User controlled configuration via NetworkManager

The following procedure assumes that the machine to be connected to the Department’s wireless network is running Ubuntu 19 or later. The example below used Ubuntu 20.04 LTS with the GNOME desktop environment.

Note: In order to verify the wireless authentication server identity when connecting to the wireless network a certificate for the Comodo AAA Services root certificate authority will need to be available to perform the necessary check. This certificate is often available by default on many systems but can otherwise be downloaded directly from Sectigo here.

1. Click on the network icon in the menu bar, select Wi-Fi then Select Network followed by CUED and then Connect.
2. An authentication popup will appear.
   For Wi-Fi security select WPA & WPA2 Enterprise in the drop down list.
   For Authentication select Protected EAP (PEAP) in the drop down list.
   Anonymous identity can either be left blank or should be @eng.cam.ac.uk
   For Domain enter eng.cam.ac.uk
   For CA certificate navigate to /etc/ssl/certs/Comodo_AAA_Services_root.pem which should be the required Comodo AAA Services certificate.
   For PEAP version select Automatic in the drop down list.
   For Inner authentication select MSCHAPv2 in the drop down list.
   For the user credentials enter your CRSid followed by @eng.cam.ac.uk as the Username and your central Engineering Department password, sometimes referred to as the Teaching System password, for the Password:
   
   Click Connect to continue.
3. An additional authentication popup will appear:
   
   Click Connect again to continue.
4. You should now be connected:
   

Manual configuration via wpa_supplicant

Below is an example network configuration that should be included in the wpa_supplicant configuration file, for example /etc/wpa_supplicant/wpa_supplicant.conf, when configuring the CUED wireless network manually.

network={
	ssid="CUED"
	key_mgmt=WPA-EAP
	eap=PEAP
	proto=RSN
	pairwise=CCMP
	auth_alg=OPEN
	identity="CRSid@eng.cam.ac.uk"
	anonymous_identity="@eng.cam.ac.uk"
	password="central Engineering Department password"
	ca_cert="/etc/ssl/certs/Comodo_AAA_Services_root.pem"
	phase2="auth=MSCHAPV2"
}