Wireless network on FI
The wireless network operates over IEEE 802.11a, 802.11g, 802.11n, 802.11ac compliant hardware. As of Fall 2019, the faculty Wi-Fi infrastructure is based on UniFi AP HD access points.
The eduroam network
Eduroam (EDUcation ROAMing) is an international project supporting user mobility in academic networks. It allows users to connect to the networks of all participating organisations (mainly via Wi-Fi). See the map of covered locations.
Communication between the computer and the wireless access point is secured using WPA/WPA2. Segment 126.96.36.199/22 or 2001:718:801:22c::/64 is reserved for the eduroam wireless network. The connected stations get their IP address via DHCP or SLAAC. Compared to wlan_fi, there is no need to activate your machine after connecting to the network.
Once connected to the network, authentication to https://wifi.fi.muni.cz or via the captive portal is required for full Internet access.
Once an IP address has been assigned, only access to DNS servers and
https://fadmin.fi.muni.cz is allowed from the station. For full Internet access, you need to activate your machine by accessing the URL
https://wifi.fi.muni.cz with your faculty credentials. Access is limited to a maximum of a few hours.
Activation is also possible through a captive portal that redirects to a login page with faculty authentication. If the captive portal does not appear automatically, you must open an HTTP-only page in your browser, such as http://neverssl.com, and then you will be redirected to the captive portal.
Staff and doctoral students have the option to create short-term accounts for guests or events.
Segment 188.8.131.52/24 or 2001:718:801:22b::/64 is reserved for the wireless network. Connected stations obtain their IP address dynamically via DHCP or SLAAC.
In addition to being distributed over a Wi-Fi network with ESSID wlan_fi, this network is also available in some locations over free Ethernet cables. Again, authentication via https://wifi.fi.muni.cz is required .
Once activated, access to the Internet from the corresponding assigned IP address is allowed anywhere outside the FI network. In terms of the FI network, the connected computer is accessed similarly to any other computer outside the FI network. Therefore, all services on the FI that you can use, for example, if you are connected via another ISP, should work. Some services will not work - for example, disk sharing via NFS and SMB (Windows).
The firewall tests whether the activated computer is still active. If it does not respond to a ping (ICMP echo request) or ARP query for more than 5 minutes, the activation of the IP address is cancelled and the user must reactivate the address using the URL above.
Users must note that all communication between their computer and the wireless access point is eavesdroppable, and even a potential attacker has the ability to take over their address and "hijack" an existing connection under certain circumstances. Therefore, it is recommended to use secure encrypted protocols (such as HTTPS, IMAPS, POP3S and SSH) for logging in and transferring data.
For major events (such as DOD), a dedicated Wi-Fi network with its own name/ESSID and shared password can be set up for the duration of the event
on request (if it is to be available in Building S, for technical reasons none of this should contain a space and ideally not even non-alphanumeric characters, except for the underscore and hyphen).
If it is sufficient for it to be available only in the FI building, please let us know. The theoretical capacity of the number of clients is sufficient for perhaps any event, thanks to the scale of
172.24.0.0/20 with 4000 addresses.
To successfully resolve a problem, it is very helpful to report the problem as accurately as possible. It should include:
- A precise description of the problem (too slow speed, high loss rate, inability to connect to the network, frequent disconnections from the network, ...),
- identification of the time (always to the nearest minute), the location in the building (if relevant) and the network name (ESSID),
- MAC address and OS of the device, and attach system logs if possible,
- if the problem has been ongoing for a long time or has only recently started to manifest itself,
- is the problem generic, or is it only happening under certain circumstances?
Or anything else useful.
- Instructions for getting WiFi working under Windows.