Wiki source code of Lan

Last modified by wikibot on 2023/02/05 20:31

Show last authors
1 = Set up LAN connection =
2
3
4
5 {{toc/}}
6
7
8
9 Connection via the LAN cable only works at specific locations in the FMI building. There are many different networks in the FMI building, and not everyone has an IP address or is able to access the Internet.
10
11 In general, the connections work in all learning rooms that have an orange sticker labeled with \"Notebook\" or \"FMI\". An overview of the learning rooms is available [[here>>https://www.in.tum.de/fuer-studierende/services-einrichtungen-it/lernraeume.html]].
12 Limitations: For all rooms operated by the RBG, **except for the computer hall**, the same limitations apply as in the WLAN network FMI until further notice. (only http/https, no mail, steam, Skype etc.).
13
14 . {{html wiki="true"}}
15 <span class='WYSIWYG_COLOR ' style='color:Blue'>Plug in the LAN cable</span>
16 {{/html}}
17
18 The RBG Helpdesk lends LAN cables free of charge (location, opening hours-> [[hier>>Informatik.Helpdesk.WebHome||anchor="Kontakt"]]). We take the student card as a deposit, so please bring one and preferably your own.
19
20 2.a. {{html wiki="true"}}
21 <span class='WYSIWYG_COLOR ' style='color:Blue'>Outside the computer hall</span>
22 {{/html}}
23
24 Set proxy, see instructions below -> [[configure proxy>>||anchor="ProxyInfo"]].
25
26 2.b. {{html wiki="true"}}
27 <span class='WYSIWYG_COLOR ' style='color:Blue'>Inside the computer hall</span>
28 {{/html}}
29
30 At the beginning of the 2016 summer semester, the usual FMI Ethernet network was replaced by the Eduroam. the replacement was in the computer hall. As a result, you can now access a Gigabit Ethernet connection {{html wiki="true"}}
31 <strong>without a proxy and without any limitations</strong>
32 {{/html}}. In the following, it is described which settings are necessary to get the network running under the common operating systems (Mac OS X, Windows, Linux).
33
34 == 1. Mac OS X ==
35
36 Under Mac OS X, if not already done, you only need to install the well-known Eduroam configuration profile from the LRZ site: [[http://www.lrz.de/services/netz/wlan/eduroam/>>http://www.lrz.de/services/netz/wlan/eduroam/]]. This is the same profile that is used to connect to the Eduroam WLAN.
37 After connecting the network cable, please open the system settings --> network. Select your Ethernet connection from the list. There should now be an entry for 802.1X: SSID eduroam (see screenshot). Next to this entry please click on Connect.
38
39 [[image:mac_bild.png||width="500"]]
40
41 == 2. Windows ==
42
43 All information for enabling 802.1x authentication can also be found here: http://windows.microsoft.com/de-de/windows/enable-802-1x-authentication#1TC=windows-7
44
45 **1)** Open the **Network Sharing Center**. Then a right-click on the Internet icon for Wlan/Lan with the yellow exclamation mark in the lower-left corner of the bar and click on **Network and Sharing Center**. Click on the network you want to connect to.
46
47 **2)** In the newly appearing window, press **Properties**. You may have to enter the administration password of the computer.
48
49 **3)** In the new window, select the tab {{html wiki="true"}}
50 <strong>Authentication</strong>
51 {{/html}}.
52
53 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Lan/WebHome/Network and Sharing.PNG|| width="1000" height="599" title="Network and Sharing.PNG" alt="Network and Sharing.PNG"]]
54
55 **4)** In some systems the **Authentication** tab is not available from the start. If this is not the case, continue with step 5). Otherwise it has to be activated first. To do this, proceed as described below:
56
57 Click on the Windows key and R simultaneously, i.e. **Win** + **r**. In the window that opens, enter **services.msc**.
58
59 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Lan/WebHome/Run.PNG|| width="399" height="206" title="Run.PNG" alt="Run.PNG"]]
60
61 Find the entry **Wired !AutoConfig** and do a right-click on it. In the appeared context menu press {{html wiki="true"}}
62 <strong>Start</strong>
63 {{/html}}.
64 Thereafter the authentication tab should be findable as in the previous steps 1-3.
65
66 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Lan/WebHome/services.PNG|| width="1000" height="688" title="services.PNG" alt="services.PNG"]]
67
68 You may need to close and restart the **Network and Sharing Center** for the tab to appear.
69
70 **5)** Make sure that the checkmark for authentication is set and the applied method is selected as shown in the picture. To do this, click once on {{html wiki="true"}}
71 <strong>additional settings</strong>
72 {{/html}} and then select **User authentication mode**.
73
74 [[image:https://xwiki.rbg.tum.de/bin/download/Informatik/Helpdesk/Lan/WebHome/Network and Sharing 2.PNG|| width="1000" height="599" title="Network and Sharing 2.PNG" alt="Network and Sharing 2.PNG"]]
75
76 **5.1)** Make sure to select only user authentication under **EAP(PEAP) Settings**. Under certain circumstances, the login data must also be entered here by clicking on **Replace login information**.
77
78 {{html wiki="true"}}
79 <span class='WYSIWYG_COLOR ' style='color:Red'>Attention!</span>
80 {{/html}} As login almost all LRZ email addresses + the respective password are possible, e.g. ga68har@eduroam.mwn.de, or max.musterman@tum.de, etc.
81
82 **5.2)** Under **Settings** you have to select the Eduroam certificate and when setting up the EAP MSCHP-2 method you have to uncheck {{html wiki="true"}}
83 <span class='WYSIWYG_COLOR ' style='color:Red'> **remove**</span>
84 {{/html}}.
85
86 == 3. Linux ==
87
88 === 3.1. Creating a LAN profile ===
89
90 First open the **Network** settings and create a new cable profile.
91
92 [[image:1.png||width="500"]]
93
94 At **Identity** set any name and then select **Security** at the top of the tab.
95
96 [[image:2.png||width="500"]]
97
98 **802.1x Security** must be activated. You should enter the settings as shown in the screenshot below.
99
100 [[image:3.png||width="500"]]
101
102 You can also connect to the Internet without a certificate, but it is not secure. Therefore, it is recommended to install the appropriate certificate.
103
104 === 3.2. Installing the CA certificate ===
105
106 The CA certificate can be found here [[Link>>https://www.pki.dfn.de/wurzelzertifikate/globalroot2/#c18447]]. The certificate should be copied into a text file and saved with extension .pem like **ca.pem** under **/etc/wpa_supplicant/cert/**.
107
108 [[image:4.png||width="500"]]
109
110 [[image:Screen Shot 2020-03-19 at 9.37.11 AM.png||width="500"]]
111
112 You should save the certificate under **/etc/wpa_supplicant/cert/ca.pem** and then choose this path when setting up.
113
114 [[image:6.png||width="500"]]
115 === 3.3 Test speed ===
116
117 Via **speedtest.in.tum.de** you can test how fast the Internet is via the LAN cable in the computer hall.
118
119 [[image:7.png||width="500"]]