Gemeinsame Systemgruppe IfI/b-it

You are here: aktuelles » en » wifistd

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
en:wifistd [2024-03-29 12:44] Thomas Thielen:wifistd [2024-05-10 14:32] (current) Thomas Thiel
Line 1: Line 1:
-==== WiFi Access ====+===== WiFi Access =====
  
 Everyone who is in possession of valid login credentials to central systems of the c.s. dept. or the b-it has the opportunity to use our wifi networks to access the local resources and of course the internet. Please follow the instructions provided here to gain access to the wifi network. Everyone who is in possession of valid login credentials to central systems of the c.s. dept. or the b-it has the opportunity to use our wifi networks to access the local resources and of course the internet. Please follow the instructions provided here to gain access to the wifi network.
Line 9: Line 9:
 Current Certificates: Current Certificates:
  
-ise0.informatik.uni-bonn.de:+radius.informatik.uni-bonn.de:
  
 ^ Hashtype ^ Fingerprint ^ ^ Hashtype ^ Fingerprint ^
-| MD5     | 71:90:A7:2A:B3:51:4B:0A:1F:31:37:45:BE:3D:0E:00 | +| MD5    | F7:EC:1C:AE:61:E9:C4:C4:FA:62:73:8E:2B:CF:43:CB 
-| SHA1    50:1A:A7:0A:22:66:BB:39:DA:4C:5D:6B:5B:16:BE:D3:F3:CD:4E:E8 | +| SHA1   1A:E2:06:9A:2A:88:9E:5D:63:A4:82:EC:2A:79:3C:76:81:8B:1D:A9 
-| SHA256  | 78:1A:00:C3:E5:19:E5:75:B6:DF:F9:73:2A:E5:9D:D0:F5:48:D8:C0:7D:B2:88:DE:F5:16:26:89:71:0C:8D:CD | +| SHA256 | B9:EC:FB:DD:FF:50:AC:10:D2:56:E5:00:FC:33:B0:31:B3:95:2E:76:B3:DF:65:C1:E2:2B:3A:53:D4:3A:3B:58 |
-\\ +
- +
-ise1.informatik.uni-bonn.de: +
- +
-^ Hashtype ^ Fingerprint ^ +
-| MD5    | 57:0F:64:CA:E3:44:C4:BB:6D:C2:78:C9:55:14:46:4D | +
-| SHA1   | 03:8E:CB:86:32:B4:1E:73:61:2E:46:E7:EE:34:07:4B:D1:DD:96:78 | +
-| SHA256 | D1:F3:65:8B:1C:51:4D:1C:18:51:EB:39:93:F4:42:05:C3:9F:DB:EE:85:16:62:19:BD:60:A2:87:69:BC:EE:43 +
-\\ +
- +
-ise2.informatik.uni-bonn.de: +
- +
-^ Hashtype ^ Fingerprint ^ +
-| MD5    | 19:8D:22:5C:58:26:7D:11:26:73:F3:4D:9B:75:C6:F9 +
-| SHA1   7C:F9:70:F6:3F:6E:8A:79:03:FD:AF:09:D3:79:29:89:42:3F:30:5E +
-| SHA256 | E9:F0:1A:0D:28:BA:9B:BF:0F:D5:E6:B4:64:85:15:E4:2D:C7:63:53:8D:9C:82:37:2F:EE:90:CB:46:62:97:7D |+
 \\ \\
  
 All certificates are signed by "GEANT OV RSA CA 4", GEANT Vereniging, NL. All certificates are signed by "GEANT OV RSA CA 4", GEANT Vereniging, NL.
  
-=== Generic Parameters ===+==== Generic Parameters ====
  
 Please use the following connection parameters: Please use the following connection parameters:
Line 46: Line 30:
 | Phase 2 Authentification                           | PAP                                                        | | Phase 2 Authentification                           | PAP                                                        |
 | CA Certificate                                     | use system certificates (or [[https://gsg.cs.uni-bonn.de/files/chainGEANT.crt|GEANT OV RSA CA 4]] if this does not work for you) | | CA Certificate                                     | use system certificates (or [[https://gsg.cs.uni-bonn.de/files/chainGEANT.crt|GEANT OV RSA CA 4]] if this does not work for you) |
-| valid CN (Common Name) Radius-Server Certificates ise1.informatik.uni-bonn.de, ise2.informatik.uni-bonn.de                      |+| valid CN (Common Name) Radius-Server Certificates radius.informatik.uni-bonn.de                      |
 | Anonymous Identity                                 | anonymous@(bit%%|%%informatik)((only use your domain here, i.e anonymous@bit.uni-bonn.de for b-it accounts or anonymous@informatik.uni-bonn.de for C.S. Dept. Accounts. Use anonymous@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wifi password]].)).uni-bonn.de                    | | Anonymous Identity                                 | anonymous@(bit%%|%%informatik)((only use your domain here, i.e anonymous@bit.uni-bonn.de for b-it accounts or anonymous@informatik.uni-bonn.de for C.S. Dept. Accounts. Use anonymous@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wifi password]].)).uni-bonn.de                    |
 | Identity                                           | username@(bit%%|%%informatik)((only use your domain here, i.e username@bit.uni-bonn.de for b-it accounts or username@informatik.uni-bonn.de for C.S. Dept. Accounts. Use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wifi password]]. Please do not forget to substitute username with YOUR username!)).uni-bonn.de                     | | Identity                                           | username@(bit%%|%%informatik)((only use your domain here, i.e username@bit.uni-bonn.de for b-it accounts or username@informatik.uni-bonn.de for C.S. Dept. Accounts. Use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wifi password]]. Please do not forget to substitute username with YOUR username!)).uni-bonn.de                     |
 | Domain (Android 11)                                | informatik.uni-bonn.de | | Domain (Android 11)                                | informatik.uni-bonn.de |
-| Authentification Server                            | ise1.informatik.uni-bonn.de, ise2.informatik.uni-bonn.de, radius.informatik.uni-bonn.de |+| Authentification Server                            | radius.informatik.uni-bonn.de |
  
-=== Windows 10 and above ===+==== Windows 10 and above ====
  
 If you want to use our wifi network on your Windows System (for all releases starting with Windows Vista), ​we provide a  If you want to use our wifi network on your Windows System (for all releases starting with Windows Vista), ​we provide a 
Line 59: Line 43:
 After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wlan password]].) and of course your password. Please verify the server certificate against the fingerprints issued on the top of this page. After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wlan password]].) and of course your password. Please verify the server certificate against the fingerprints issued on the top of this page.
  
-=== Windows 7 ===+==== Windows 7 ====
  
 Users of windows 7 do not have the luxury of native TTLS Support, so it has to be provided by an external supplicant. One of these supplicants is GEANTLink, which is part of the [[https://cat.eduroam.org/|eduroam CAT Tool]], which is used to prepare your system for eduroam usage. If you do not want to use eduroam at all, you can install a standalone version of GEANTLink by downloading one of their official binaries from [[https://github.com/Amebis/GEANTLink/releases|here]].  Users of windows 7 do not have the luxury of native TTLS Support, so it has to be provided by an external supplicant. One of these supplicants is GEANTLink, which is part of the [[https://cat.eduroam.org/|eduroam CAT Tool]], which is used to prepare your system for eduroam usage. If you do not want to use eduroam at all, you can install a standalone version of GEANTLink by downloading one of their official binaries from [[https://github.com/Amebis/GEANTLink/releases|here]]. 
Line 67: Line 51:
 After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wlan password]].) and of course your password. After the installation you just have to issue your username (including the correct domain, i.e. username@informatik.uni-bonn.de for the c.s. dept. or username@bit.uni-bonn.de. Please use username@wlan.informatik.uni-bonn.de for the [[en:wifialt|alternative wlan password]].) and of course your password.
  
-=== Android ===+==== Android ====
  
 {{ :de:android12.jpg?direct&300| }} {{ :de:android12.jpg?direct&300| }}
Line 75: Line 59:
 If your system cannot use the root certificates installed to verify the wifi certificate, you have to download the necessary root certificate via mobile network and install it as a wifi Certificate. Do not install it as a VPN certificate, it will not be available to you for wifi configuration! If your system cannot use the root certificates installed to verify the wifi certificate, you have to download the necessary root certificate via mobile network and install it as a wifi Certificate. Do not install it as a VPN certificate, it will not be available to you for wifi configuration!
  
-=== MacOS/IOS ===+==== MacOS/IOS ====
 [[ :en:macos8021xstepbystep|Click here for a step-by-step installation guide for MacOS ]]  \\  [[ :en:macos8021xstepbystep|Click here for a step-by-step installation guide for MacOS ]]  \\ 
 [[ :en:ios8021xstepbystep|Click here for a step-by-step installation guide for iOS ]]  [[ :en:ios8021xstepbystep|Click here for a step-by-step installation guide for iOS ]] 
 \\ \\
-For all Apple products which do not support configuring wifi connection parameters manually, we provide connection-profile for your convenience:+For all Apple products which do not support configuring wifi connection parameters manually, we provide connection profiles for your convenience. Please select the matching type of profile (pick the first one if unsure):
  
-^ Apple Mobile config Profile: | [[https://gsg.cs.uni-bonn.de/files/bitinf.mobileconfig|bitinf.mobileconfig]] |\\+^ Apple Configuration Profile for Computer Science Accounts: | [[https://gsg.cs.uni-bonn.de/files/802.1X-ifi.mobileconfig|802.1X-ifi.mobileconfig]] |\\ 
 +^ Apple Configuration Profile for the [[en:wifialt|alternate WiFi Authentification]]: | [[https://gsg.cs.uni-bonn.de/files/802.1X-ifi-altwifi.mobileconfig|802.1X-ifi-altwifi.mobileconfig]] |\\ 
 +^ Apple Configuration Profile for b-it accounts: | [[https://gsg.cs.uni-bonn.de/files/802.1X-bit.mobileconfig|802.1X-bit.mobileconfig]] |\\
 \\ \\