WLAN - Versionsgeschichte

Joe Oudeis: Kategorie:Howto hinzugefügt

2025-01-05T22:10:46Z

Kategorie:Howto hinzugefügt

← Nächstältere Version		Version vom 5. Januar 2025, 22:10 Uhr
Zeile 206:		Zeile 206:
	# EAP-Methode: EAP-TTLS		# EAP-Methode: EAP-TTLS
	# Authentifizierungsmethode: Unverschlüsseltes Kennwort (PAP)		# Authentifizierungsmethode: Unverschlüsseltes Kennwort (PAP)

			[[Category:Howto]]

Raphii am 1. Oktober 2024 um 17:22 Uhr

2024-10-01T17:22:02Z

← Nächstältere Version		Version vom 1. Oktober 2024, 17:22 Uhr
Zeile 193:		Zeile 193:

	Look at this [https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_EAP-TTLS___PAP_Authentication_on_Windows_8_and_10 tutorial] in German language.		Look at this [https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_EAP-TTLS___PAP_Authentication_on_Windows_8_and_10 tutorial] in German language.


			== Windows 11 (tested 01.10.2024) ==

			# Open the "new" system control panel
			# "Netzwerk und Internet"
			# "WLAN"
			# "Bekannte Netzwerke verwalten"
			# "Netzwerk hinzufügen"
			# Netzwerkname: backspace 802.1x
			# Sicherheitstyp: WPA2-Enterprise AES
			# EAP-Methode: EAP-TTLS
			# Authentifizierungsmethode: Unverschlüsseltes Kennwort (PAP)

Foosinn: /* macOS and iOS */

2024-08-27T18:53:20Z

macOS and iOS

← Nächstältere Version		Version vom 27. August 2024, 18:53 Uhr
Zeile 154:		Zeile 154:

	'''A ready profile file can be downloaded [[:File:Backspace802.1x.mobileconfig.zip\|here]] (you need to provide your LDAP credentials when asked). You don't need to follow the other steps if you use this file.''' Note: For iOS you need to extract this ZIP file and send it to you phone (e.g. via email).		'''A ready profile file can be downloaded [[:File:Backspace802.1x.mobileconfig.zip\|here]] (you need to provide your LDAP credentials when asked). You don't need to follow the other steps if you use this file.''' Note: For iOS you need to extract this ZIP file and send it to you phone (e.g. via email).


			After downloading the profile search in the System Settings for "Profile". Accept the Wifi profile here and enter you credentials. The "Backspace 802.1x" wifi should now be kown and you can connect.

	----		----

Foosinn: /* certificate */

2024-05-03T18:45:37Z

certificate

← Nächstältere Version		Version vom 3. Mai 2024, 18:45 Uhr
Zeile 7:		Zeile 7:
	== certificate ==		== certificate ==

	~~To check if you're connecting to the correct SSID, you can and should add the ssl~~ certificate to your connection setting. You can download the [https://www.hackerspace-bamberg.de/bckspc-downloads/bckspc-ca.crt SSL CA-Certificate] ([https://www.hackerspace-bamberg.de/bckspc-downloads/bckspc-ca.zip ZIP-File]) from our Server.		The certificate is not needed anymore

	== Linux ==		== Linux ==

Foosinn: /* Android */

2024-05-03T18:45:08Z

Android

← Nächstältere Version		Version vom 3. Mai 2024, 18:45 Uhr
Zeile 149:		Zeile 149:


	~~[[Datei:8021x-android-1.png\|200px]] [[Datei:8021x-android-2.png\|200px]] [[Datei:8021x-android-3.png\|200px]] [[Datei:8021x-android-4.png\|200px]]~~		[[Datei:Android wifi configuration.png\|200px]]
	[[Datei:Android wifi configuration.png\|~~mini~~]]

	== macOS and iOS ==		== macOS and iOS ==

Foosinn: /* Android */

2024-05-03T18:44:46Z

Android

← Nächstältere Version		Version vom 3. Mai 2024, 18:44 Uhr
Zeile 150:		Zeile 150:

	[[Datei:8021x-android-1.png\|200px]] [[Datei:8021x-android-2.png\|200px]] [[Datei:8021x-android-3.png\|200px]] [[Datei:8021x-android-4.png\|200px]]		[[Datei:8021x-android-1.png\|200px]] [[Datei:8021x-android-2.png\|200px]] [[Datei:8021x-android-3.png\|200px]] [[Datei:8021x-android-4.png\|200px]]
			[[Datei:Android wifi configuration.png\|mini]]

	== macOS and iOS ==		== macOS and iOS ==

Foosinn: /* Android */

2024-05-03T18:41:47Z

Android

← Nächstältere Version		Version vom 3. Mai 2024, 18:41 Uhr
Zeile 145:		Zeile 145:
	This is how you can connect with the android operating system to our 802.1x WIFI (WPA2 Enterprise)		This is how you can connect with the android operating system to our 802.1x WIFI (WPA2 Enterprise)

	* Download our certificate (see top)
	* Open downloaded certificate
	* Save [https://www.hackerspace-bamberg.de/bckspc-downloads/bckspc-ca.crt certificate] as backspace.crt and '''type "Wifi"'''
	* Modify/Configure your backspace 802.1x connection according to the screenshot below		* Modify/Configure your backspace 802.1x connection according to the screenshot below
	* '''Attention:''' Some newer Android versions require a domain name if you use the certificate. Use '''radius.core.bckspc.de'''		* '''Attention:''' Some newer Android versions require a domain name if you use the certificate. Use '''radius.core.bckspc.de'''
	* Firefox on android might fail to import the certificate, stating that the certificate authority is already trusted. In these cases, chrome can stil import the certificate.

	[[Datei:8021x-android-1.png\|200px]] [[Datei:8021x-android-2.png\|200px]] [[Datei:8021x-android-3.png\|200px]] [[Datei:8021x-android-4.png\|200px]]		[[Datei:8021x-android-1.png\|200px]] [[Datei:8021x-android-2.png\|200px]] [[Datei:8021x-android-3.png\|200px]] [[Datei:8021x-android-4.png\|200px]]

Foosinn: /* Linux */

2024-05-03T18:41:20Z

Linux

← Nächstältere Version		Version vom 3. Mai 2024, 18:41 Uhr
Zeile 60:		Zeile 60:
	'identity="USERNAME"'		'identity="USERNAME"'
	'password="YOUR_PASSWORD"'		'password="YOUR_PASSWORD"'
	'ca_cert="~~hash:~~//~~server~~/~~sha256~~/~~3e8977b8a92cc0be99b940323a2125fc2032727074a282d066801ee9dc3a2d97~~"'		'ca_cert="/etc/ssl/certs/ISRG_Root_X1.pem"'
	'phase2="auth=PAP"'		'phase2="auth=PAP"'
	)		)
Zeile 79:		Zeile 79:
	password="YOUR_PASSWORD"		password="YOUR_PASSWORD"
	phase2="auth=PAP"		phase2="auth=PAP"
	ca_cert="~~hash:~~//~~server~~/~~sha256~~/~~3e8977b8a92cc0be99b940323a2125fc2032727074a282d066801ee9dc3a2d97~~"		ca_cert="/etc/ssl/certs/ISRG_Root_X1.pem"
	}		}
	</syntaxhighlight>		</syntaxhighlight>
Zeile 95:		Zeile 95:
	Identity=USERNAME		Identity=USERNAME
	Passphrase=YOUR_PASSWORD		Passphrase=YOUR_PASSWORD
	CACertFile = ~~hash:~~//~~server~~/~~sha256~~/~~3e8977b8a92cc0be99b940323a2125fc2032727074a282d066801ee9dc3a2d97~~		CACertFile = /etc/ssl/certs/ISRG_Root_X1.pem
	</syntaxhighlight>		</syntaxhighlight>

Zeile 116:		Zeile 116:
	Identity = USERNAME		Identity = USERNAME
	Passphrase = PASSWORD		Passphrase = PASSWORD
	CACertFile = ~~hash:~~//~~server~~/~~sha256~~/~~3e8977b8a92cc0be99b940323a2125fc2032727074a282d066801ee9dc3a2d97~~		CACertFile = /etc/ssl/certs/ISRG_Root_X1.pem
	</syntaxhighlight>		</syntaxhighlight>

Zeile 135:		Zeile 135:
	anonymous_identity="$_ANONYMOUS_IDENTITY"		anonymous_identity="$_ANONYMOUS_IDENTITY"
	phase2="auth=PAP"		phase2="auth=PAP"
	ca_cert="~~hash:~~//~~server~~/~~sha256~~/~~3e8977b8a92cc0be99b940323a2125fc2032727074a282d066801ee9dc3a2d97~~"		ca_cert="/etc/ssl/certs/ISRG_Root_X1.pem"
	}		}
	</syntaxhighlight>		</syntaxhighlight>

Foosinn: /* NetworkManager (nmcli) */

2024-05-03T18:40:10Z

NetworkManager (nmcli)

← Nächstältere Version		Version vom 3. Mai 2024, 18:40 Uhr
Zeile 24:		Zeile 24:
	# update your nickname and if you want change the cert path		# update your nickname and if you want change the cert path
	nickname=fnord		nickname=fnord
	~~cert=~/.config/bckspc.crt~~

	# copy and paste this		# copy and paste this
	~~curl -o "$cert" https://www.hackerspace-bamberg.de/bckspc-downloads/bckspc-ca.crt~~
	device=$(nmcli d show \| grep -B1 'GENERAL.TYPE.*wifi$' \| head -n1 \| cut -f2 -d: \| xargs)		device=$(nmcli d show \| grep -B1 'GENERAL.TYPE.*wifi$' \| head -n1 \| cut -f2 -d: \| xargs)
	nmcli c add save yes \		nmcli c add save yes \
Zeile 34:		Zeile 32:
	con-name bckspc \		con-name bckspc \
	ssid "backspace 802.1x" \		ssid "backspace 802.1x" \
	802-1x.ca-cert "~~$cert~~" \		802-1x.ca-cert "/etc/ssl/certs/ISRG_Root_X1.pem" \
	802-1x.eap ttls \		802-1x.eap ttls \
	802-1x.identity "$nickname" \		802-1x.identity "$nickname" \

Foosinn: /* NetworkManager (GUI) */

2024-05-03T18:39:31Z

NetworkManager (GUI)

← Nächstältere Version		Version vom 3. Mai 2024, 18:39 Uhr
Zeile 13:		Zeile 13:
	=== NetworkManager (GUI) ===		=== NetworkManager (GUI) ===

	* Download the [[#certificate\|certificate]]
	* Select the "backspace 802.1x" network in your WiFi settings		* Select the "backspace 802.1x" network in your WiFi settings
	* Select ~~the previously downloaded certificate~~		* Select /etc/ssl/certs/ISRG_Root_X1.pem
	*: [[Datei:Linux NetMan Certificate.~~png\|400px]]~~
	* Select "TTLS" and "PAP" as the authentication and inner authentication method, respectively (see below)		* Select "TTLS" and "PAP" as the authentication and inner authentication method, respectively (see below)
	* Fill in your username and password (see below)		* Fill in your username and password (see below)
	*: [[Datei:~~Linux NetMan Authentication~~.png\|~~400px~~]]		*: [[Datei:Network Manager GUI.png\|zentriert\|mini\|300x300px]]

	=== NetworkManager (nmcli) ===		=== NetworkManager (nmcli) ===