Phone: (909)537-7677
Email: support@csusb.edu
Knowledgebase: Campus Internet Access
Connecting to Eduroam: Linux
Posted by James Macdonell on 01 July 2014 07:56 AM

Configuring eduroam for Linux (Debian/Ubuntu)

Using the NetworkManager GUI (screen-shots attached)

  • Security: WPA2 Enterprise
  • Authentication: Protected EAP
  • Anonymous identity: (see Username below)
  • CA certificate: (browse to /etc/ssl/certs/AddTrust_External_Root.pem)
  • PEAP version: Automatic
  • Inner authentication: MSCHAPv2
  • Username: Your Coyote ID followed by @csusb.edu
       -- use @csusb.edu, even if your email is @coyote.csusb.edu

Using configuration files

Create/edit a wpa_supplicant.conf file for PEAP/MSCHAPv4

$ cat /etc/wpa_supplicant.conf
# IEEE 802.1X with dynamic WEP keys using EAP-PEAP/MSCHAPv2

ctrl_interface=/var/run/wpa_supplicant

network={
    ssid="eduroam"
    key_mgmt=WPA-EAP
    eap=PEAP
    phase2="auth=MSCHAPV2"
    identity="001234567@csusb.edu"
    #echo -n 'My passphrase goes here!' | iconv -t utf16le | openssl md4
    password=hash:53ae93be67682f6b18cc3b9dc84a9af8
    ca_cert="/etc/ssl/certs/AddTrust_External_Root.pem"
}

Edit /etc/network/interfaces to reference the wpa_supplicant.conf file

$ cat /etc/network/interfaces
auto lo
iface lo inet loopback

auto wlan0
iface wlan0 inet dhcp
    wpa-conf /etc/wpa_supplicant.conf

Disable the GUI, if applicable

$ sudo service network-manager stop
$ sudo update-rc.d network-manager disable

Restart networking for wlan0

$ sudo ifdown wlan0
$ sudo ifup wlan0

Confirm successful configuration

$ ip addr
$ sudo iwconfig



Attachments 
 
 eduroam_002.png (52.40 KB)
 choose a certificate authority certificate..._003.png (102.18 KB)
(0 vote(s))
Helpful
Not helpful

Comments (0)