then click Next. 2

3 The wizard adds the eduroam wireless network and moves on to the next screen. 2. Click Change connections settings. The eduroam Wireless Network properties dialogue box opens. 3. Select the Security tab. 3

4 4. From the Security type drop-down menu, select WPA-Enterprise. 5. From the Encryption type drop-down menu, select AES. 6. From the drop-down menu under Choose a network authentication method choose Protected EAP (PEAP).. Ensure that the check box next to Cache user information is ticked. 8. Then click Settings... The Protected EAP Properties dialogue box opens. 9. Ensure that all check boxes on this dialogue box are unticked. 20. Select Secured password (EAP-MSCHAP v2) from the Select Authentication Method dropdown menu. 2. Then click Configure. The EAP MSCHAPv2 Properties dialogue box opens. 22. Ensure that the check box on this dialogue box is unticked. 23. Click OK on, then OK on the Protected EAP Properties dialogue box to return to the eduroam Wireless network properties dialogue box. Then click OK to return to the wizard. 4

5 24. Click Connect to... The wizard moves on to a screen listing available wireless networks. Select eduroam and click Connect. The dialogue box screen changes, informing you that additional log on information is required to connect to this network. 25. Click Enter/select additional log on information. The Enter Credentials dialogue box opens. 26. In the User name field, type your ucreative login followed Your ucreative login is the username you use to log in to University computers. It is the same as the first part of your University address and usually consists of one of your initials, followed by your family name, sometimes followed by a number. In the Password field type the password for your ucreative login. Leave the Logon domain field blank. 2. Then click OK. 5

6 Your computer will now try to connect to the eduroam wireless network with the username and password you have supplied. If it is successful, a dialogue box appears to inform you. You are now connected to the eduroam wireless network. 28. Click Close to close the dialogue box. 6

7 Technical Information The following technical information is to help people running Linux or other operating systems to configure their laptops. The system used to authenticate users and encrypt network traffic on eduroam at ucreative is WPA Enterprise, Wi-Fi Protected Access Enterprise. Other forms of WPA, including WPA-PSK and WPA2- Enterprise are not supported and will not work. WPA Enterprise is a combination of 802.x network access control and wireless encryption techniques. Both AES and TKIP encryption techniques are supported. 802.x relies on EAP, the Extensible Authentication Protocol to authenticate users. PEAPv0/EAP-MSCHAPv2 is used to transmit the ucreative login and password in a secure manner to Active Directory servers for verification. However, in order for laptops to be able to work consistently across eduroam sites, the ucreative login must be provided appended. PEAPv0/EAP-MSCHAPv2 requires that the server doing the authentication identify itself by means of an X.509 electronic certificate in a similar manner to a secure website. The certificate supplied by the ucreative authentication server is signed by the ucreative certification authority. This certification authority will be unknown to all computers except those issued by ucreative IT. Therefore for most operating systems either verification of the certificate must be turned off or the certificate manually installed and trusted. The root certificate for the ucreative certification authority can be downloaded onto computers on the internal wired network from here: Fast Reconnect is not supported and should be disabled. The ucreative implementation of eduroam also supports authentication using EAP-TLS. This method requires that the laptop has a certificate installed, and is only for laptops and other devices supplied by ucreative IT. EAP-TLS will not work with other laptops. Access for visitors to the University for the Creative Arts The University implements JANET Roaming Service Tier 2, documented at: This allows visitors from participating organisations to access the eduroam network here using their own username and password. Visitors should ensure that their eduroam setup is working correctly in their own organisation before travelling. Access for University for the Creative Arts users visiting other institutions Not all academic institutions support eduroam. An up to date list is available at: Students should ensure that their eduroam setup is working correctly here before travelling. They can then log in at other eduroam enabled institutions using their ucreative login and password.