Wireless network Faculty of Science
Within the Science Faculty a secure wireless 54 Mbit/s wi-fi WPA network is available at almost every place in the Huygens building since July 2005. The network advertises itself with the name (SSID) "Science"". It can only be used by people with a Science-login. Since fall 2006 the university RU-wlan is available in the Huygens building for all students and personnel of the RU. Since the update of ru-wlan of September 2007 the Science network only has an advantage for Science-logins without a RU-password or KISS-password.
What you need
To access this "Science"-network, you need:
Wi-Fi hardware that supports WPA (more exactly WPA Enterprise with PEAP/MS-CHAP v2). Almost all laptops have this built-in since a few years. All Intel Centrino laptops should be fine. N.B.: There is a security vulnerability in the Intel Centrino Windows-drivers, see Intel support for more information and updates. If one wants to use the Intel PROSet/Wireless software instead of the Windows software, the update above could be necessary.
Laptops from 2003 or later should be fine too, but often you need a driver-update (see the manufacturers web-site). When the built-in hardware doesn't support WPA, one can buy for about EUR 30,- a PCMCIA-card or USB-stick that does. See if needed wi-fi.org for "certified" hardware. C&CZ has tested two low-cost certified PCMCIA-cards, Linksys WPC54G-EU and D-Link DWL-G650+. Older 11 Mbit/s 802.11b hardware as well as newer 54 Mbit/s 802.11g hardware can be used, as long as WPA is supported.
- Either Microsoft Windows XP with Service Pack 2 (SP2). See the extensive installation manual.
- Or Microsoft Windows Mobile 5 or 6. We have a simple installation manual available.
- Or Microsoft Windows Vista. Click "Start->Settings->Control Panel->Network". Choose "Setup connection or network". Choose "Setup manually". Choose then "Science" (with 1 capital!), WPA Enterprise and TKIP. Next choose "Change connection settings" and click in the tab "Security" on "Protected EAP" and "Settings...". In the window "Protected EAP properties" one has to check "Validate server certificate" and for "Certificate Authority" check the box: "GTE CyberTrust Global Root". Choose the verification method "Protected password (EAP-MSCHAP v2) and withing this in "Configure" uncheck "Automatically use my Windows-logonname and -password (and domain if necessary)". If one doesn't want to make a connection with previously entered account information, one can uncheck "Cache user information for subsequent connections to this network". In the meantime see if necessary the Cable Guy). In the near future, we will provide a detailed installation manual, until then one can use, if needed, the manual as mentioned above. If this is too difficult, don't hesitate to stop by C&CZ with your laptop.
- Or any other operating system with WPA (WPA-Enterprise) support
- For a Palm TX one can buy a WPA-Enterprise upgrade for about 6 US dollar.
- For Linux see this premature manual, which uses WPA supplicant.
- The Apple iPhone and iPod Touch have since July, 2008 with the iPhone 2.0 software update support for WPA with 802.1x, so should be able to use the wireless network. There are however problems with RU-wlan.
- For smartphones with Android see this short manual
- For Symbian see this first manual.
- Username and password
Before any Internet-traffic is possible, the combination of a loginname and password is checked through the 802.1x mechanism. One should prevent giving the loginname/password combination to a rogue (non-C&CZ) access-point, by checking the server-certificate. All traffic is encrypted with constantly changing keys, which makes eavesdropping impossible.
- For the "Science" network a C&CZ (science) username and password. Every employee and student of the Faculty of Science has (a right to) that.
- (For the RU-wlan) a RU-password for every RU-employee and student.
- Or a username/password of an institution that takes part in EduRoam. Remark: Outgoing wireless connections from the Science buildings to institutes that participate in EduRoam will be available from Q1 2010, after the access points in these buildings have been replaced.
RU-wlan for iPhone
This procedure is untested. Use at your own risc!
Currently only in dutch.
Background and future
- During 2006 the wireless network was extended to the Huygens building phase II and NanoLab.