Static:Network/802.1X client settings
Contents
Android
You can use our Android App to configure the correct WiFi settings on your Android device. Download it here:
Linux, etc.
Network Manager
You can use the following config file:
Please note that some versions of NM are buggy and will only work with 802.1X using MSCHAPv2, or not at all. If that affects you, it may be easiest to use wpa_supplicant.
/etc/NetworkManager/system-connections/Camp2019:
Hint: chmod 600 this file to make the connection work.
[connection] id=Camp2019 uuid=c80101e2-7b99-4511-846b-2388eb86a5ad type=wifi permissions= secondaries= [wifi] mac-address=42:23:42:23:42:23 <- !! Please change this !! mac-address-blacklist= mode=infrastructure seen-bssids= ssid=Camp2019 [wifi-security] auth-alg=open group= key-mgmt=wpa-eap pairwise= proto= [802-1x] altsubject-matches=DNS:radius.c3noc.net ca-cert=/etc/ssl/certs/DST_Root_CA_X3.pem eap=ttls; identity=Camp2019 password=Camp2019 phase2-altsubject-matches= phase2-auth=pap [ipv4] dns-search= method=auto [ipv6] dns-search= method=auto
WICD
You need an additional crypto setting for WiCD. Put this file into /etc/wicd/encryption/templates/eap-ttls (debian systems, might be different with other *nix flavours):
name = EAP-TTLS Camp2019
author = Felicitus
require identity *Identity password *password
-----
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="Camp2019"
scan_ssid=$_SCAN
identity="edward"
password="snowden"
proto=WPA2
key_mgmt=WPA-EAP
group=CCMP
pairwise=CCMP
eap=TTLS
ca_cert="/etc/ssl/certs/DST_Root_CA_X3.pem"
altsubject_match="DNS:radius.c3noc.net"
anonymous_identity="$_ANONYMOUS_IDENTITY"
phase2="auth=PAP"
#priority=2
}
Edit /etc/wicd/encryption/templates/active to include the eap-ttls config template. Restart the WiCD daemon, choose the proper encryption (EAP-TTLS Camp2019) and enter a random username/password.
Jolla/connman
/var/lib/connman/Camp2019wifi.config :
[service_Camp2019] Type=wifi Name=Camp2019 EAP=ttls Phase2=PAP Identity=edward Passphrase=snowden
wpa_supplicant.conf
/etc/wpa_supplicant/wpa_supplicant.conf :
network={
ssid="Camp2019"
key_mgmt=WPA-EAP
eap=TTLS
identity="edward"
password="snowden"
# ca path on debian 7.x, modify accordingly
ca_cert="/etc/ssl/certs/DST_Root_CA_X3.pem"
altsubject_match="DNS:radius.c3noc.net"
phase2="auth=PAP"
}
interfaces
As an alternative, you can specify the wpa_supplicant config options directly in /etc/network/interfaces:
iface wlan0 inet dhcp wpa-ssid Camp2019 wpa-identity edward wpa-password snowden wpa-proto WPA2 wpa-key_mgmt WPA-EAP wpa-group CCMP wpa-pairwise CCMP wpa-eap TTLS wpa-phase2 "auth=PAP" wpa-ca_cert "/etc/ssl/certs/DST_Root_CA_X3.pem" wpa-altsubject_match DNS:radius.c3noc.net
netctl
Description='Camp2019 secure WPA2 802.1X config'
Interface=wls1
Connection=wireless
Security=wpa-configsection
IP=dhcp
ESSID=Camp2019
WPAConfigSection=(
'ssid="Camp2019"'
'proto=RSN WPA'
'key_mgmt=WPA-EAP'
'eap=TTLS'
'identity="edward"'
'password="snowden"'
'ca_cert="/etc/ssl/certs/DST_Root_CA_X3.pem"'
'altsubject_match="DNS:radius.c3noc.net"'
'phase2="auth=PAP"'
)
iwd
[Security] EAP-Method=TTLS EAP-Identity=anonymous EAP-TTLS-CACert=/etc/ssl/certs/DST_Root_CA_X3.pem EAP-TTLS-Phase2-Method=Tunneled-PAP EAP-TTLS-Phase2-Identity=edward EAP-TTLS-Phase2-Password=snowden [Settings] Autoconnect=True
Apple MacOS / iOS
You can use one of these profiles for the correct WiFi-settings for Apple MacOS / iOS:
- [Camp2019] (5GHz only)
- [Camp2019-legacy] (2.4GHz+5GHz)
Windows
Import one of these profiles for the correct WiFi-settings for Windows
- [Camp2019] (5GHz only)
- [Camp2019-legacy)] (2.4GHz+5GHz)
To import and connect follow these steps:
- Open a command prompt and execute: netsh wlan add profile filename=Camp2019.xml
- Connect to the Camp2019 or Camp2019-legacy network; use "Camp2019/Camp2019" as the username/password when prompted.
