Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision |
public:wifimenu [2017-09-22 11:24] – vesely | public:wifimenu [2024-05-10 10:31] – vesely |
---|
---- | ---- |
| |
<faicon fa fa-download>** You can {{:public:wifiguide:one-pager_wifi_at_cerge-ei_1.pdf|view or download}} brief Wi-Fi connection guide.** | <faicon fa fa-download>** You can {{:public:public:one-pager_wifi_at_cerge-ei.pdf|view or download}} brief Wi-Fi connection guide (libairfree, residents).** |
| |
---- | ---- |
| |
There are three wireless networks at CERGE-EI. Their purpose is more or less complementary: | There are four wireless networks at CERGE-EI. Their purpose is more or less complementary: |
| |
==== Wi-Fi network SSID 'libairfree' ==== | ^SSID^Meant for^Allow acces to^How to gain access| |
| | <font inherit/inherit;;#8e44ad;;inherit>**eduroam**</font> |academic comunity|internet|get eduroam account from the respective academic institution| |
| | <font inherit/inherit;;#336633;;inherit>**residents**</font> |users affiliated with CERGE-EI|internet and printing|register at wifi.cerge-ei.cz with the official email and get password| |
| | <font inherit/inherit;;#66cc33;;inherit>**libairfree**</font> |3rd party / non academic guests|internet (commercial)|enter username / password(*) at captive portal after connection is made| |
| | <font inherit/inherit;;#d35400;;inherit>**cerge-ei**</font> |institutional computers only|internet and internal|must have institutional computer| |
| |
<faicon fa fa-info-circle> **The Wi-Fi network LIBAIRFREE serves for Internet access via simple web authentication and is intended mainly for guests.** | ===== Wi-Fi 'libairfree' ===== |
| |
* After your device is connected, start device's web browser and enter username and password. \\ //(Hint: if you are not redirected to authentication web page, use [[https://wlcwa.cerge-ei.cz|https://wlcwa.cerge-ei.cz]] or use IP [[http://1.1.1.2|http://1.1.1.2]] )// | <faicon fa fa-info-circle> **The Wi-Fi network LIBAIRFREE serves for Internet access via simple web authentication and is intended mainly for guests not affiliated with the academic comunity.** |
* Username and password for authentication can be obtained at the CERGE-EI Library (Ground floor). | |
| * After your device is connected, start device's web browser and enter username and password. \\ //Hint: if you are not redirected to authentication web page, use [[https://wlcwa.cerge-ei.cz|https://wlcwa.cerge-ei.cz]] \\ (or use IP [[https://1.1.1.2|https://1.1.1.2]] - you must confirm security exception to use untrusted certificate in this case////)// |
| * (*) **Username and password** for authentication: |
| * can be obtained at the CERGE-EI Library (Ground floor), |
| * generally used username: "**cerge**" password starts with "**w**" :-) |
| * Password for username "cerge" is ment to be rotated semi-annualy (in January and July) |
| * Do not spread the password outside the CERGE-EI comunity, please. |
* Authentication is valid for one day and/or one stay. After that, it must be done again. | * Authentication is valid for one day and/or one stay. After that, it must be done again. |
| |
<faicon fa fa-cloud-upload> Allowed traffic is limited to secure email services and common HTTP, HTTPS based services. | <faicon fa fa-cloud-upload> Allowed traffic is limited to secure email services, VPN connections and common HTTP, HTTPS based services. |
| |
<faicon fa fa-university> You can use the **[[https://wifi.cerge-ei.cz|WiFi Registration microsite]]** to obtain your own residential account for secure 'residents' Wi-Fi (the address is [[https://wifi.cerge-ei.cz|https://wifi.cerge-ei.cz]]). | <faicon fa fa-university> You can use the **[[https://wifi.cerge-ei.cz|Wi-Fi Registration microsite]]** to obtain your own residential account for secure 'residents' Wi-Fi (the address is [[https://wifi.cerge-ei.cz|https://wifi.cerge-ei.cz]]). |
| |
<faicon fa fa-comment-o> //Important: registration site is accessible ONLY from CERGE-EI on-premises networks (LAN, WiFi)// | ===== Wi-Fi 'eduroam' ===== |
| |
==== Wi-Fi network SSID 'residents' ==== | <faicon fa fa-info-circle> ** This network provides a secure wifi connection for users**** from academic comunity** (WPA2-Enterprise / 802.1X authentication) |
| * Eduroam is provided under the umbella of Charles University as a part of the CUNI.CZ Eduroam realm. |
| * Supporting web pages are available in EN at [[https://uvt.cuni.cz/UVTEN-60.html|https://uvt.cuni.cz/UVTEN-60.html]] (basic info, howto, coverage and availibility). CZ guide:[[http://uvt.cuni.cz/UVT-75.html|http://uvt.cuni.cz/UVT-75.html]] |
| * Username and password for authentication can be obtained from individual's home institution (university, school, institute, …). |
| * Hints for Charles University affiliates: |
| * Username is in format XXXXXXXX@cuni.cz where XXXXXXXX is user's personal number or username in CAS. |
| * Account eligible for Eduroam access must be **verified** (i.e. individual must visit UK Point to gain verified CUNI account). See [[https://uvt.cuni.cz/UVTEN-34.html|https://uvt.cuni.cz/UVTEN-34.html]] |
| * Eduroam password can be set via CUNI CAS (use strong password) [[https://ldapuser.cuni.cz/|https://ldapuser.cuni.cz/]]. User's overview in CAS also indicates whether the account is verified or not. (Please note that it takes some time for the newly set password to take effect.) |
| * Contact: UK Point - Celetná 13, Praha 1 - [[https://cuni.cz/uk-3249.html|https://cuni.cz/uk-3249.html]] |
| |
<faicon fa fa-info-circle> ** This network provides a secure authentication process for individual users** (WPA2-Enterprise / 802.1X authentication) | <faicon fa fa-cloud-upload> Allowed traffic is limited to secure email services, VPN connections and common HTTP, HTTPS based services. |
| |
| ===== ===== |
| |
| ===== Wi-Fi 'residents' ===== |
| |
| <faicon fa fa-info-circle> ** This network provides a secure connection for individual users affiliated with CERGE-EI** (WPA2-Enterprise / 802.1X authentication) |
* If you intend to use Wi-Fi at our premises for the prolonged period of time and you are affiliated with CERGE-EI, you SHOULD use this Wi-Fi network. | * If you intend to use Wi-Fi at our premises for the prolonged period of time and you are affiliated with CERGE-EI, you SHOULD use this Wi-Fi network. |
* Each user has his/her own credentials so granular control over who or what connects to the network is at place. | * Each user has his/her own credentials so granular control over who or what connects to the network is at place. |
* You have to ask for your own credentials at **[[https://wifi.cerge-ei.cz|WiFi Registration microsite ]]**first (address is [[https://wifi.cerge-ei.cz|https://wifi.cerge-ei.cz]]). | * You have to ask for your own credentials at **[[https://wifi.cerge-ei.cz|Wi-Fi Registration microsite ]]** first (address is [[https://wifi.cerge-ei.cz|https://wifi.cerge-ei.cz]]). |
| * Never give your credentials to any other person! |
| * Hints for the device setup: |
| * Username - //Use your registration email (use lower-case letters only)// |
| * Password - //Use the password shown to you during registration// |
| * Security type - WPA2-Enterprise / 802.1X |
| * Domain - wifi.cerge-ei.cz |
| * CA certificate - Use system certificate |
| * Online Certificate Status - Do not verify |
| * Encryption type - AES |
| * EAP (authentification) method - Protected EAP (PEAP, Microsoft PEAP) |
| * Phase 2 authentification - EAP-MSCHAPS2 (Windows specific: disallow use of Windows logon) |
| * 802.1X Advanced Settings - Authentication mode = User Auth. (enter and save your credentials) |
| |
<faicon fa fa-comment-o> //Important: registration site is accessible ONLY from CERGE-EI on-premises networks (LAN, WiFi)// | <faicon fa fa-comment-o> //**Important:** registration site is accessible ONLY from CERGE-EI on-premises networks (LAN, Wi-Fi)// |
| |
If you are eligible to access the network, your password is generated along with the certain grace period of usage. | If you are eligible to access the network, your password is generated along with the certain grace period of usage. |
<faicon fa fa-windows> Pay attention to special settings in Windows (see bellow in General Info and Guides). | <faicon fa fa-windows> Pay attention to special settings in Windows (see bellow in General Info and Guides). |
| |
==== Wi-Fi network SSID 'cerge-ei' ==== | ===== ===== |
| |
| ===== Wi-Fi 'cerge-ei' ===== |
| |
<faicon fa fa-info-circle> ** The Wi-Fi network 'cerge-ei' is restricted for back-office internal purposes only. ** | <faicon fa fa-info-circle> ** The Wi-Fi network 'cerge-ei' is restricted for back-office internal purposes only. ** |
| |
| Only institutional computers are allowed to connect to this network. |
| |
===== General Info and Guides ===== | ===== General Info and Guides ===== |
* Wi-Fi network **'residents'** | * Wi-Fi network **'residents'** |
* [[:public:wifiguide:resident|Basics - secured network for all residents]] | * [[:public:wifiguide:resident|Basics - secured network for all residents]] |
* [[:public:wifiguide:resident-hints|Howto - General Settings Hints ]] | * **[[:public:wifiguide:resident-hints|Howto - General WiFi settings hints]]** |
* [[:public:wifiguide:resident-win7|Howto - MS Windows]] | * [[:public:wifiguide:resident-win7|Howto - MS Windows]] |
* [[:public:wifiguide:resident-android|Howto - Android]] | * [[:public:wifiguide:resident-android|Howto - Android]] |
* [[:public:wifi|Wi-Fi at CERGE-EI - coverage]] | * [[:public:wifi|Wi-Fi at CERGE-EI - coverage]] |
* [[:public:security_rules|General rules for LAN users]] | * [[:public:security_rules|General rules for LAN users]] |
| |
| {{:public:pasted:20220204-145315.png}} |
| |
| |