public:wifimenu

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
public:wifimenu [2022-02-04 13:53] veselypublic:wifimenu [2023-12-11 10:57] (current) – old revision restored (2023-12-11 10:52) vesely
Line 1: Line 1:
 ====== Wi-Fi at CERGE-EI ====== ====== Wi-Fi at CERGE-EI ======
  
-{{:public:pasted:20220204-145315.png}} 
 ---- ----
  
-<faicon fa fa-download>** You can {{:public:public:one-pager_wifi_at_cerge-ei.pdf|view or download}}  brief Wi-Fi connection guide.**+<faicon fa fa-download>** You can {{:public:public:one-pager_wifi_at_cerge-ei.pdf|view or download}}  brief Wi-Fi connection guide (libairfree, residents).**
  
 ---- ----
  
-There are three wireless networks at CERGE-EI. Their purpose is more or less complementary:+There are four wireless networks at CERGE-EI. Their purpose is more or less complementary:
  
-==== Wi-Fi 'libairfree' ====+^SSID^Meant for^Allow acces to^How to gain access| 
 +| <font inherit/inherit;;#8e44ad;;inherit>**eduroam**</font> |academic comunity|internet|get eduroam account from the respective academic institution| 
 +| <font inherit/inherit;;#336633;;inherit>**residents**</font> |users affiliated with CERGE-EI|internet and printing|register at wifi.cerge-ei.cz with the official email and get password| 
 +| <font inherit/inherit;;#66cc33;;inherit>**libairfree**</font> |3rd party / non academic guests|internet|enter username / password(*) at captive portal after connection is made| 
 +| <font inherit/inherit;;#d35400;;inherit>**cerge-ei**</font> |institutional computers only|internet and internal|must have institutional computer|
  
-<faicon fa fa-info-circle> **The Wi-Fi network LIBAIRFREE serves for Internet access via simple web authentication and is intended mainly for guests.**+===== Wi-Fi 'libairfree' ===== 
 + 
 +<faicon fa fa-info-circle> **The Wi-Fi network LIBAIRFREE serves for Internet access via simple web authentication and is intended mainly for guests not affiliated with the academic comunity.**
  
    * After your device is connected, start device's web browser and enter username and password. \\ //Hint: if you are not redirected to authentication web page, use [[https://wlcwa.cerge-ei.cz|https://wlcwa.cerge-ei.cz]] \\  (or use IP [[https://1.1.1.2|https://1.1.1.2]] - you must confirm security exception to use untrusted certificate in this case////)//    * After your device is connected, start device's web browser and enter username and password. \\ //Hint: if you are not redirected to authentication web page, use [[https://wlcwa.cerge-ei.cz|https://wlcwa.cerge-ei.cz]] \\  (or use IP [[https://1.1.1.2|https://1.1.1.2]] - you must confirm security exception to use untrusted certificate in this case////)//
-  * Username and password for authentication can be obtained at the CERGE-EI Library (Ground floor).+  * (*) **Username and password**  for authentication
 +      * can be obtained at the CERGE-EI Library (Ground floor)
 +      * current password for username "**cerge**" is "**welcome**" 
 +  * Password for username "cerge" is rotated semi-annualy (in January and July) 
 +  * Do not spread the password outside the CERGE-EI comunity, please.
   * Authentication is valid for one day and/or one stay. After that, it must be done again.   * Authentication is valid for one day and/or one stay. After that, it must be done again.
  
-<faicon fa fa-cloud-upload> Allowed traffic is limited to secure email services and common HTTP, HTTPS based services.+<faicon fa fa-cloud-upload> Allowed traffic is limited to secure email services, VPN connections and common HTTP, HTTPS based services.
  
-<faicon fa fa-university> You can use the **[[https://wifi.cerge-ei.cz|Wi-Fi Registration microsite]]** to obtain your own residential account for secure 'residents' Wi-Fi (the address is [[https://wifi.cerge-ei.cz|https://wifi.cerge-ei.cz]]).+<faicon fa fa-university> You can use the **[[https://wifi.cerge-ei.cz|Wi-Fi Registration microsite]]**  to obtain your own residential account for secure 'residents' Wi-Fi (the address is [[https://wifi.cerge-ei.cz|https://wifi.cerge-ei.cz]]).
  
-<faicon fa fa-comment-o> //Important: registration site is accessible ONLY from CERGE-EI on-premises networks (LAN, Wi-Fi)//+===== Wi-Fi 'eduroam' =====
  
-==== Wi-Fi 'residents====+<faicon fa fa-info-circle> ** This network provides a secure wifi connection for users**** from academic comunity**  (WPA2-Enterprise / 802.1X authentication) 
 +  * Eduroam is provided under the umbella of Charles University as a part of the CUNI.CZ Eduroam realm. 
 +  * Supporting web pages are available in EN at [[https://uvt.cuni.cz/UVTEN-60.html|https://uvt.cuni.cz/UVTEN-60.html]] (basic info, howto, coverage and availibility). CZ guide:[[http://uvt.cuni.cz/UVT-75.html|http://uvt.cuni.cz/UVT-75.html]] 
 +  * Username and password for authentication can be obtained from individual's home institution (university, school, institute, …). 
 +  * Hints for Charles University affiliates: 
 +      * Username is in format XXXXXXXX@cuni.cz where XXXXXXXX is user's personal number or username in CAS. 
 +      * Account eligible for Eduroam access must be **verified**  (i.e. individual must visit UK Point to gain verified CUNI account). See [[https://uvt.cuni.cz/UVTEN-34.html|https://uvt.cuni.cz/UVTEN-34.html]] 
 +      * Eduroam password can be set via CUNI CAS (use strong password) [[https://ldapuser.cuni.cz/|https://ldapuser.cuni.cz/]]. User's overview in CAS also indicates whether the account is verified or not. (Please note that it takes some time for the newly set password to take effect.) 
 +      * Contact: UK Point - Celetná 13, Praha 1 - [[https://cuni.cz/uk-3249.html|https://cuni.cz/uk-3249.html]]
  
-<faicon fa fa-info-circle** This network provides a secure authentication process for individual users**  (WPA2-Enterprise / 802.1X authentication)+<faicon fa fa-cloud-uploadAllowed traffic is limited to secure email services, VPN connections and common HTTP, HTTPS based services.
  
 +=====   =====
 +
 +===== Wi-Fi 'residents' =====
 +
 +<faicon fa fa-info-circle> ** This network provides a secure connection for individual users affiliated with CERGE-EI**  (WPA2-Enterprise / 802.1X authentication)
   * If you intend to use Wi-Fi at our premises for the prolonged period of time and you are affiliated with CERGE-EI, you SHOULD use this Wi-Fi network.   * If you intend to use Wi-Fi at our premises for the prolonged period of time and you are affiliated with CERGE-EI, you SHOULD use this Wi-Fi network.
   * Each user has his/her own credentials so granular control over who or what connects to the network is at place.   * Each user has his/her own credentials so granular control over who or what connects to the network is at place.
-  * You have to ask for your own credentials at **[[https://wifi.cerge-ei.cz|Wi-Fi Registration microsite ]]**first (address is [[https://wifi.cerge-ei.cz|https://wifi.cerge-ei.cz]]).+  * You have to ask for your own credentials at **[[https://wifi.cerge-ei.cz|Wi-Fi Registration microsite ]]**  first (address is [[https://wifi.cerge-ei.cz|https://wifi.cerge-ei.cz]]).
   * Never give your credentials to any other person!   * Never give your credentials to any other person!
 +  * Hints for the device setup:
 +      * Username - //Use your registration email (use lower-case letters only)//
 +      * Password - //Use the password shown to you during registration//
 +      * Security type - WPA2-Enterprise / 802.1X
 +      * Domain - wifi.cerge-ei.cz
 +      * CA certificate - Use system certificate
 +      * Online Certificate Status - Do not verify
 +      * Encryption type - AES
 +      * EAP (authentification) method - Protected EAP (PEAP, Microsoft PEAP)
 +      * Phase 2 authentification - EAP-MSCHAPS2 (Windows specific: disallow use of Windows logon)
 +      * 802.1X Advanced Settings - Authentication mode = User Auth. (enter and save your credentials)
  
 <faicon fa fa-comment-o> //**Important:**  registration site is accessible ONLY from CERGE-EI on-premises networks (LAN, Wi-Fi)// <faicon fa fa-comment-o> //**Important:**  registration site is accessible ONLY from CERGE-EI on-premises networks (LAN, Wi-Fi)//
Line 39: Line 72:
 <faicon fa fa-windows> Pay attention to special settings in Windows (see bellow in General Info and Guides). <faicon fa fa-windows> Pay attention to special settings in Windows (see bellow in General Info and Guides).
  
-==== Wi-Fi 'cerge-ei' ====+=====   ===== 
 + 
 +===== Wi-Fi 'cerge-ei' =====
  
 <faicon fa fa-info-circle> ** The Wi-Fi network 'cerge-ei' is restricted for back-office internal purposes only. ** <faicon fa fa-info-circle> ** The Wi-Fi network 'cerge-ei' is restricted for back-office internal purposes only. **
 +
 +Only institutional computers are allowed to connect to this network.
  
 ===== General Info and Guides ===== ===== General Info and Guides =====
Line 53: Line 90:
   * [[:public:wifi|Wi-Fi at CERGE-EI - coverage]]   * [[:public:wifi|Wi-Fi at CERGE-EI - coverage]]
   * [[:public:security_rules|General rules for LAN users]]   * [[:public:security_rules|General rules for LAN users]]
 +
 +{{:public:pasted:20220204-145315.png}}
  
  
  • /var/www/html/dokuwiki/data/attic/public/wifimenu.1643982796.txt.gz
  • Last modified: 2022-02-04 13:53
  • by vesely