About LAWN
News
Security
Policy
Coverage

Help
GTwpa
GTwireless
LAWN Login API

Quick Links
WEP Key
Sponsor Guest
Device Login
GTvisitor

Forums


Search

About GTwpa

GTwpa provides a way for wireless devices to login to LAWN automatically, without having to type GT accounts and passwords into a web browser. This is a must for mobile device users who want fast access to the network. GTwpa provides users with better security between their wireless clients and the wireless access point with which they are associated. GTwpa allows 802.11n capable devices to take advantage of higher data rates than are possible with GTwireless when they are connected to 802.11n Access Points (all Atlanta and Savannah classrooms, library, etc),

What if GTwpa doesn't work for me? GTwireless (which uses the legacy WEP protocol) will continue to be available for devices that are not WPA2 Enterprise capable, and for those who use the Device login feature.

For support, contact your departmental support staff (sometimes referred to as CSR), or contact the OIT Technology Support Center (located in the first floor of the library or by phone at: 404-894-7173).

Support requests and questions should be sent to lawn-support@gatech.edu

Additional comments and suggestions can be sent to lawn-feedback@lists.gatech.edu

GTwpa Configuration

The network name or SSID needs to be set to GTwpa. Capitalization is important here. This SSID should be visible and available anywhere you can use GTwireless on the Atlanta and Savannah campuses.

Configure the network security as WPA2 Enterprise. If prompted, accept the gtwpa.lawn.gatech.edu certificate, and select PEAP as the EAP type and designate MS-CHAPv2 as the authentication method. Remember to prioritize GTwpa above GTwireless so that the next time you connect it will join GTwpa first. .

GTwpa currently requires a Georgia Tech Account (also referred to as a GT Account) and password to authenticate. You can reset your GT Account password by logging into Passport. All current faculty, staff, and students are authorized to use GT wireless services. Some Guest GT Accounts, however, are not enabled to utilize GT wireless services. If you have a Guest GT Account, you can check with your account sponsor regarding wireless services.

Your device can be configured to remember this GT account and password so that it can automatically associate and authenticate to GTwpa without the need to enter this information every time. As a result, you should not configure GTwpa on devices where you are not the exclusive user (a public/shared device or friends devices.)

Just like GTwireless, GTwpa uses the Dynamic Host Configuration Protocol (DHCP) to assign IP addresses to network devices. Static Address assignment on LAWN is not supported.

What if I want to disable Inbound Service Security (ISS) on GTwpa? By default, GTwpa users are placed behind a stateful firewall (ISS enabled), which does not allow unsolicited connections from outside of LAWN. If you need a stateful firewall (ISS disabled) on GTwpa, please contact lawn-support@gatech.edu and include your GT account and MAC address.

Configuration Examples

Below are examples of how to setup a device to access GTwpa for the following operating systems, which we are in the process of refreshing. You can also find and report configuration examples for other platforms in the forum at the bottom of the page.

Ubuntu 9.10, 10.04, and 10.10

Microsoft Windows 7

Microsoft Windows Vista

Microsoft Windows XP - Service Pack 3

Apple Mac OSX 10.6 & 10.7 (we have had limited success with WPA on previous versions)

Apple iPhone and iPod Touch

Apple iPad

Android 2.2+ Based Devices

BlackBerry Based Devices

Troubleshooting Guides

Below are possible troubleshooting guides to attempt to fix some connection and configuration issues. If you still have limited success after reviewing these guides or are uncomfortable taking these steps, please visit the OIT Technology Support Center on the first floor of the GT Library.

Troubleshooting Guide for Ubuntu

Troubleshooting Guide for Windows 7

Troubleshooting Guide for Windows XP - Service Pack 3

Troubleshooting Guide for Apple Mac OSX 10.6

Troubleshooting Guide for Apple Mac OSX 10.7

Password Changing Guides

Below are guides on what you have to do when you change your GT Account password. If you need assistance after reviewing these guides, please visit the OIT Technology Support Center on the first floor of the GT Library.

Password Changing Guide for Windows 7

Password Changing Guide for Windows Vista

Password Changing Guide for Windows XP - Service Pack 3

Password Changing Guide for Apple Mac OSX 10.6

GTwpa Forum

If you require support assistance please contact the OIT Technology Support Center at 404-894-7173 or email support@oit.gatech.edu

If you have feedback or suggestions please use the forum below, or send mail to lawn-feedback@lists.gatech.edu

Please note that the forums are not meant as a replacement for the official OIT help system REMEDY (which can be reached via email, support@oit.gatech.edu, or via Web at http://remedy.gatech.edu/request.html).

 
You must Login to LAWN Forums in order to post to this forum (HTTP cookies required).

GTwpa
This forum is to discuss the GTwpa service
You are not logged in
sorted by:
 
Selected Posts
Matthew J. Sanders

Posted:
March 24, 2009, 9:20 am


Modified
March 24, 2009, 9:24 am

 
Blackberry configuration for GTwpa

Blackberry OS 4.5.0.81+
(Device type is irrelevant, other than it having WiFi)

Do this:
Click "Manage Connections" (the pretty antenna icon) near the bottom
on the home screen
Click "Set Up Wi-Fi Network" in the menu
Click Next on the "Welcome to Wi-Fi Setup!" screen, if present
Click "Scan for Networks"
Click "GTwpa"
Type your normal GT login into the "User name" and "User password"
fields
Click the "" on the "CA certificate:" line, then click
"(Comodo) AddTrust External CA Root"
Click the "Connect" button
After a ten second wait screen, you should see "Connection
Successful!" at the VERY top of the screen
Click the "Next" button
Click "Finish"

Thanks to Thomas Shanks for sending this information. If you have instructions for other platforms please post them.

If you have instructions with pictures/screen shots please send to lawn-feedback at lists.gatech.edu
afalendysz3

Posted:
March 24, 2009, 12:33 pm

 
Configuration for Windows Mobile 6.1
Tested on a Samsung SCH-i760

Connect your mobile device to your PC using ActiveSync and copy the root certificate (http://ca.gatech.edu/certificates/gt-server-root.crt) to any directory on the device.
IMPORTANT: Change the extension of the certificate to .cer instead of .crt (this must be done on the PC, WM cannot change file extensions that I'm aware of)
Alternatively, you may rename and copy the certificate to a memory card, if your device supports it, and move the file that way.

Next, open up the File Explorer on your device and locate the renamed gt-server-root.cer
"Open" the certificate from within the File Explorer
After a few seconds, a message should pop up indicating that the certificate was installed correctly.

Open the Wireless Manager
Click "Menu"
Click "Wi-fi Settings"
Click "GTwpa"
Click "Next"
Ensure Authentication is set to WPA2 and Data Encryption is set to AES
Click "Next"
Set EAP Type to "PEAP"
Click "Finish"
Click "Connect"
Enter your gt login name and password, leave the Domain field blank.
Check the "Save Password" box
Click "OK"

After a short delay, the GTwpa network should show as "Connected"
snowlan3

Posted:
July 1, 2009, 6:40 pm


Modified
July 1, 2009, 6:43 pm

 
For Nokia E71x (AT&T running Symbian S60)

1) Go to Menu --> Settings --> Conn. mgr. --> Available WLAN networks.
2) Highlight GTwpa, go to Options --> Define access point,click "Yes", highlight "Internet" and click Select.
3) Go back to Menu --> Settings --> Config. --> Connection --> Destinations --> Internet.
4) Highlight and click on "GTwpa". Make sure to select the following settings:
Connection name: GTwpa
Data bearer: Wireless LAN
WLAN network name: GTwpa
Network status: Public
WLAN network mode: Infrastructure
WLAN security mode: WPA/WPA2
Homepage: None
Use access point: After confirmation
(You might be able to change the last 2...)
5) Highlight and click "WLAN security config." Use the following settings:
WPA/WPA2: EAP
WPA2 only mode: Off
6) Highlight and click "EAP plug-in settings". Enable "EAP-PEAP", make it highest priority, and disable all others.
7) Highlight "EAP-PEAP" and select to view "Settings" tab. Use the following settings:
Personal certificate: Not defined
Authority certificate: AddTrust External CA Root
User name in use: User defined
User name: (your GT login)
Realm in use: User defined
Realm: (leave blank)
TLS privacy: Off
Allow PEAPv0: Yes
Allow PEAPv1: Yes
Allow PEAPv2: Yes
8) Click right on d-pad to view "EAPs" tab. Enable EAP-MSCHAPv2, make it highest priority, and disable all others.
9) Highlight "EAP-MSCHAPv2" and click to configure it. Use the following settings:
User name: (your GT login)
Prompt password: No (choose yes if you want to re-enter password every time you connect)
Password: (your GT password)
10) Hit "Back" once to return to "EAPs" tab. Go right on d-pad to view "Cipher" tab. Enable the following:
RSA, AES, SHA
DHE-RSA, AES, SHA
DHE-DSS, AES, SHA
Disable the rest.
11) That should do the trick. Enjoy!!
John M. Trostel

Posted:
September 11, 2009, 2:57 pm

 
Setting up a Palm Pre:

1. Select Wi-Fi / Turn on Wi-Fi
2. You will see GTwpa - Do NOT Select it
3. Go to Wi-Fi Preferences
4. Select '+ Join Network'
5. Enter 'GTwpa' for Network Name
6.Enter 'Enterprise' for Security type
7. click on 'Connect'
8. Enter your username and password
9. click on 'Connect'

My first try failed on the password, but re-entering it allowed it to connect just fine to GTwpa. Go figure...
6.
Jeannie Su Ann Lee

Posted:
November 5, 2009, 12:28 am

 
Configuration for HTC Magic (T-Mobile MyTouch 3G) and/or HTC Dream (T-Mobile G1) running Donut 1.6:

Under
Settings->Wireless Controls-> Wi-Fi Settings

Choose "GTwpa" from the list of available wifi networks

Plug in the following values:

EAP Method: PEAP
Phase 2 Authentication: MSCHAP2
Private Key Password: (the usual gt 10 hex digit web key)
Identity: (your gt userid)
Anonymous Identity: (leave this blank)
Wireless Password: (your password)

Disclaimer: This is from trial and error. I own the above mentioned 2 devices for development, and I have root on them.
John A. Copeland

Posted:
June 21, 2010, 11:58 am

 
GTwpa does work on the Motorola Droid A855 (Android 2.1-update1) without root, but first you must go to the Home menu, press "Settings" then "Location & Security" and then press "Set Password" (near bottom of list). After doing this (and typing in an 8-character password) , check "Use secure credentials" two lines above "Set Password".

Now go back to the Home menu, press "Settings," then "Wireless and networks", then "WiFi settings" and scroll to the bottom and select "Add Wi-Fi Network". Fill in the parameters as follows:

Network SSID: GTwpa
Security: select "802.1x Enterprise"
EAP Method: select "PEAP"
Phase 2 Authentication: select "PAP"
CA certificate" select "N/A"
Client certificate" select "N/A"
Identity:
Anonymous identity: blank
Wireless password:
Click (touch) "Save" at bottom.

Now touch "GTwpa" under "Wi-Fi Networks" to connect.

This has to be repeated when your password changes.
 
Forum Posts
Matthew J. Sanders

Posted:
March 24, 2009, 9:20 am


Modified
March 24, 2009, 9:24 am

 
Blackberry configuration for GTwpa

Blackberry OS 4.5.0.81+
(Device type is irrelevant, other than it having WiFi)

Do this:
Click "Manage Connections" (the pretty antenna icon) near the bottom
on the home screen
Click "Set Up Wi-Fi Network" in the menu
Click Next on the "Welcome to Wi-Fi Setup!" screen, if present
Click "Scan for Networks"
Click "GTwpa"
Type your normal GT login into the "User name" and "User password"
fields
Click the "" on the "CA certificate:" line, then click
"(Comodo) AddTrust External CA Root"
Click the "Connect" button
After a ten second wait screen, you should see "Connection
Successful!" at the VERY top of the screen
Click the "Next" button
Click "Finish"

Thanks to Thomas Shanks for sending this information. If you have instructions for other platforms please post them.

If you have instructions with pictures/screen shots please send to lawn-feedback at lists.gatech.edu
afalendysz3

Posted:
March 24, 2009, 12:33 pm

 
Configuration for Windows Mobile 6.1
Tested on a Samsung SCH-i760

Connect your mobile device to your PC using ActiveSync and copy the root certificate (http://ca.gatech.edu/certificates/gt-server-root.crt) to any directory on the device.
IMPORTANT: Change the extension of the certificate to .cer instead of .crt (this must be done on the PC, WM cannot change file extensions that I'm aware of)
Alternatively, you may rename and copy the certificate to a memory card, if your device supports it, and move the file that way.

Next, open up the File Explorer on your device and locate the renamed gt-server-root.cer
"Open" the certificate from within the File Explorer
After a few seconds, a message should pop up indicating that the certificate was installed correctly.

Open the Wireless Manager
Click "Menu"
Click "Wi-fi Settings"
Click "GTwpa"
Click "Next"
Ensure Authentication is set to WPA2 and Data Encryption is set to AES
Click "Next"
Set EAP Type to "PEAP"
Click "Finish"
Click "Connect"
Enter your gt login name and password, leave the Domain field blank.
Check the "Save Password" box
Click "OK"

After a short delay, the GTwpa network should show as "Connected"
gth743d

Posted:
March 25, 2009, 12:55 pm

 
Ubuntu 8.10 (Intrepid Ibex):
Left click on the network manager
Click GTwpa
When the authentication information window pops up, enter the following:

Authentication: PEAP
Anonamous Identity:
CA Certificate: /etc/ssl/certs/AddTrust_External_Root.pem
PEAP Version: Version 0
Inner Authentication: MSCHAPv2

Enter your User Name and Password
Press Connect
David Byron Hilley

Posted:
April 23, 2009, 12:44 pm

 
For people using wpa_supplicant directly, here is an example config:

# gtwpa.conf
ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=wheel
eapol_version=1
ap_scan=1
fast_reauth=0

network={
ssid="GTwpa"
key_mgmt=WPA-EAP
eap=PEAP
scan_ssid=1
identity="..."
password="..."
ca_cert="/etc/ssl/certs/AddTrust_External_Root.pem"
phase1="peapver=0"
phase2="auth=MSCHAPV2"
}
#

Obviously you'll want to modify ctrl_interface and ctrl_interface_group to match your system (as well as ca_cert). And of course set your username (identity) and password.
tengland3

Posted:
June 16, 2009, 8:34 pm

 
Window 7 RC

If you're unable to reach the internet even after clicking "Connect" at the prompts.
Click the Wireless Internet Access Icon
Right-Click "GTwpa"
Click "Properties"
Click the "Security" tab
Click the "Settings" button
Look under the "Trusted Root Certification Authorities:" list
Make sure "AddTrust External CA" box is checked

I could not reach the internet without this change.
snowlan3

Posted:
July 1, 2009, 6:40 pm


Modified
July 1, 2009, 6:43 pm

 
For Nokia E71x (AT&T running Symbian S60)

1) Go to Menu --> Settings --> Conn. mgr. --> Available WLAN networks.
2) Highlight GTwpa, go to Options --> Define access point,click "Yes", highlight "Internet" and click Select.
3) Go back to Menu --> Settings --> Config. --> Connection --> Destinations --> Internet.
4) Highlight and click on "GTwpa". Make sure to select the following settings:
Connection name: GTwpa
Data bearer: Wireless LAN
WLAN network name: GTwpa
Network status: Public
WLAN network mode: Infrastructure
WLAN security mode: WPA/WPA2
Homepage: None
Use access point: After confirmation
(You might be able to change the last 2...)
5) Highlight and click "WLAN security config." Use the following settings:
WPA/WPA2: EAP
WPA2 only mode: Off
6) Highlight and click "EAP plug-in settings". Enable "EAP-PEAP", make it highest priority, and disable all others.
7) Highlight "EAP-PEAP" and select to view "Settings" tab. Use the following settings:
Personal certificate: Not defined
Authority certificate: AddTrust External CA Root
User name in use: User defined
User name: (your GT login)
Realm in use: User defined
Realm: (leave blank)
TLS privacy: Off
Allow PEAPv0: Yes
Allow PEAPv1: Yes
Allow PEAPv2: Yes
8) Click right on d-pad to view "EAPs" tab. Enable EAP-MSCHAPv2, make it highest priority, and disable all others.
9) Highlight "EAP-MSCHAPv2" and click to configure it. Use the following settings:
User name: (your GT login)
Prompt password: No (choose yes if you want to re-enter password every time you connect)
Password: (your GT password)
10) Hit "Back" once to return to "EAPs" tab. Go right on d-pad to view "Cipher" tab. Enable the following:
RSA, AES, SHA
DHE-RSA, AES, SHA
DHE-DSS, AES, SHA
Disable the rest.
11) That should do the trick. Enjoy!!
John M. Trostel

Posted:
September 11, 2009, 2:57 pm

 
Setting up a Palm Pre:

1. Select Wi-Fi / Turn on Wi-Fi
2. You will see GTwpa - Do NOT Select it
3. Go to Wi-Fi Preferences
4. Select '+ Join Network'
5. Enter 'GTwpa' for Network Name
6.Enter 'Enterprise' for Security type
7. click on 'Connect'
8. Enter your username and password
9. click on 'Connect'

My first try failed on the password, but re-entering it allowed it to connect just fine to GTwpa. Go figure...
6.
candrew3

Posted:
September 15, 2009, 9:35 pm

 
Hey guys, I just got a Zune HD, and was having troubles connecting to the GTWireless network. Anyone else got one and know any way to get the zune on the lawn without using the Device login? For some reason, I can't just connect to GTWireless and then enter my login info into the browser.
mstyczynski6

Posted:
September 16, 2009, 9:09 am

 
Hi,

I just wanted to say that since my previous post a month ago, things have been pretty good. In the past two weeks, I've been consistently logging in to GTwpa from both my Macbook Pro and iPod Touch pretty much worry-free. Thanks for the tweaks, and keep up the great work!
John M. Douglass

Posted:
September 16, 2009, 10:08 am

 
@mstyczynski6 - Thanks so much for the feedback! We are very glad to hear that your experience has been positive!

@candrew3 - Zune HD - From what I have read in the blogs, Zune HD does not support WPA-Enterprise (which is what we do on the GTwpa pilot network). You might try using its built in web browser, selecting "Remember Me" to set a cookie that will help. Unfortunately you will still have to open to the browser to the authentication page. It's unfortunate, but until Microsoft upgrades their device firmware to support WPA-Enterprise (if ever) you're out of luck. That or continue using device login.
candrew3

Posted:
September 16, 2009, 11:12 am

 
@John M. Douglass - Do you think there is a way to get the Zune on the GTwireless network? On the iTouch you have can connect to the network and then bring up the browser to login to LAWN, but on the HD you can't even connect to the GTWireless network. This is very strange because I can connect to Fastpass or GTVisitor and then bring up the browser and get to their respective login screens. Are those two networks configured differently than GTWireless?
John M. Douglass

Posted:
September 16, 2009, 12:05 pm

 
@candrew3 - Actually on the iTouch you can use the pilot network GTwpa (which will do autologin because the iTouch supports WPA-Enterprise).

For starters, doublecheck that you have the correct WEP key (https://auth.lawn.gatech.edu/ssid_wep.php). Barring that, I would drop by the OIT Technology Support Center on the first floor of the library. They should be able to assist.
John M. Douglass

Posted:
October 14, 2009, 10:00 am

 
@gth653p - I did the same research before regarding Android platform and WPA-Enterprise. From what I can tell, there is no GUI method available (yet) and unfortunately, I do believe that "rooting" is the only way to configure it at this time. This is a device limitation.

I did however find a number of interesting posts that may help.

Comment 34 by keithamus, May 11, 2009

"There is now an application in the market named 'wifi helper' by 'fan zhang' which allows you to access these networks from a friendly gui. It still requires a rooted phone, but may alleviate the situation for some, like me, who aren't prepared to edit files on their phone.

http://web.ics.purdue.edu/%7Ezhang42/wifiHelper.apk
"

From: http://code.google.com/p/android/issues/detail?id=1386

There are a number of posts there that talk about different ways of configuring Andriod for WPA-Enterprise.

A particular interesting post "Comment 54 by prakashr82, Jun 02, 2009" had a configuration that if you tweak it for "GTwpa" may work. Just write down what you do because when you change your password (at least until the OS supports it) you will need to do it again.

I do not have an Android device so cannot advise you any more. If you want a "officially supported" way to configure WPA-Enterprise on the Android, you're going to have to wait for it.
Jeannie Su Ann Lee

Posted:
November 5, 2009, 12:28 am

 
Configuration for HTC Magic (T-Mobile MyTouch 3G) and/or HTC Dream (T-Mobile G1) running Donut 1.6:

Under
Settings->Wireless Controls-> Wi-Fi Settings

Choose "GTwpa" from the list of available wifi networks

Plug in the following values:

EAP Method: PEAP
Phase 2 Authentication: MSCHAP2
Private Key Password: (the usual gt 10 hex digit web key)
Identity: (your gt userid)
Anonymous Identity: (leave this blank)
Wireless Password: (your password)

Disclaimer: This is from trial and error. I own the above mentioned 2 devices for development, and I have root on them.
kkeppler3

Posted:
November 13, 2009, 1:47 pm

 
On a motorola droid with android 2 gtwpa works. Settings:
EAP Method: PEAP
Phase 2 Authentication: MSChapV2
Identity: (your gt userid)
Anonymous Identity: (leave this blank)
Wireless Password: (your password)
Rajib Bhattacharjea

Posted:
January 14, 2010, 5:04 pm


Modified
January 27, 2010, 10:23 am

 
Has anyone had luck with disabling inbound security service? I'd like to be able to SSH into my device when it is connected to GTwpa

[addressed in a post below]
wgallagher3

Posted:
January 19, 2010, 12:41 pm

 
GTwpa does work in Android w/o root (Cupcake 1.5 on GSM HTC Hero, at least)

Settings > Wireless Controls > Wi-Fi Settings

Choose GTwpa
Choose PEAP
Choose PEAPv0/MSCHAPv2
Enter your GT user name
Enter your GT password
Choose Save

Most likely this only works for 1.5, as I know that 1.6 & above has changed the settings around
dli30

Posted:
January 26, 2010, 8:08 pm


Modified
January 27, 2010, 10:23 am

 
I'd also like to know whether it's possible to disable the inbound security service firewall on GTwpa.

[addressed in a post below]
Matthew J. Sanders

Posted:
January 27, 2010, 10:22 am


Modified
July 21, 2010, 1:27 pm

 
Currently we do not have a user interface for turning off inbound security service (ISS/statefull firewall) for GTwpa users. If you want that capability send mail to lawn-feedback@lists.gatech.edu with your username and the MAC address of your device. Thanks!
John A. Copeland

Posted:
January 29, 2010, 8:44 am


Modified
January 29, 2010, 8:50 am

 
GTwpa does work on the Motorola Droid A855 (Android 2.1) without root, but first you must go to the Home menu, press "Settings" then "Location & Security" and then press "Set Password" (near bottom of list). After doing this (and typing in an 8-character password) , check "Use secure credentials" two lines above "Set Password".

Now go back to the Home menu, press "Settings," then "Wireless and networks", then "WiFi settings" and press "GTwpa" if it shows on the list of available networks. When pressed an input list will show up. Leave the defaults, except type in your user ID and Password.

Atfer "Done", the Droid should connect to GTwpa.
cbernier3

Posted:
February 1, 2010, 5:09 pm

 
How are you getting it to work on Android? I have a rooted Android 1.5 device and the GTwpa network does not show up.
sball7

Posted:
February 21, 2010, 4:04 pm

 
It works for my Nexus One, though I have issues with the authentication at times. I have my phone set to always have wifi on. At random times, the connection changes from connected to authenticating, but I still have a connection. When I go to a web page, I am redirected to a specific lawn page giving me an error about how my "MAC address of your device is unknown by our DHCP server." This is a very annoying message, as I do not have a data plan, and use the constant wireless connection to receive emails and updates. I normally have to disconnect and reconnect to the wpa network.
John M. Douglass

Posted:
February 22, 2010, 10:52 am

 
@sball7 - I checked the logs and noticed you are using a number of devices. Could you provide me with the MAC address of your Nexus One and provide a time of day?

What I suspect is happening is the following:
1) You authenticate to WPA and the first time, your machine requests a DHCP lease. (this is how we determine if you are "active")
2) Your lease expires
3) Later, your Nexus One authenticates to WPA and for some reason, does not request a new DHCP lease (often clients _think_ they have an IP but in reality, they are caching the information instead of obtaining an actual valid lease)

This is why disconnecting and reconnecting work. It forces your device to to the right thing, which is keep a valid DHCP lease.

If indeed this is what is happening, it is a problem with your device's software

BUT, the above is a guess. I am happy to verify or debunk my above theory :)
---
John Doulgass
john.douglass@oit.gatech.edu
LAWN Systems Architect
cpetersbur3

Posted:
February 24, 2010, 4:26 pm

 
Strange problem & solution:

Tried to connect to GTwpa with WinXP SP3. Followed the instructions, but I got the wrong error message. Went to the help center; they helped me eliminate many possibilities, but I still couldn't get to the Credentials dialog box.

The fix: I needed to enable the Extensible Authentication Protocol service under Administrative Tools. I must have fiddled with the settings to save memory.
aboyd30

Posted:
March 7, 2010, 11:46 pm

 
Has anyone else noticed an increased frequency in which the internet connection via GTwpa seems to have been dropped while your computer or device is within good range of a known Wifi router like in my dorm's lounge? I am becoming frustrated with how often I lose signal. Maybe this is a particular area's routers that are experiencing problems? It is not my computer because my girlfriend's Mac has similar issues to mine.
John M. Douglass

Posted:
March 8, 2010, 9:52 am

 
@aboyd30 - I'd be happy to take a look at the logs. Is it your LOGIN that appears to be closed (devices must maintain a valid lease in order to be considered "connected". Is it the signal that you are losing or connectivity? If you could provide MAC addresses and dates/times I will be happy to see if there is anything on my end. (john.douglass@oit.gatech.edu)
nrajan3

Posted:
March 14, 2010, 9:28 pm

 
Same issue as sball7 with my G1 running android 1.6

It connects to gtwpa but after an hour or so status goes from connected to authenticating.
Turning wifi off and then on fixes the issue...

John M. Douglass' theory seems right.. will check into ways to have android software renew dhcp lease
jmjm3

Posted:
March 15, 2010, 10:32 am


Modified
March 15, 2010, 10:44 am

 
I also have the same issue as sball7 and nrajan3 with a nexus one.

Regarding the DHCP lease theory, I guess that it is correct. How long do IP addresses remain valid in the GT WPA? I understand that this is not a problem in other WiFi networks I am using because they assign IP addresses which are valid for several hours...

Let's try to find a solution for this.
John M. Douglass

Posted:
March 17, 2010, 2:51 pm


Modified
March 18, 2010, 2:24 pm

 
DHCP leases are for valid for 30 minutes. Most (normally behaving) clients renew at the half mark however, I have seen some (clients) renew within the last five minutes of a lease. Generally in the logs I see certain clients authenticate to GTwpa and then either not renew their lease or not obtain a new lease once the lease has expired. This is not proper behavior on the client end.
fsiddiqui3

Posted:
March 19, 2010, 1:59 pm

 
I also have a nexus one and am having a lot of problems connecting to either gtwireless or gtwpa. If i connect to gtwireless, it says connceted but when i launch the browser i don't go to the page where I am asked to enter my credentials to authenticate & allow me to browse. If i type https://auth.lawn.gatech.edu it still does not take me to this page (strange??)

If i connect through gtwpa, again i get connected & this time I can browse but when i finish my session & disconnect wifi & reconnect say after 10 mins, i cannot browse and i need to go into settings & select "forget network" & reconfigure to be able to browse and use the network.

I was going through the help on this page and i saw that there is a root certificate and configuration file available for the iPhone but don't we need to install the same certificate on android devices as well??
Luis Miguel Cortes-Pena

Posted:
April 9, 2010, 1:06 pm

 
I do not know if this applies to every device, but for my NEXUS ONE with android 2.1, I was having trouble connecting with GTwpa.

I found out that if your password has symbols, it does not work. I changed my password to have only number, lower case and upper case letters, IT WORKS, SOLVED !

Once you change your GT password, the setup is:

1) Forget the GT certificate stuff, I had it before, but it worked without this after I changed my password
2) Go to Settings > Wireless & networks > Wi-Fi Settings > Select GTwpa from the list (hit forget if you had it already attempted it)
3) If this is your first time, you'll be prompted to set a password for your phone credentials. Just make up a password.
4) Now, you'll get a pop-up with the configuration, choose the following:
EAP method: PEAP
Phase 2 authentication: MSCHAPV2
CA certificate: N/A
Client certificate: N/A
Identity: (your GT ID, the gtg one)
Anonymous identity: (leave blank)
Wireless password: (your GT password)

Now click connect, and you should acquire an IP address pretty quickly !
kchawla7

Posted:
April 19, 2010, 10:06 am

 
Configuring GTwpa on Nokia N95 is quite similar to e71x but to be precise, I followed the following steps:

1. Go to Menu --> Tools --> Settings --> Connection --> Access Points
2. If you can see GTwpa already present in the list of Access Points, delete that by going into Options --> Delete (or you can directly use the c key)
3. Select Options --> New Access Point and make the following settings:
* Connection Name: GTwpa
* Data Bearer: Wireless LAN
* WLAN network name: Select Search for networks --> Select GTwpa
* Network Status: Public
* WLAN Network Mode: Infrastructure
* WLAN Security Mode: WPA/WPA2
* Homepage: Nine
4. Select WLAN Security Settings and the following settings:
* WPA/WPA2: EAP
* WPA2 only mode: Off
5. Select EAP plug-in settings and make the following changes:
* Enable EAP-PEAP and disable the rest. Also make EAP-PEAP the highest priority
6. Highlight "EAP-PEAP" and select to view "Settings" tab and make the following settings:
* Personal certificate: Not defined
* Authority certificate: AddTrust External CA Root
* User name in use: User defined
* User name: (your GT login)
* Realm in use: User defined
* Realm: (leave blank)
* Allow PEAPv0: Yes
* Allow PEAPv1: Yes
* Allow PEAPv2: Yes
7. Click right on d-pad to view "EAPs" tab. Enable EAP-MSCHAPv2, make it highest priority, and disable all others.
8. Highlight "EAP-MSCHAPv2" and click to configure it. Use the following settings:
* User name: (your GT login)
* Prompt password: No (choose yes if you want to re-enter password every time you connect)
* Password: (your GT password)
9. Hit "Back" once to return to "EAPs" tab. Go right on d-pad to view "Cipher" tab. Enable the following and disable the rest:
* RSA, AES, SHA
* DHE-RSA, AES, SHA
* DHE-DSS, AES, SHA

Peter Alexandrovich Karasev

Posted:
April 22, 2010, 5:25 pm

 
RE:
The below works for me in Ubuntu 9.10, though I had to disable 'auto connect' at first because Gnome was swallowing the authorization dialog.

Ubuntu 8.10 (Intrepid Ibex):
Left click on the network manager
Click GTwpa
When the authentication information window pops up, enter the following:

Authentication: PEAP
Anonamous Identity:
CA Certificate: /etc/ssl/certs/AddTrust_External_Root.pem
PEAP Version: Version 0
Inner Authentication: MSCHAPv2

Enter your User Name and Password
Press Connect

Jeannie Su Ann Lee

Posted:
April 28, 2010, 11:01 pm


Modified
April 28, 2010, 11:01 pm

 
This is regarding problems getting the Zune HD on GTwireless (not GTwpa since it's not supported currently). Strangely, the Zune HD doesn't appear to get a DHCP lease and an IP address on GTWireless (this is after entering the wep key) Because of this, I can't bring up the browser and login screen.

I can connect to Fastpass or GTVisitor and then bring up the browser and get to their respective login screens. How are these two networks different from GTWireless?

However, while the Zune HD is trying to DHCP and get onto GTwireless, during that period I can do a lawn device login on a PC with the Zune's MAC address, then suddenly it gets an IP address. If I try to do the device login before that, it will say the MAC address is not recognized. I was wondering if there's a good solution for this.
GT73

Posted:
June 8, 2010, 11:40 am

 
Works on HTC Droid Incredible (Android 2.1) similar to poster above talking about his Nexus (I modified his instructions slightly based on the screen prompts I got):

1) Go to Settings > Wireless & networks > Wi-Fi Settings > Select GTwpa from the list (hit forget if you had it already attempted it)
2) If this is your first time, you'll be prompted to set a password for your phone credentials. Just make up a password.
3) Now, you'll get a pop-up with the configuration, choose the following:
EAP method: PEAP
Phase 2 authentication: MSCHAPV2
Identity: (your GT ID, the gtg one)
Anonymous identity: (leave blank)
Wireless password: (your GT password)
As a bonus, it seems much faster than GTwireless as well!
John A. Copeland

Posted:
June 21, 2010, 11:58 am

 
GTwpa does work on the Motorola Droid A855 (Android 2.1-update1) without root, but first you must go to the Home menu, press "Settings" then "Location & Security" and then press "Set Password" (near bottom of list). After doing this (and typing in an 8-character password) , check "Use secure credentials" two lines above "Set Password".

Now go back to the Home menu, press "Settings," then "Wireless and networks", then "WiFi settings" and scroll to the bottom and select "Add Wi-Fi Network". Fill in the parameters as follows:

Network SSID: GTwpa
Security: select "802.1x Enterprise"
EAP Method: select "PEAP"
Phase 2 Authentication: select "PAP"
CA certificate" select "N/A"
Client certificate" select "N/A"
Identity:
Anonymous identity: blank
Wireless password:
Click (touch) "Save" at bottom.

Now touch "GTwpa" under "Wi-Fi Networks" to connect.

This has to be repeated when your password changes.
epeeples3

Posted:
July 7, 2010, 11:27 am

 
Anyone know how to connect to xbox live using the gtwpa or anyone know the WPA2 key?
John M. Douglass

Posted:
July 7, 2010, 11:48 am

 
@epeeles3 - Unfortunately, Xbox does NOT support WPA-Enterprise. That is the only available protocol other than connecting via WEP (GTwireless). If you are living in a Greek House or Residence Hall, your best bet is to connect it to your wired network port (or a router). Unsure why Microsoft decided not to include support for WPA-Enterprise, but perhaps a system update in the future will enable this protocol.
jstables3

Posted:
July 12, 2010, 11:07 am

 
For Ubuntu Linux 10.04 LTS (Lucid Lynx):

See the post by gth743d, the process is exactly the same. This also works for Ubuntu Netbook Edition.

Tested on: Toshiba Satellite T235, AMD 64bit chipset, Atheros Communications Inc. AR9285 Wireless Network Adapter (PCI-Express), Ubuntu "Lucid" amd64 Netbook Edition.
jratner3

Posted:
July 30, 2010, 11:11 am

 
Issue and Resolution on XP SP3 Home Edition

Issue:
Unable to log on

Resolution:
When viewing wireless networks, go to change advanced settings. Under preferred networks, click properties. Go to the authentication tab. Click the properties button. Next to the authentication method, hit configure...Unclick "Automatically use my Windows logon name and password..."
pkanchanalai3

Posted:
August 1, 2010, 12:53 am

 
oh. I just leave blank for inner security and it's work. I'm now able to use wifi :)
John M. Douglass

Posted:
August 16, 2010, 12:37 pm


Modified
August 16, 2010, 12:38 pm

 
@dshah37 and @oakanser3 - Check the documentation available at http://www.lawn.gatech.edu/help/gtwpa

Otherwise, I would take your device to the OIT Technology Support Center at the first floor of the library. Someone there should be able to assist you.
srussell3

Posted:
August 29, 2010, 1:24 pm

 
I am trying to connect my printer to my computer through GTwpa... the printer finds gtwpa but asks for a network key. what do I type here?
John M. Douglass

Posted:
August 30, 2010, 8:34 am

 
My first guess is that your device only supports legacy WEP protocol which means it is limited to GTwireless. I would not recommend connecting a printer to the LAWN as others will be able to access it as well. Documentation on GTwireless can be found on thus site if you do choose to put it on the LAWN. But your best bet is a simple USB cable.
aahmed30

Posted:
August 30, 2010, 11:27 am

 
I cannot connect to GTwpa on neither Windows 7 nor iPhone. It says my username or password is incorrect. But I typed correctly several times and it still doesn't accept it. I tried it on GTwireless and Buzzport, but the username and password work perfectly.
John M. Douglass

Posted:
August 30, 2010, 11:37 am

 
@aahmed30 - There were a few accounts that encountered a bug in our password sync system. See if changing your password in Passport (http://passport.gatech.edu), waiting 5 minutes, then try configuring again. If that does not work, please stop by the OIT Technology Support Center. Ask them to call me and I will stop by and see what the issue is.
omora3

Posted:
August 30, 2010, 1:41 pm

 
Fedora 11, 12 and 13 Config Instructions.

The instructions are quite similar to the Ubuntu setup, except for the fact that fedora stores its certificates in a different location (/etc/pki/tls/certs/ca-bundle.crt)

You can follow the instructions from this other university that has a similar wireless infrastructure setup:

http://www.jmu.edu/computing/desktop/wireless/wm_library/OfficialWireless-FedoraGnome.pdf

Happy days! :-D

Otto Mora
wparker7

Posted:
September 1, 2010, 9:19 am

 
Question regarding connecting an Xbox 360 to GTwpa wirelessly. I can find GTwpa, however it asks me what security type... it has WPA not WPA enterprise, and asks for a (WPA key). Is there one?
John M. Douglass

Posted:
September 1, 2010, 9:50 am

 
@wparker7 - The Xbox360 is not capable of connecting to GTwpa. It does not understand WPA-Enterprise (which is what we use on GTwpa). As a fellow gamer, you will get better performance out of connecting it to your room port. Otherwise you can use the legacy GTwireless network.
wcharab3

Posted:
September 18, 2010, 5:33 pm

 
Hello,

May someone please provide me with the appropriate instructions to set up my Nokia N97 phone?

Thanks,
jwu34

Posted:
September 27, 2010, 9:22 am


Modified
September 27, 2010, 8:14 pm

 
How can I change my credentials on XP?

I have been unable to reconnect to GTwpa ever since I changed my password on passport (GTwireless works fine). Trying to connect doesn't prompt me for new credentials.

I've tried deleting the registry key HKEY_CURRENT_USER\Software\Microsoft\EAPOL\UserEapInfo, but nothing changed.

edit: Suddenly works. Probably just had to reset.
qbiles3

Posted:
October 12, 2010, 1:04 pm

 
Is anyone using this with AOSP Android 2.2 (more specifically CyanogenMod 6.0)? What settings are you using? After I connect once I have problems re-connecting.
John M. Douglass

Posted:
October 12, 2010, 3:33 pm

 
@qbiles3 - I have read in a few forums that Android 2.2 does indeed have issues with WPA. One of my colleagues says he has had better luck with 2.2.,1.
ypark61

Posted:
October 20, 2010, 3:44 pm

 
Hey guys, I have Vibrant (Galaxy S) fro t-mobile. Can you guys teach me how to connect to wpa?? thanks !!!
rszyperski3

Posted:
October 28, 2010, 11:27 am

 
For my purposes (aka your average student) I have been increasingly frustrated with logging on to GTwpa. Sometimes it takes a long time, sometimes it doesn't want to connect even when I know the network is there, and overall it has just been more of a nuisance. The slower process of connecting to it has outweighed any benefits of increased data speed, in my opinion. I finally deleted it from my networks, and I have reverted to GTwireless, which has been consistent for me. I don't mind the extra step of logging in. However, I wish that OIT would stop sending me emails reminding me about using GTwpa. PLEASE STOP REMINDING ME! I have already made up my mind that GTwpa is irritating. Thank you
John M. Douglass

Posted:
October 28, 2010, 12:45 pm

 
@rszyperski3 - Most users of GTwpa have good experiences with using that network. What we have found is that in many cases, client configuration is where problems might lie. We have written some pretty good troubleshooting documentation available above. If you are interested, that might be a good starting place. Also, the OIT Technology Support Center (on the first floor of the GT Library) has technicians more than happy to take a look at your machine to see if there is any malware or other interfering software. I am happy to work with you to determine what might improve your experience. If you can take the time to work with us, we might can find new information on how to improve the service for you as well as others or simply confirm our existing troubleshooting guides.
sbuchanan6

Posted:
January 13, 2011, 12:48 pm

 
Has anyone had any success connecting a CR-48 to GTwpa or GTwireless?
John M. Douglass

Posted:
January 13, 2011, 1:12 pm


Modified
January 13, 2011, 1:13 pm

 
@sbuchanan6 - Talk with Andrew Barnes in the OIT Technical Support Center. I believe he has some familiarity with these devices. Bring the device with you. The OIT Technology Support Center is on the first floor of the GT Library.
tlahatte3

Posted:
January 30, 2011, 5:18 pm

 
I had this same problem with GTwireless and now I have it with GTwpa. I have an HP Pavilion dv2000 laptop and when I lock my computer and open it up again I usually lose the internet connection. Even though the wireless capability is still on, windows tells me it can't find any networks. Also, turning off the wireless switch and turning it back on does not fix the problem. The only remedy to this problem is to restart the computer. Also, I only have this problem with Georgia Tech networks, not at home. I was wondering if anyone had this same problem with hp laptops and how they fixed it.
John M. Douglass

Posted:
January 31, 2011, 10:03 am

 
@tlahatte3 - It helps if you tell us your operating system :) I would first check the troubleshooting pages at:

http://www.lawn.gatech.edu/help/gtwpa

If that doesn't resolve your issue, I would bring the laptop in to the OIT Technology Support Center (TSC) on the first floor of the GT Library.
tlahatte3

Posted:
February 1, 2011, 6:51 pm

 
@John M. Douglass

I have Windows Vista on my computer, but I tried dual partitioning vista and ubuntu and never had any trouble with ubuntu. I am just wondering why it would be different for vista.
John M. Douglass

Posted:
February 8, 2011, 4:03 pm

 
@tlahatte3 - I consider comparing Vista to Ubuntu like comparing Japanese to English. They are very different operating systems. The hardware drivers are different, the configurations are very different. Each has it's own particulars. Did you attempt the troubleshooting pages or take your machine to the OIT Technology Support Center (first floor of the GT Library)?
jmcmillan8

Posted:
March 12, 2011, 5:22 pm

 
I'm having issues connecting the iPad 2 running iOS 4.3 with GTwpa. It keeps giving me a wrong password error even though I have typed it correctly countless times. It will even take me to the certificate acceptance screen and then tell me the password is incorrect, even though it is not.
Anyone have any ideas?
flissau3

Posted:
June 15, 2011, 5:29 pm

 
My Ubuntu 11.04 and my Ubuntu 10.04 would not allow me to connect to GTwpa. The OIT help desk took my MAC address and showed that after configuring it for PEAP/MSCHAPv2, my connection was connecting to GTwpa but was being refused because it came through as TLS.

However, the standard Ubuntu 10.10 x86 network manager, Intel wireless driver, and SSL certificates definitely work as of 6-15-11. If you want to use another linux distribution with GTwpa, go to OIT to make sure your connection is coming through correctly.
John M. Douglass

Posted:
June 18, 2011, 10:19 am

 
@flissau3 - I haven't had a chance to experiment with Ubuntu 11.04 and GTwpa. Previous Ubuntu had issues with the default network manager. There is some relationship between SSL/TLS and EAP/PEAP/MSChapV2 so am not sure what was said or what problem/solution you are putting up information to solve but I would love the opportunity to either help you solve your problem or use your experience to improve our documentation.
bzhu38

Posted:
July 17, 2011, 5:54 pm

 
I bought a Nintendo 3DS(at the Target),but I can't connect to the internet, Please teach me how to configure it .
John M. Douglass

Posted:
July 18, 2011, 9:19 am

 
@bzuh38 - Regarding the Nintendo 3DS, if you have never installed the Nintendo Web Browser you are probably going to have to use device login. The Nintendo 3DS does not support WPA-Enterprise so you must use the "GTwireless" SSID and either 1) use a web browser to log it in (if you have one installed) or 2) use Device Login (see https://auth.lawn.gatech.edu/) where you are going to enter your GT Account and Password and the MAC address of your Nintendo 3DS. If you need assistance, OIT Technology Support Center is located on the first floor of the GT Library.
John M. Douglass

Posted:
August 31, 2011, 12:23 pm

 
For you Android users out there, numerous issues have been reported in forums, bug track for Android, and other pages. I have found some information on a possible workaround (Disclaimer: use at your own risk, this is not tested nor supported). Details can be found here:

http://stackoverflow.com/questions/6825930/unable-to-work-with-android-on-a-corporate-network-with-wpa-wpa2-security-always

At least until the Android code is fixed and deployed to your devices. The issues lie within the WPA Supplicant. Some additional details are in the Google bugtracking system.

http://code.google.com/p/android/issues/list?can=2&q=wpa+enterprise&colspec=ID+Type+Status+Owner+Summary+Stars&cells=tiles
gtg160d

Posted:
August 31, 2011, 1:38 pm

 
@John M. Douglass and others with the android authentication issue.

I believe I've found a workaround using Tasker. I set up a profile that, when connected to GTwpa, reassociates with the network every 15 minutes.

So far, so good.
John M. Douglass

Posted:
August 31, 2011, 2:03 pm

 
@gtg160d - Hey, could you post maybe some details on how someone might do this with how you set that up? A step by step for some users would be MOST helpful and appreciated if this seems to resolve the issue. I am sure myself and others would appreciate it.
gtg160d

Posted:
August 31, 2011, 2:29 pm

 
@John M. Douglass - I spoke to soon. I'll work on it some more and post if I come up with a solution.

In the meantime, Princeton OIT has also addressed this issue here:
http://www.net.princeton.edu/android/android-stops-renewing-lease-keeps-using-IP-address-11236.html

And came up with this workaround:
http://www.net.princeton.edu/android/android-11236-partial-workaround.html

Their solution has the wifi disconnect once the screen turns off. Of course this puts the device back to mobile data.

I'm working on a solution that will force periodic DHCP renewals even if the device is asleep (where it would miss the DHCP renewal request window).

Did I read somewhere that the lease time is 30 minutes?
gtg160d

Posted:
September 1, 2011, 1:44 pm

 
@John M. Douglass

Think I've got it working using Tasker (https://market.android.com/details?id=net.dinglisch.android.taskerm&hl=en)

When Tasker detects you are connected to GTwpa it forces a reassociation every 15 minutes.

I've set up a profile as follows:
First Context->State->Wifi Connected->SSID: GTwpa

Task:
1)Tasker->Wait: 15 Minutes
2)Net->WiFi Net->Action: Reassociate, check mark for Force.
3)Tasker->Goto Action: 1

jkeathley3

Posted:
September 1, 2011, 11:34 pm

 
Why does it show that I am logged in as someone else?
John M. Douglass

Posted:
September 9, 2011, 12:33 pm

 
@jkeathley3 - If you can give me a time/day you found this I can investigate. The previous times I have found that a device holds onto an IP when it should request a new DHCP IP. This most often happens when phones turn off their wifi and when they come back online, do not behave properly and re-initialize the network stack as they _should_.
John M. Douglass

Posted:
September 9, 2011, 12:53 pm

 
Thanks to Oliver B. for the suggestion but he has shared that this utility:

https://market.android.com/details?id=org.marcus905.wifi.ace

May help with android problems with GTwpa. If any of you are having problems maintaining stable connections on GTwpa with an android device, I suggest you give it a shot. See earlier posts with bug reports of the wpa_supplicant in the codebase.
mevans33

Posted:
October 23, 2011, 9:55 pm

 
HTC Droid Incredible Help
I just spent an hour of time that I should have been studying figuring out that in order to use the method on this website for the Droid Incredible (and probably most HTC verizon phones) you have to enable storage certificates under the settings--> security. To do that you will need to set a password for it, by the way and then possible enter the password before your device allows you to edit you GTwpa settings.
achan37

Posted:
November 8, 2011, 3:31 pm


Modified
November 8, 2011, 3:33 pm

 
any update on getting wifi for windows 7 phones (mango)? when i clieck to connect to GTwpa, it tries to connect then says cannot connect. when i try to connect to GTwireless, it asks for a Password. i tried my login id and password but neither worked.
John M. Douglass

Posted:
November 8, 2011, 4:10 pm

 
@achan37 - Wifi should work on Win7 phones. We do not currently have configuration instructions but if you stop by the OIT Technology Support Center in the Clough Building (next to Starbucks), they should be able to assist you. In the meantime, I'll see if I can get some configuration information on that OS.
pagarwal34

Posted:
January 3, 2012, 11:31 am

 
I spent 2 hours figuring out why I wasn't able to ping but could browse. Turns out, it isn't possible to 'ping' when you use GTwpa. It works fine on the GTwireless.


 
   

This service is provided to authorized clients only.
Unauthorized access to this service is prohibited.

This page last modified: May 11, 2012 at 11:38 AM EDT
Disclaimer || Contact: