802.1x authentication mechanism

[Madhu]

Dear All,

We are in the process of enabling 802.1x authentication in your hostel rooms where you need credentials to authenticate yourself.

We already created login credentials and sent to your private mail ids. Please save those credentials. We will intimate you one day before enabling

802.1x authentication. If anybody did not get mail with credentials please let us know immediately.

 Please note that this is just an extra authentication token which you will have to authenticate yourself for using LAN resources.

The instructions for setting up 802.1x authentication are as follows:

Linux Configuration (Fedora/Ubuntu/CentOS)

      * Right Click on Network icon on the top bar [ If it isn't there
then try running "nm-applet" command on terminal.]
   If it doesn't shows anything then, you might have to install Network
Manager Applet or equivalent, refer
https://wiki.gnome.org/Projects/NetworkManager [1]
       * Go to Edit Connections.
       * In section "Wired" click on "Add" tab.
       * Give Connection name as "Hostel Authentication" ,check the
"Connect Automatically" checkbox.
       * Click on 802.1 X Security tab ,check the checkbox for "Use
802.1X security for this connection.
       * Select Authentication type as PEAP (MSCHAPv2) and then enter
your complete students/research email address and use the password
generated using the portal given above.
       * Click on Apply and then select this newly created connection by
clicking once again on Network icon at top.
       * And you are done.

Note: if you're using Gnome3 then these instructions might not work for
you. Use these:

   1. Go to Network Settings
   2. Go to Wired connections, click add profile
   3. In the security tab, enable 802.1x and then follow from Step 6
onwards as mentioned above.

Windows configuration (Win7/Vista/XP)

       * Right click on "My Computer" OR "Computer" Icon and go to "Manage"
       * Click on "Services and Applications" from left side bar
       * Double Click on "Services"

      * Search for an item named "WiredAutoconfig".
       * Right click on it and go to Properties, change the "Start up"
type from Manual to Automatic.
       * Again Right click on it and select "Start" to start this service.
       * Now, Close the current window and Go to "Network and Sharing
Center"
       * Go to "Change Adapter Setting"
       * Select Local Area Connection Network
       * Right click on it and go to properties and then select
"Authentication tab".

      * Check all the checkboxes in that section and select Network
Authentication Method as Microsoft: PEAP.
       * Click on settings button just beside the select box and uncheck
"validate Server Certificate".
       * Select "Secured Password (EAP-MSCHAP v2)" as Authentication Method.
       * Click on configure button just beside that select box and
uncheck the checkbox "Automatically use my Windows logon ".
       * Click OK and close the dialog.
       * Now Disable the Local Area Connection and again Enable it.
       * There will be a prompt box asking for your username/password.
Enter your complete students/research email address and use the password
generated using the portal given above.

      * And you are done.

Note:

       * To delete cached username and password in windows xp follow the
instruction given http://support.microsoft.com/kb/823731 [2]

You can view screencasts for two distros at
http://ss1.iiit.ac.in/VideoTutorials/Radius/

Regards,
Madhu.

------------------------------------------------------------------------------------------------------------------------------------------------------
Madhu Dontineni                                            P:+91 40 6653 1108
IIIT - Hyderabad                                             F:+91 40 6653 1413
Gachibowli, Hyderabad                                  E:ma...@iiit.ac.in
India 500032                                                   W:http://www.iiit.ac.in

[Madhu]

Dear All,

We enabled 802.1x on 5th floor of the Bakul hostel. Students who are staying in that floor have to make necessary settings on your laptop/desktop based on operating system.

You can follow below mentioned steps to get in to connected.

Regards,
Madhu.

------------------------------------------------------------------------------------------------------------------------------------------------------
Madhu Dontineni                                            P:+91 40 6653 1108
IIIT - Hyderabad                                             F:+91 40 6653 1413
Gachibowli, Hyderabad                                  E:ma...@iiit.ac.in
India 500032                                                   W:http://www.iiit.ac.in

---

From: "Madhu" <ma...@iiit.ac.in>
To: iiitst...@msitprogram.net
Cc: "manjunath mattam" <manj...@msitprogram.net>, "IIIT Systems Help Desk" <he...@iiit.ac.in>, "techsupport" <techs...@iiit.ac.in>, "Shatrunjay Rawat" <shatrunj...@iiit.ac.in>
Sent: Wednesday, August 6, 2014 11:28:29 AM
Subject: 802.1x authentication mechanism