IT ServicesStudents

Wi-Fi

Connecting you device

Can I connect ANY wireless device to eduroam (university wireless network)?

Many wireless devices such as:

Smart TVs (including Apple TV Boxes)

Wireless Printers

Amazon Echo

Firestick/Chromecast

do not support the WPA2-Enterprise security protocol which is required for connecting to the eduroam wireless network in use at Loughborough

 

Why can't I just use a username and password to access eduroam?

The preferred method for connecting to eduroam is to use a certificate (issued through https://cloudpath.lboro.ac.uk). Certificates are the preferred method for authentication for a number of reasons.

Security - using the https://cloudpath.lboro.ac.uk installer ensures your device is properly configured. 

Efficiency - certificate based authentication is a simple conversation between your device and the authentication server. This means that the authentication occurs more quickly than with a username and password.

Scalability - due to the large numbers of devices using eduroam at Loughborough University, certificate based authentication performs better under load.

Why is process for getting on eduroam so complicated, why can't we just use a pre-shared key?

Unfortunately, pre-shared keys are designed for the home environment where only a handful of devices are connecting to the network. At the University on any given day there are around 13,000 devices connected to the wireless network. Using a pre-shared key is not a viable method of securing access to the wireless network. Therefore it is required that enterprise network security is employed. This requires each device to securely identify itself and be provided with unique encryption keys. However, it should be remembered that once your device is configured correctly you can use eduroam anywhere in the world.

What can I do if it doesn't work?

Problems are typically due to wireless drivers being out of date, or conflicts with other programs.

Suggestions:

  • Most laptops, and all supported Staff Desktop laptops have a physical switch on the side or front which turns off the wireless antenna. Set this switch to the On position to work online.
  • If you have changed your Loughborough University password, you will need to update any locally cached copy of your password on your wireless device.
  • Driver updates are normally available from your vendor's web site.

How do I register my device on HallNet?

When you have your devices MAC address, you will need to use your computer to register the device on HallNet.

 

You must register each device you connect to HallNet

 

  1. Log on to https://hallnet.info/register with your username and password.

  2. Enter the MAC address in the format xx:xx:xx:xx:xx:xx and press the Submit button.

  3. Fill in the information requested, and click on Register.

  4. If you make a mistake or want to change a setting, click on the above Registration for HallNet link.

Why can't I just use my mac address to access eduroam?

MAC Address based authentication is neither secure nor scalable. The only industry recognised method to securely authenticate and connect to a wireless network is through the use of WPA2 Enterprise using EAP authentication.

Can I connect in Halls of Residence?

Please refer to HallNet section. 

For faster internet speeds and greater reliability, we highly recommend using the wired connection whilst in your room. You will receive a far better connection when you “Plug in” your PC, Laptop, Games Console etc to the wired socket. By connecting this way, you will benefit from the following:

• Better video streaming from BBC iPlayer, All 4 etc;

• Faster download speed;

• Less buffering on YouTube;

• Less ‘lag’ when gaming;

• A 100Mb connection to yourself and not a shared wireless connection with your flat mates.

IT Services provide all hall residents with a free Ethernet cable, these can be collected from you hall reception area or the PC Clinic in the Library.

Can I connect a wireless printer in my room?

Generally, we do not recommend students bring their own wireless printers when staying in halls. This is because most wireless printers are designed for home use and do not support WPA2-Enterprise which is required for connecting them to the wireless network in use at Loughborough.

The eduroam wireless network uses certificates or your Loughborough username and password for authentication to ensure a highly secure protected environment for students. Unfortunately, most Wi-Fi printers do not support this type of authentication (WPA2-Enterprise) and so you are unable to connect them to eduroam.

We recommend setting up the centrally managed network 'self-service' printers on your personal device as they’re significantly cheaper to print on, and they’re all over the University so you can send your document to one of the print queues, walk up to any of the fleet printers, swipe your ID card and choose what to print.

To set up your laptop to print to the network of 'self-service' across campus, please visit our Printing section

Also see HallNet section

Configuring your device

Why do I have to run the wireless setup tool (https://cloudpath.lboro.ac.uk) every time I want to use the Internet?

You only need to run the setup tool once. If you are presented with the installer page again your device has most likely re-joined the setup-wifi network (instead of eduroam). To stop this from happening remove setup-wifi from the list of configured wireless networks on your device. 

I am concerned you require me to install a root certificate?

Some people have concerns about the installation of a root certificate. When authenticating devices on eduroam you need to ensure that you are talking to the correct authentication server (and not a fake / rogue one). To do this the authentication server at Loughborough University presents your device with its certificate (during the authentication process) so your device can check it is talking to the correct server. At Loughborough our authentication servers use a private CA and therefore you need to install this CA on your device. This is why we require you to install a root certificate.

However, we understand some people have concerns about installing root CAs. We assure you that the only purpose we a using this certificate authority for is eduroam authentication. We take the privacy and security of staff and students very seriously and do not use the certificate authority for any other purpose.

Can I use my VOIP phone, PSP, Nintendo DS etc.?

Your device can use eduroam if it supports the WPA2 Enterprise wireless networking standard. Devices such as Nintendo DS which don't have WPA2 Enterprise capabilities will not be able to connect. Contact your device manufacturers support to find out if it can connect to a WPA2 Enterprise network.

Security

How secure is eduroam?

When you use eduroam, the communications between your device and the wireless network are protected using industry standard AES encryption. This gives you the highest level of protection we are able to offer.

Why do I have to set a PIN / lock screen for my phone?

Your device is being configured with either University credentials or a certificate which provides access to University resources. It is important these are protected against theft. Therefore you are required to secure your device to prevent these from being accessed by unauthorised persons. It is also consider best security practice to set a pin / lock screen for your device.

Help & Support

How do I get help?

Depending on the description of the fault, you may wish to bring your device to the PC Clinic, based on the main floor of the Library. See Help and Support section for opening times.

IT Services on IT.Services@lboro.ac.uk or telephone 01509 222333. 

Can I use the wireless networks at other Universities and Colleges?

You can use eduroam at any participating eduroam site. When you visit other sites you don't need to change anything. If your device is properly configured to work with eduroam at Loughborough University, it will work at other eduroam sites. See About eduroam web page for more information.