Wi-Fi and VPN configuration

Below you find the recommended configuration for Wi-Fi (WiFi / Wireless / WLAN) and VPN (Virtual Private Network) for members of the D-MATH.

Wi-Fi

Some information

• The following settings are valid for all ETH staff members (incl. PhD-Students).
• The username to be used is: <your-eth-username>@staff-net.ethz.ch.
• The Wi-Fi SSIDs to be used are eduroam and eduroam-5.
• eduroam-5 is faster but we recommend to use eduroam on mobile devices because it is more stable due its characteristics.
• You have to use the Wi-Fi/VPN password and not the LDAP or Active Directory (AD) password.

In most cases, the following three entries are sufficient

SSID:                   eduroam
Username:               <your-eth-username>@staff-net.ethz.ch
Password:               <your Wi-Fi/VPN password>

Sometimes the following settings are not set correctly

Security:               wpa-eap (WPA & WPA2 Enterprise)
Authentication:         PEAP (Protected EAP)
CA Certificate:         No CA certificate is required (if you do not have one)
Inner Authentication:   MSCHAPv2

You can download an eduroam wizard for the most popular devices:
https://www.eduroam.org/about/connect-yourself

VPN (for D-MATH users)

Some information

• The following settings are valid for all users that have a valid D-MATH account (actually all members of D-MATH and some more).
• We prefer the use of the Cisco Anyconnect Client which can be installed via the standard App Store on your device or via https://sslvpn.ethz.ch.
• On Linux we suggest to use the openconnect client (NetworkManager-openconnect). The vpnc client will not work because it only supports unsave KeyExchange methods.

In most cases, the following entries are sufficient

VPN Host:               sslvpn.ethz.ch/math-guest
Username:               <your-eth-username>@math-guest.ethz.ch
Password:               <your Wi-Fi/VPN password>

When you use the build-in VPN-Client (like in iOS os OS X) use instead these settings

VPN Host:               sslvpn.ethz.ch
Username:               <your-eth-username>@math-guest.ethz.ch
Password:               <your Wi-Fi/VPN password>
Groupname:              math-guest
Shared Secret/Password: see here

VPN on Linux Configuration

The following documentation should help you to setup a VPN connection on Linux with openconnect (on our linux installation the openconnect client is already installed).

1. Click on the top right corner to get into the settings menu:

2. Go to the “Network” settings:

3. At the VPN section hit the + Button to add a new VPN connection

4. Choose the openconnect client for the new VPN connection

5. Add the gateway sslvpn.ethz.ch/math-guest

6. After you saved with the “Add” button you are ready to use the new VPN connection

Further information

Please note: The variants student-net, staff-net and “unit-net” for business equipment are mentioned in the documentation of our central IT services. Only the variant staff-net is important for us unless you are informed separately by us.

• You’ll find further information on our ISG D-MATH Blog about working with computers at the D-MATH.
• Detailed information about the services provided by IT Services of ETH Zurich can be found on the following webpage: IT Service catalogue

Posted on 17-May-2023 by ISG D-MATH
in VPN and WiFi