Help:Wifi

From CECS wiki
Jump to navigation Jump to search

To connect to the UCF wireless network as a student or employee, please see the wireless instructions.

If you have not recently set your NID password, you may need to visit the NID password reset page

As a shortcut to get to these pages, you can connect to the UCF_Guest network, which will then redirect you to an instruction page that links to the above pages.

ubuntu[edit]

Ubuntu 14 does not work reliably on enterprise wifi. Please upgrade.

If ubuntu's default dialogs for connecting to wifi do not work, go back to the menu and EDIT the UCF_WPA2 entry so it looks like what is in the instructions listed above. If that isn't enough, try the next step.

Download the certificate and install as described at http://blog.tkassembled.com/410/adding-a-certificate-authority-to-the-trusted-list-in-ubuntu/

Then re-edit the UCF_WPA2 entry to use the certificate. There seems to be a bug in the normal ubuntu dialog that prevents selection of the certificate, so you may have to go through the edit menu for this as well.

UCF Wi-Fi on raspberry Pi using WPA Supplicant[edit]

This procedure works on Ubuntu and Debian based linux, assuming you want to avoid using the GUI.

You will need to download the comodo certificate listed in the above links, in the manual configuration directions.

Note that the second certificate listed on that page opens in browser; instead, right click and save link as...

If opening the certificate does not import it, you can manually import it as follows: [1] [2]

  1. move certificate files to /usr/local/share/ca-certificates/
  2. run sudo update-ca-certificates

At this point, ubuntu should allow you to connect using the GUI wifi tools. If not, try deleting all instances of UCF_WPA2 in the remembered networks list and try again. If that doesn't work, the manual procedure below should work.

Edit /etc/wpa_supplicant/wpa_supplicant.conf as follows:

  • Make sure the absolute file path matches addtrustexternalcaroot.crt (downloaded above)
  • replace USERNAME and PASSWORD below with nid information

The result should look something like this:

ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
update_config=1

network={
        ssid="UCF_WPA2"
        key_mgmt=WPA-EAP
        eap=PEAP
        identity="USERNAME"
        password="PASSWORD"
        ca_cert="/etc/certs/addtrustexternalcaroot.crt"
        phase1="peaplabel=0"
        phase2="auth=MSCHAPV2"
        priority=10
}

/etc/network/interfaces (excerpt)

auto wlan0
iface wlan0 inet dhcp
wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf


To test configuration for proper authentication:

sudo wpa_supplicant -i wlan0 -c /etc/wpa_supplicant/wpa_supplicant.conf

Example Success:

wlan0: Trying to associate with 6c:99:89:a7:0a:20 (SSID='UCF_WPA2' freq=2412 MHz)
wlan0: Association request to the driver failed
wlan0: Associated with 6c:99:89:a7:0a:20
wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started
wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
wlan0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
wlan0: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root'
wlan0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA'
wlan0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=US/postalCode=32816-2500/ST=FL/L=Orlando/street=4000 Central Florida Blvd/O=University of Central Florida/OU=Computer Services/CN=net8883.net.ucf.edu'
EAP-MSCHAPV2: Authentication succeeded
wlan0: CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully
wlan0: WPA: Key negotiation completed with 6c:99:89:a7:0a:20 [PTK=CCMP GTK=CCMP]
wlan0: CTRL-EVENT-CONNECTED - Connection to 6c:99:89:a7:0a:20 completed (auth) [id=0 id_str=]

Enabling the gui[edit]

On raspian

 wpa_gui -i wlan0 -t &