Students who are joining in campus first time sould follow these steps
to connect the campus Lan
Campus LAN including hostel rooms are enabled with 802.1x authentication.
What is 802.1X Auth Mechanism clik here
You need to be follow two steps to achieve this.
First one is Generating 802.1x Password
Second one is change the settings on your laptop/desktop based on operating system.
Both steps are shown below.
Configure 802.1x Authentication based on various operating systems
In order to be able to authenticate yourself, you'll need to generate a 802.1x authentication
password at [Link] Please note that this is just an extra authentication
token which you will have to generate to authenticate yourself for using network resources.
This is one time only. In case you forget the generated password, you can reset it again by
visiting the above link. Use your students/research password in the field "Current LDAP
password:" and set a new password for network connectivity. Please note that this is not going
to affect your current mail/LDAP password that you use to log into portals, etc.
The videos below can be downloaded at [Link]
Generating 802.1X Password
Visit: [Link] and set your 802.1X password. You have to authenticate
yourself using your LDAP password (the one you used to login to [Link], [Link],
etc.).
Configure Ubuntu for 802.1x Authentication
[Link]
Right Click on Network icon on the top bar [ If it isn't there then try running "nm-applet"
command on terminal.] If it doesn't shows anything then, you might have to install Network
Manager Applet or equivalent, refer [Link]
Go to Edit Connections.
In section "Wired" click on "Add" tab.
Give Connection name as "Hostel Authentication", check the "Connect Automatically"
checkbox.
Click on 802.1 X Security tab, check the checkbox for "Use 802.1X security for this
connection.
Select Authentication type as PEAP (MSCHAPv2) and then enter your complete
students/research email address and use the password generated using the portal given above.
For CA Certificate, either choose 'None' (Not recommended), or download [Link]
[Link]/download/radius/IIIT-H_RADIUS_CA.pem and choose the location where it is kept
(Highly Recommended).
Click on Apply and then select this newly created connection by clicking once again on
Network icon at top.
And you are done.
The solution for the bug [Link]
1104476 has been presented as part of the video above.
Configure Fedora for 802.1x Authentication
[Link]
In case your are using Gnome3,
Go to Network Settings
Go to Wired connections, click add profile
In the security tab, enable 802.1x and then follow from Step 6 onwards as mentioned
above.
If, every time every time you boot up, and it is asks for the 802.1x password, one can do
the following:
Go to /etc/sysconfig/network-scripts/
Open the file `ifcfg-`. The for the wired connection is mostly of the form 'enp5s0' or
'enp10s0'
In that file, remove the line `IEEE_8021X_PASSWORD_FLAGS=user` and add the line
`IEEE_8021X_PASSWORD=`. The password should be without quotes.
Reboot.
This method has been tested on Fedora22
Configure Windows for 802.1x Authentication
[Link]
Open explorer, right click on computer and click 'Manage'
Navigate to 'Services and Applications', open 'Services'
Open Wired AutoConfig, set the startup type to 'Automatic' and click on 'Start'
Go to 'Network and Sharing Center' and click on 'Change adapter settings'.
For your network adapter, right click, go to properties.
Select the tab Authentication. Make sure 'Enable IEEE 802.1X authentication' is ticked.
network authentication method should be 'Microsoft: Protected PEAP'
Click on settings. Make sure 'Validate server certificate' is either no ticked (Not
recommended) or download and install [Link]
H_RADIUS_CA.der and choose "IIIT-H Radius CA" (Highly Recommended)..
The authentication mechanism should be 'EAP-MSCHAPv2'. Click on Configure and make sure
that 'Automatically use my Windows logon name and password' is not ticked. Click OK.
Go to 'Additional Settings', under 'Specify authentication mode' select user authentication.
This is optional. Click on Save Credentials and enter your email id and LAN authentication
password.
Click OK.
Disable and re-enable your Network Adapter.
Note for WinXP Users: To delete cached username and password in Windows Xp follow the
instruction given at [Link]
Configure Mac OS X for 802.1x Authentication
Mac OS X should automatically detect 802.1x and display pop up window asking username and
password. Just use your IIIT email and **802.1x password** for the same.
If for some reasons (like you are in KCIS) it don't show you pop up box, then use following
steps:
Open the config in vim/emacs (I prefer vim) and update your email and password accordingly
and Save.
Double click to run/import it. In the popup (as shown below) select Continue and then Install.
Open Network Settings -> Ethernet -> Advanced and validate that you now have 802.1x
config named "Wi-Fi" in list.
You should have window like shown below, click on "Connect" next to 802.1x.
Once connected it should show "Authentication with EAP-PEAP (MSCHAPv2)".
Now again click Advanced and "Renew Lease". Enjoy!
Note: Incase of any issues please write to help@[Link] with your room number and
cantact number along with description of the problem you are facing.
