eduroam (EN)
Connection to the eduroam wi-fi network is available to all students, staff and faculty colleagues.
Network properties
- After connecting to the network, the user is assigned a public IP address.
- The network traffic is not protected by a firewall. All ports are open. The user must secure his device himself.
Varování:
For these reasons, we recommend that you do not run services on devices connected to the eduroam network that can be easily attacked[1] (e.g. unsecured database server, SSH server, QotD, etc.).
Settings
- Access to the eduroam network is granted after a CTU account is created (normally within 24 hours).
- Set up your eduroam password in Usermap application.
- Follow the instructions to connect to the eduroam network according to the device type. Installation manuals for different operating systems are available in the navigation menu at the top of this page.
Troubleshooting
Before reaching out support, you can use one of the following options:
- Make sure you are entering the correct login credentials.
- Login name (or also realm or username) in the form
<username>@cvut.cz. - eduroam password you set in the Usermap application.
- Login name (or also realm or username) in the form
- Delete the existing eduroam configuration and repeat the configuration process.
- Change the eduroam password in Usermap .
- I am not able to connect to the internet on the device to download the configuration profile (or application):
- The following procedure serves only as a last solution.
- Connect to the eduroam network using name and password only (i.e. without certificate authentication).
- After connection, continue configuration with the profile (or application) see section Settings.
If none works, use the Support section.
Support
In case of problems, please contact the ICT department at helpdesk.
The faculty operates eduroam at two locations:
- Thákurova 9 (T9), the so-called new building of CTU, the official offices of the Faculty of Architecture (FA) and FIT.
- Thákurova 7 (TH:A), building A on the premises of the Faculty of Civil Engineering from the 9th floor upwards.
Manual configuration
Configuration information for the case of manual configuration:
- Network name (SSID)
- eduroam
- Authentication
- 802.1x
- Security
- WPA2/AES enterprise, TLS at least version 1.2
- Login and password
- Username in the form
<username>@cvut.czand eduroam password. - Password authentication
- Protected EAP (PEAP) and MSCHAPv2
- Radius server
- radius.cvut.cz
- Certification Authority (CA)
- GEANT OV RSA CA 4 < USERTrust RSA Certification Authority (root), viz https://pki.cesnet.cz/cs/ch-tcs-p-crt-crl.html
- Serial number
- 01:FD:6D:30:FC:A3:CA:51:A8:1B:BC:64:0E:35:03:2D
- SHA-1
- 2B:8F:1B:57:33:0D:BB:A2:D0:7A:6C:51:F7:0E:E9:0D:DA:B9:AD:8E
Upozornění:
If you don’t specify the name of the radius server or disable its certificate authentication when you manually set it up, someone can eavesdrop on your login and impersonate you! If your operating system does not allow you to set these parameters, you cannot connect securely to eduroam using this device.