Eduroam wireless network Apple Mac OSX 10.5

Transcription

1 Eduroam wireless network Apple Mac OSX 0. How to configure laptop computers to connect to the eduroam wireless network Contents university for the creative arts Contents Introduction Prerequisites Instructions for Apple Mac OS X 0. (Leopard) Technical Information Access for visitors to the University for the Creative Arts Access for University for the Creative Arts users visiting other institutions 2 Introduction The University for the Creative Arts offers wireless network access to students using their own or loan laptops across all campuses. A good wireless signal is available in all libraries and in some other areas. Network access is restricted almost exclusively to internet access for normal purposes. These include web browsing, ftp download, imap and pop mailbox access, and instant messaging. The name of the wireless network is eduroam. It is not an open wireless network: a username and password must be supplied. The instructions below tell you how to configure a laptop Mac OS X. In all cases the instructions are for the most recent version of the operating system. If you have an older version, you are encouraged to update it. The next section of this document gives some technical details to help students with laptops running Linux or other operating systems to connect. With these details it should be possible to configure Mac OS 0. to connect to eduroam. Only Windows XP, Vista and Mac OS 0. have been tested: ucreative IT cannot offer help with any other platform. The eduroam network has some further features. It allows enhanced network access to staff using ucreative laptops. It can also be used to give network access here to students and staff from other academic institutions. And it permits University students and staff to access the network at other academic institutions. These features are briefly documented in the final two sections of this document. Prerequisites To access the eduroam wireless network, you need: A laptop equipped with a wireless network card. Many laptops now come with a wireless network card built in make sure you switch this on when you are trying to configure your laptop. You will get best performance from a modern card that supports 802.g, but older cards which support 802.b will also work. Your ucreative login and password. Your ucreative login is the username you use to log in to University computers. It is the same as the first part of your University address and usually consists of one of your initials, followed by your family name, sometimes followed by a number. Somewhere to sit within range of the wireless networks. You should configure your laptop for the first time in one of the libraries, where the wireless signal is good, to avoid the risk that a weak wireless signal may cause the connection to fail.

2 . From the Apple menu, select System Preferences. The System Preferences application opens. 2. Click on the Network icon. The network system preferences are displayed, 3. In the list of interfaces on the left hand side of the Network dialogue box, click AirPort. The System Preferences window changes to show the AirPort configuration. 4. Ensure that AirPort is turned on, and that the Ask to join new networks check box is ticked. The Advanced pane slides in.. Click on the Advanced button. 6. Click the plus sign (+) to add a new preferred network. 2

3 A dialogue box opens. 7. In the Network Name field, type eduroam. 8. Then from the Security drop-down menu, choose WPA Enterprise. The dialogue box expands to show more fields. 9. In the User Name field, type your Ucreative login followed (as per the example). 0. In the Password field type the password for your Ucreative login.. Ensure that the 802.X drop-down menu shows Automatic, and that the Remember this network check box is ticked. 2. Then click Add. The dialogue box will close and you are returned to the previous pane. The list of preferred networks should now include a Network Name eduroam with Security WPA Enterprise. 3. Click OK to return to the main AirPort configuration, then click Apply. Note: If Apply is greyed out or nothing happens when you click on the Apply button, turn AirPort off and on again. 4. To turn off AirPort, click on the small icon on the top right of the Mac menu bar and select Turn AirPort Off.. Click on the AirPort icon one more time and turn it back on. Your computer should now attempt to connect to the eduroam wireless network. After a few seconds, a Verify Certificate dialogue box will open. 6. Click Show Certificate. 3

4 The dialogue box expands to show the certificate details. 7. Tick the check box next to Always trust and then click Continue. A dialogue box may appear informing you that eaptlstrust requires that you type your password. 8. Enter the username and password that you use to log in to your Macintosh, then click OK. Your computer may now appear to be busy, with the multicoloured busy wheel spinning. This is a bug. Move the spinning wheel to the title bar of the Verify Certificate dialogue box, then click, hold and drag to move the Verify Certificate dialogue box to the bottom of the screen. This should reveal a different dialogue box which asks you to type your password to make changes to your Certificate Trust Settings. Enter the username and password that you use to log in to your Macintosh, then click OK. The 802.X Authentication dialogue box opens. 9. The User Name field is already filled in with your Ucreative login 20. Type your Ucreative password in the Password field, ensure that the Only use this password once check box is unticked, then click OK. The main AirPort configuration window in the System Preferences application changes to show that you are connected to the eduroam wireless network. You are now connected to the eduroam wireless network and can close the system preferences application. 4

5 Technical Information The following technical information is to help people running Linux or other operating systems to configure their laptops. The system used to authenticate users and encrypt network traffic on eduroam at ucreative is WPA Enterprise, Wi-Fi Protected Access Enterprise. Other forms of WPA, including WPA-PSK and WPA2- Enterprise are not supported and will not work. WPA Enterprise is a combination of 802.x network access control and wireless encryption techniques. Both AES and TKIP encryption techniques are supported. 802.x relies on EAP, the Extensible Authentication Protocol to authenticate users. PEAPv0/EAP-MSCHAPv2 is used to transmit the ucreative login and password in a secure manner to Active Directory servers for verification. However, in order for laptops to be able to work consistently across eduroam sites, the ucreative login must be provided appended. PEAPv0/EAP-MSCHAPv2 requires that the server doing the authentication identify itself by means of an X.09 electronic certificate in a similar manner to a secure website. The certificate supplied by the ucreative authentication server is signed by the ucreative certification authority. This certification authority will be unknown to all computers except those issued by ucreative IT. Therefore for most operating systems either verification of the certificate must be turned off or the certificate manually installed and trusted. The root certificate for the ucreative certification authority can be downloaded onto computers on the internal wired network from here: Fast Reconnect is not supported and should be disabled. The ucreative implementation of eduroam also supports authentication using EAP-TLS. This method requires that the laptop has a certificate installed, and is only for laptops and other devices supplied by ucreative IT. EAP-TLS will not work with other laptops. Access for visitors to the University for the Creative Arts The University implements JANET Roaming Service Tier 2, documented at: This allows visitors from participating organisations to access the eduroam network here using their own username and password. Visitors should ensure that their eduroam setup is working correctly in their own organisation before travelling. Access for University for the Creative Arts users visiting other institutions Not all academic institutions support eduroam. An up to date list is available at: Students should ensure that their eduroam setup is working correctly here before travelling. They can then log in at other eduroam enabled institutions using their ucreative login and password.