Shlogo

Information system of Silicon Hill club

Silicon Hill

Sign in to IS

Tutorial for setting up the devices for IEEE 802.1X authentication.

The login credentials are the same for Wi-Fi or the Silicon Hill Information System

Metalciká síť (Ethernet 10/100/1000M RJ-45)

Wired Network (Ethernet 10/100/1000M RJ-45)

Windows XP (SP1,SP2)

When attempting to connect to the network the operating system should prompt you for your login name and password withnout any additional settings.

Windows XP (SP3), Vista, 7, 8

You have to enable the authentication serverice for wired networks. It's the same type of server as the one for authentication on Wi-Fi, but this one isn't default turned on.

The serverice is being started in the 'Services', the fastest way is via Run (Windows Key + R) > services.msc.

Win-dot1x1

You have the 'Wired' AutoConfig' service in the 'Services' window.

Win-dot1x2

Open their properties and set the 'Startup type' to 'Automatic'.

Win-dot1x3

Then you have to manually start it, otherwise you have to restart your PC to start the service.

Win-dot1x4

In the 'Local Area Connection Properties' (Control Panel > Network Connections > Local Area Connection > Properties) is need to choose 'PEAP' option if not already set. Older versions of Windows have 'Smart Card or other Certificate' as a default option.

On Windows 7, there may be one issue. Your system sometimes try to use your Windows account logon credentials as the credentials for 802.1X. You can turn it off by pressing 'Settings' and then 'Configure' button and unticking the only one option there.

Win-dot1x5

After that (in case that your computer is connected via a working cable to our network) the notification that additional infromation is required should pop up. Click on it to get a window to fill your login information.

Win-dot1x6

The login credentials are the same for Wi-Fi or the Silicon Hill Information System

Win-dot1x7

After the firt login you may be prompted to validate the server certificate. Just click OK.

Win-dot1x8

At this moment everything should be fine and your computer should be connected to our network

Mac OS X

After connecting a cable your system should prompt you for your name and password. After filling it up, everything should work.

GNU/Linux - NetoworkManager

If the NetworkManager doesn't ask you for your name and password, then it's needed to set it up. In the network editation you can just change a few things in the 802.1X Security tab to match the settings on the picture (use your own name and password)

Linux-nm-dot1x

GNU/Linux - wpa_supplicant

If you don't like NetworkManager and you want to use wpa_supplicant, then it it's not a porblem.

Here is settings for wpa_supplicant: (you only have to change identity and password fields)

ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
eapol_version=2
network={
       key_mgmt=IEEE8021X
       eap=PEAP
       identity="thangcz"
       password="SuperSecretPassword"
       phase1="peaplabel=0"
       phase2="auth=MSCHAPV2"
       eapol_flags=0
}