r11 - 02 Nov 2012 - 15:42:28 - JacobElaYou are here: TWiki >  CSDocs Web  > WirelessNetwork1x

CSL 1x Wireless Network (COMPSCI)

Introduction

802.1x is a method of authenticating network connections. Using it instead of a web based authentication allows your device to transparently reauthenticate after saving your credentials. You may need to clear out the old COMPSCI network from your wireless settings if you've used the wireless before the switchover in July, 2011.

Network Details

  • SSID: COMPSCI
  • Security: WPA2-Enterprise (WPA2 with 802.1x authentication)
  • Encription: PEAP
  • Phase 2 Authentication: MSCHAPv2
  • Authentication is via your CS username and Password

Your password will only work with 802.1x if you have set it since the beginning of the year, 2011. How to change your password

How-Tos

Because we are putting together this documentation before rollout, the screenshots refer to CSTest instead of COMPSCI.

If you have screenshots for operating systems not shown here, feel free to e-mail them to lab@cs.wisc.edu to help us improve our documentation.

Windows

Windows 7

  • Click on the wireless network icon in the system tray and click the "COMPSCI" network
  • Windows will prompt for your CS username and password
  • Windows will ask about the server certificate. If you click the down arrow by "Details" in the lower left hand corner, you will see that it is for the radius server, wifi.cs.wisc.edu and the root CA is "AddTrust External CA Root". Click Connect. If the authentication times out it may ask you for your username and password again.

If these steps don't seem to work, there could be a few things interfering.

  • Open up the Network and Sharing Center by right clicking on the wireless icon in the system tray and selecting "Open Network and Sharing Center"
  • Go to "manage wireless networks", listed in the left hand side panel.
  • Look for any listing of "COMPSCI". If you think it is from before July 2011, remove it and try the steps listed above again. Otherwise, double click on it to check the advanced settings
  • In the "Connection" tab, preferred settings are:
    • Check "Connect automatically when this network is in range
    • Uncheck "Connect to a more preferred network if available
    • Uncheck "Connect even if the network is not broadcasting its name (SSID)"
  • In the "Security" tab, Required settings are:
    • Security Type: "WPA2-Enterprise"
    • Encryption type: AES
    • Choose a network authentication method: "Microsoft: Protected EAP (PEAP)"
    • If this is a personal computer, you may check "Remember my credentials for this connection each time I'm logged on".
    • Click on the "Settings" button next to the network authentication method
      • Check "Validate server certificate"
      • Check "Connect to these servers" and type in "wifi.cs.wisc.edu"
      • In "Trusted Root Certification Authorities:", select only "AddTrust External CA Root". If this does not appear, use another internet connection and verify that you have all of the latest Windows updates.
      • You may uncheck "Do not prompt user to authorize new servers or trusted certification authorities", but remember that we will not change the authentication server without first announcing it.
      • In "Select Authentication Method", select "Secured password (EAP-MSCHAP v2)" and click "Configure"
        • Uncheck "Automatically use my Windows logon name and password" and click ok, since your personal computer's username and password are unlikely to match your CS username and password. Remember that you already checked "remember my credentials" earlier and will only need to type your username and password once.
      • Back in the Protected EAP Properties:
      • Check "Enable Fast Reconnect"
      • uncheck the last 3 checkboxes and click ok
    • Back in the "COMPSCI Wireless Network Properties" dialog, click "Advanced Settings"
      • Check "Specify Authentication mode:" and select "User Authentication"

If these steps don't get you a working wireless connection, please e-mail the lab, lab@cs.wisc.edu, and we will be able to look through the logs to help troubleshoot your connection issue.

Windows XP

Windows XP Service Pack 3 includes 802.1x, and while it is possible to get it with earlier service packs, we only support SP3.

  • We don't have a Win XP computer available to make a step by step how to yet, but the steps will likely be somewhat similar to the Windows 7 steps after you start manually defining the wireless network.

Linux

Using Network Manager (Gnome 2/3, Ubuntu Unity, etc)

  • Go to the wireless network list in your system tray (Usually the upper righthand corner of the screen) and select "COMPSCI" from the list.
Gnome3-1.png
  • Select wireless security "WPA & WPA2 Enterprise", select authentication "Protected EAP (PEAP)", select inner authentication "MSCHAPv2", and enter your CS Username and password
Gnome3-2.png
  • Select "Don't warn me again" from the "No Certificate Authority certificate chosen" dialog.
Gnome3-3.png

Mac OSX

These screenshots show "CSTest" where you will see "COMPSCI" on your device.

  • Select "COMPSCI" from the wireless network list
  • You will be prompted for your CS Username and password
MacOSX-1.png
  • If asked about the certificate for wifi.cs.wisc.edu This is a known issue that will be fixed soon.
MacOSX-2.png
  • You may be asked to confirm your password for the Certificate Trust Settings
MacOSX-3.png
  • This is what your network control panel should show after you connect
MacOSX-4.png MacOSX-5.png MacOSX-6.png

iPad / iPod iOS4

These screenshots show "CSTest" where you will see "COMPSCI" on your device.

  • Select "COMPSCI" from the wireless network list
iPad-1.PNG
  • You will be prompted for your CS Username and password
iPad-2.PNG
  • If asked about the certificate for wifi.cs.wisc.edu, click Accept. This is a known issue that will be fixed soon.
iPad-3.PNG

Android

Android 2.2

These screenshots show "CSTest" where you will see "COMPSCI" on your device.

  • Go to the Wi-Fi Settings page
  • Select "COMPSCI" from the wireless network list
  • Select "Yes" if asked if you want to connect to "COMPSCI"
Android22-1.png
  • Select EAP Method "PEAP", Phase 2 authentication "MSCHAPv2", and no certificates. Then scroll down
Android22-2.png
  • Enter your CS Username into the Identity field and your CS Password in the Key(Passphrase) field and click "Connect"
Android22-3.png

Android 2.3

  • Go to the Wi-Fi Settings page
  • Select "COMPSCI" from the wireless network list
  • Select EAP Method "PEAP", Phase 2 authentication "MSCHAPv2", and no certificates. Then scroll down
Android23-1.png
  • Enter your CS Username into the Identity field and your CS Password in the Password field and click "Connect"
Android23-2.png

Android 3.x

  • Go to the Wi-Fi Settings page
  • Select "COMPSCI" from the wireless network list
  • Select EAP Method "PEAP", Phase 2 authentication "MSCHAPv2", and no certificates.
  • Enter your CS Username into the Identity field and your CS Password in the Password field and click "Connect"
android31.png
Edit | Attach | Printable | Raw View | Backlinks: Web, All Webs | History: r11 < r10 < r9 < r8 < r7 | More topic actions
 
CSL Home
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback