Service description and rules
The INFN joined in the Eduroam (Education Roaming) project for roaming of wi-fi users from Asian, Canadian, European and American universities and research institutes.
The service allow to access to the wireless infrastructure using own credentials at any italian or foreign institution supporting the Eduroam project.
At the same way italian and foreign guests whose institution has joined in the project can use their credentials to access to our wireless network.
Service access rules edited by the Italian Federation of Eduroam for users and providers are available at this link about Rules and policy: Eduroam terms of service. Here you can find Italian member institutions (joined to Eduroam): Italian Eduroam Sites.
For a complete list of institutions that joined in the Eduroam project you can look at this page: Where can I eduroam?.
How to access to the network
Technical requirements
To use the wireless network is mandatory that the device supports WPA/WPA2 Enterprise authentication.
Configuration for bastione/idefix users
We strongly suggest the Configuration Assistant Tool https://cat.eduroam.org/
(for eduroam and for INFN-dot1x): use “Click here to download your eduroam installer”, select “INFN – National Institute of Nuclear Physics”, then the user group “INFN-Milano”) and download the installer. If useful, you can consult “Choose another installer to download” (available for Linux, Windows Vista, 7, 8, 8.1, 10, Apple macOS / OS X / iOS mobile, Android).
Configurations to do, otherwise, manually:
- SSID: eduroam
- Network authentication: WPA or WPA2 Enterprise
- Encryption: TKIP or AES
- EAP type: EAP-TTLS with PAP or EAP-TLS (with TERENA personal certificate)
- Credentials: the username is the one used for “bastione” access followed by @mi.infn.it and the password is the “bastione” password.
MacOS X, version >= 10.7: follow the instructions given in section (below) Client setup
Windows XP, Vista and Windows 7 are not capable to use TTLS EAP type without additional software (supplicant).
Some manufacturers put pre-installed software (i.e. Intel PROSet) to permit the use of WPA/WPA2 Enterprise TTLS authentication.
The software recommended by INFN is SecureW2
- Free Windows XP version (INFN customized) can be downloaded here
- Versions for Windows Vista e Windows 7 are not free. INFN bought an amount of licenses for its employees and associated people: this software must be requested sending an e-mail to troubles@mi.infn.it
Configuration for students and staff of Università degli Studi di Milano
We strongly suggest the Configuration Assistant Tool https://cat.eduroam.org/
(only for eduroam): use “Click here to download your eduroam installer”, select “Università degli Studi di Milano” and download the installer. If useful, you can consult “Choose another installer to download” (available for Linux, Windows Vista, 7, 8, 8.1, 10, Apple macOS / OS X / iOS mobile, Android).
Instructions page on the UNIMI web portal.
Configurations to do, otherwise, manually:
- SSID: eduroam
- Network authentication: WPA or WPA2 Enterprise
- Encryption: TKIP or AES
- EAP type: PEAP with MSCHAPv2 or EAP-TTLS with PAP
- Credentials: university credentials name.surname@unimi.it for staff people name.surname@studenti.unimi.it for students
Configuration for foreign users
The same configuration and credentials used in their own institution.
Authorized services
All services are allowed.
Client Windows XP / 7: setup
- Windows with SecureW2 (in Italian language, with screenshots)
- Windows with Intel PROSet (in Italian language with screenshots)
For any question and problem please contact troubles@mi.infn.it