Návody FIT
Jdi na navigaci

eduroam (EN)

Důležité:

Dear colleagues,

As part of simplifying and increasing the availability of services, a reconfiguration of the eduroam wireless network is planned. New authentication directly against the CTU central server will be used. The date of the final transition is set for 21.5.2023. After this date, it will not be possible to connect without changing the original settings. You can change your settings today using the manuals on these pages or here.

We ask everyone to change their settings before the mentioned date and try to connect to the network with all their devices to verify that everything is working without problems for you.

In case of any problems, do not hesitate to contact us at Helpdesk ICT.

Connection to the eduroam wi-fi network is available to all students, staff and faculty colleagues.

Network properties

  • After connecting to the network, the user is assigned a public IP address.
  • The network traffic is not protected by a firewall. All ports are open. The user must secure his device himself.
Varování:

For these reasons, we recommend that you do not run services on devices connected to the eduroam network that can be easily attacked[1] (e.g. unsecured database server, SSH server, QotD, etc.).

Settings

  1. Access to the eduroam network is granted after a CTU account is created (normally within 24 hours).
  2. Set up your eduroam password in Usermap application.
  3. Follow the instructions to connect to the eduroam network according to the device type. Installation manuals for different operating systems are available in the navigation menu at the top of this page.

Troubleshooting

Before reaching out support, you can use one of the following options:

  • Make sure you are entering the correct login credentials.
    • Login name (or also realm or username) in the form <username>@cvut.cz .
    • eduroam password you set in the Usermap application.
  • Delete the existing eduroam configuration and repeat the configuration process.
  • Change the eduroam password in Usermap .
  • I am not able to connect to the internet on the device to download the configuration profile (or application):
    • The following procedure serves only as a last solution.
    • Connect to the eduroam network using name and password only (i.e. without certificate authentication).
    • After connection, continue configuration with the profile (or application) see section Settings.

If none works, use the Support section.

Support

In case of problems, please contact the ICT department at helpdesk.

The faculty operates eduroam at two locations:

  • Thákurova 9 (T9), the so-called new building of CTU, the official offices of the Faculty of Architecture (FA) and FIT.
  • Thákurova 7 (TH:A), building A on the premises of the Faculty of Civil Engineering from the 9th floor upwards.

Manual configuration

Configuration information for the case of manual configuration:

Network name (SSID)
eduroam
Authentication
802.1x
Security
WPA2/AES enterprise, TLS at least version 1.2
Login and password
Username in the form <username>@cvut.cz and eduroam password.
Password authentication
Protected EAP (PEAP) and MSCHAPv2
Radius server
radius.cvut.cz
Certification Authority (CA)
GEANT OV RSA CA 4 < USERTrust RSA Certification Authority (root), viz https://pki.cesnet.cz/cs/ch-tcs-ssl-ca-4-crt-crl.html
Serial number
01:FD:6D:30:FC:A3:CA:51:A8:1B:BC:64:0E:35:03:2D
SHA-1
2B:8F:1B:57:33:0D:BB:A2:D0:7A:6C:51:F7:0E:E9:0D:DA:B9:AD:8E
Upozornění:

If you don’t specify the name of the radius server or disable its certificate authentication when you manually set it up, someone can eavesdrop on your login and impersonate you! If your operating system does not allow you to set these parameters, you cannot connect securely to eduroam using this device.

  1. A list of frequently reported incidents related to running such services can be found here. ↩