Confidential

How To – Connect to the Student Wireless

(PEAP/MSCHAPv2)
Introduction:

The current student wireless requires a Web-authentication portal. This type of connectivity needs an
active session all the time, any wireless interruption requires a new student authentication.

- Current: 802.1x (PAP) with Web-Authentication Portal

The new student wireless authentication is WPA2-Enterprise with PEAP/MSCHAPv2; similar to ucdhs-
prod settings. This setting will authenticate the student immediately without the use of the Web-portal.
• An initial configuration is required in some devices
• Only username credential is permitted, no machine authentication is allowed.

- New: 802.1x (PEAP/MSCHAPv2)

Tested Hardware:

• IPAD Version 7.1.2 (64 GB)

• IPhone: 6 version 10.1
• MacBook Air (OS X ver. 10.9.5)
• Samsung Note Edge version 6.0.1
• HP Laptop Probook 650 – Windows 7 Enterprise

Default Authentication settings:

• ssid: ucdhs-student
• Encryption Protocol: WPA2/AES ( WPA2-Enterprise)
• EAP method: PEAP
• PHASE 2 Authentication: MSCHAPv2
• Username: Student username (UC DAVIS Active Directory)
• Password: Student password (UC DAVIS Active Directory)

Hardware Wireless configuration:

1. Android setting:
• Go to the Wireless list and choose ucdhs-student
• PHASE 2 Authentication: MSCHAPv2
• CA certificate: (Unspecified)
• Identity: Student username (UC DAVIS Active Directory)

UCDHS | How to: Connect to the Student Wireless (PEAP/MSCHAPV2) 1

 Confidential

• Anonymous Identity: (keep it blank)

• Password: Student password (UC DAVIS Active Directory)
• No Certificate required during the profile setup.

2. IPhone/MAC/IPAD setting:
• Go to the Wireless list and choose ucdhs-student
• Username: Student username (UC DAVIS Active Directory)
• Password: Student password (UC DAVIS Active Directory)
• Accept Certificate

3. HP Laptop Probook 650:

Network Authentication credential (PopUp)

• Go to the Wireless list and choose ucdhs-student
• Username: Student username (UC DAVIS Active Directory)
• Password: Student password (UC DAVIS Active Directory)
• Accept Certificate and Click Connect

Manual Wireless setting:

• Network Name: ucdhs-student
• Security Type: WPA2-Enterpise
• Encryption type: AES
• Check: Start this connection automatically
• Click on [Next]
• Change connection setting> choose Security
o Choose a network Authentication method: Microsoft: Protected EAP (PEAP)
o Check: Remember my credentials for this connection each time I’m logged on
o Click on [Settings]
 Select Authentication Method: Secured password (EAP-MSCHAP v2)
 Check: Enable Fast Reconnect
 Click on [Configure], Uncheck Automatically use my Windows logon
name and password if your machine username/password is not the
same as your student username password.
 Click on [OK] under the EAP MSCHAPv2 Properties
o Click on [OK] under the Protected EAP Properties
• Choose (Advanced settings)
o Check: Specify authentication mode
o Choose: User authentication
o Click: Save credentials
 Username: Student username (UC DAVIS Active Directory)
 Password: Student password (UC DAVIS Active Directory)
 Click on [OK] under the Windows Security
o Click on [OK] under Advanced settings
• Click on [OK] under ucdhs-student Network Properties
UCDHS | How to: Connect to the Student Wireless (PEAP/MSCHAPV2) 2