• How do I connect to the CAEN Wireless network?
• How do I log out of CAEN Wireless when I log in using the web-based authentication system?
• To use CAEN Wireless, do I have to register my wireless ethernet card with CAEN?
• What kind of wireless hardware do I need to be able to use the CAEN Wireless network?
• Why can't I use my instant messaging program when I log into CAEN Wireless over the web? Why does the web-based login restrict traffic?
• Exactly what network traffic is allowed when I use the web-based authentication for CAEN Wireless?
• I have a wireless network set up in my home. Will I need to reconfigure my computer to use CAEN Wireless?
• Can I use my handheld device (PDA) on the CAEN Wireless network?
• Can I print documents directly from my laptop to printers in CAEN labs and the Duderstadt Center?
• I am a visitor to the University. How can I gain access to CAEN Wireless?

How do I connect to the CAEN Wireless network?

Web Access

For general access to web resources, simply start your computer and make sure your wireless connection is active. Open your favorite web browser and try to access any web page outside of the College of Engineering web site. You will automatically be directed to the CAEN Wireless login page. The login box will be located in the upper-left corner of the page (see below). Enter your U-M uniqname as your User Name, and your ITCS (UMICH.EDU) Kerberos password in the Password field, and click the Log In button:

You will now be directed to the web page you originally requested, and have access to the Internet.

VPN Access

Those who desire full, secure access to the Internet can use the CAEN Wireless VPN. In general, CAEN strongly recommends that users use the CAEN Wireless VPN whenever possible. To connect to the CAEN Wireless VPN, you must make sure to install the VPN client for your computer's operating system. Instructions can be found in the corresponding Technical Note on the download page. Then simply start up the VPN client; make sure to authenticate using your U-M uniqname and ITCS (UMICH.EDU) Kerberos password.

For more information on CAEN Wireless, and the differences between the web-based authentication and the VPN, please click here.

How do I log out of CAEN Wireless when I log in using the web-based authentication system?

Once you log into CAEN Wireless over the web-based system, the following pop-up window will appear:

Leave this window open and/or minimized until you are ready to log out of CAEN Wireless. Then, simply click the Click to Logout link in the window, and you will be logged out of the network. If you inadvertently close this window before clicking the link, closing all other browser windows will log you out.

Note: If your web browser uses and/or includes pop-up blocking software, this logout window will not appear. You will need to set your pop-up blocker to allow pop-ups from the secure CAEN Wireless site in order to obtain this window. A few examples are provided below:

Internet Explorer

Select Tools >> Pop-up Blocker >> Pop-up Blocker Settings. Under the Exceptions section, you will see a field to enter the Address of Web site to allow:

Enter wireless-gw.engin.umich.edu, click Add, and close the Pop-up Blocker Settings window.

Mozilla Firefox

Select Tools >> Options... Click the Content tab, and you will see a setting for Block pop-up windows. Click the Exceptions... button, and you will be presented with the following window:

Under the Address of web site field, enter wireless-gw.engin.umich.edu, click Allow, and close the Options window.

The logout window will now appear the next time you log into CAEN Wireless over the web.

To use CAEN Wireless, do I have to register my wireless ethernet card with CAEN?

No, you do not need to register your wireless cards with CAEN. The only requirement is that you be able to authenticate using your U-M uniqname and ITCS (UMICH.EDU) Kerberos password. This can be done using the web-based authentication system, or the CAEN Wireless VPN.

Note: Users can browse the entire College of Engineering web site without logging into CAEN Wireless at all.

What kind of wireless hardware do I need to be able to use the CAEN Wireless network?

Virtually any IEEE 802.11g-compatible wireless adapter/chip will work, but you should make sure it has been tested by the Wireless Ethernet Compatibility Alliance and found to be compliant with the Standard for Wireless Fidelity (Wi-Fi). Any hardware bearing this logo should be compatible with the CAEN Wireless network. When selecting wireless hardware, you should look for a few things:

• 802.11g High Rate (often abbreviated "802.11 HR")
• 54 Mb/s (54 Megabits per second) data rate
• 2.4 GHz frequency

IEEE 802.11b hardware is forward-compatible with 802.11g, so they will also work on the CAEN Wireless network.

Why can't I use my instant messaging program when I log into CAEN Wireless over the web? Why does the web-based login restrict traffic?

In its initial deployment, CAEN designed the wireless network to encrypt all data, thus preventing unauthorized access to the network. CAEN Wireless was strictly a Virtual Private Network (VPN) which required the use of the VPN client. Unfortunately, the VPN client is not available for all operating systems or handheld devices.

In order to provide access to everyone at U-M, CAEN deployed a web-based authentication system. This service provides easy access to general Internet services, and also addresses the issues of VPN-only access. While providing this service, CAEN remains security conscience. Since the web-based authentication system does not provide any encryption (except secure login), CAEN limits the network traffic that is allowed to pass through. CAEN limits insecure protocols and/or open network ports that could be used by malicious individuals to obtain U-M user passwords, preventing U-M computing accounts, and the network, from being hacked. Unfortunately, this means that some programs may not work when logging into CAEN Wireless via the web-based system.

For example, there are several varying instant messaging (IM) programs available on the Internet. Each program uses a different network port. To allow one instant messaging program to pass through the web-based system would mean CAEN would need to allow all instant messaging programs. Another problem is instant messaging protocols tend to change frequently, using different ports, and there is no set standard for encryption. If you need to use an instant messaging program, CAEN recommends using the VPN client with the wireless network.

CAEN continues to investigate ways to make its wireless network more accessible, and strives to provide an enjoyable wireless computing experience to all who use it. For a comparison of some differences between the web-based authentication system and the VPN, see our CAEN Wireless Comparison Chart. See the following FAQ for more information on what types of network traffic are allowed when using web-based authentication:

• http://www.engin.umich.edu/caen/faqs/Wireless/General/traffic/

Exactly what network traffic is allowed when I use the web-based authentication for CAEN Wireless?

When logging into the CAEN Wireless network using web-based authentication, only the initial login is encrypted, and all other network traffic is unencrypted and therefore insecure. Therefore, CAEN has restricted access to only allow certain network traffic to pass. Specifically, this includes the following encrypted traffic:

• HTTPS to anywhere on the Internet
• SSH, SCP, SFTP and SSH-tunnelled connections to anywhere on the Internet
• IMAP-S & POP-3S to anywhere on the Internet
• NNTP using TLS to anywhere on the Internet
• PPTP/L2TP/IPSec to anywhere on the Internet
• RDP to Virtual CAEN Lab computers
• SMTP using TLS to any U-M server
• LCS (I.M.-only) using TLS to the U-M LCS server

and the following traffic which is not encrypted, and therefore insecure:

• HTTP to anywhere on the Internet
• NTP to anywhere on the Internet
• NNTP to anywhere on the Internet
• LDAP to anywhere on the Internet
• DNS to anywhere on the Internet
• FTP to off-campus sites
• SMTP to any U-M server

CAEN strongly urges its users to instead run VPN client software whenever possible while accessing the wireless network. This will encrypt all wireless network traffic, with no restrictions on what traffic will pass.

 

Note: Anyone can browse the entire College of Engineering web site over CAEN Wireless without ever logging in.

I have a wireless network set up in my home. Will I need to reconfigure my computer to use CAEN Wireless?

In general: No. You should not have to reconfigure your computer's wireless connection. However, if your computer is configured for a static IP address, then you will have to change the settings so that your computer accepts dynamic DHCP automatically. For example, in Windows, open your wireless network connection, and click the Properties button. Under This connection uses the following items, select Internet Protocol (TCP/IP) and click the next Properties button. Make sure your connection is set up to Obtain an IP address automatically, as shown below:

Note: If you use VPN client software other than Cisco for access to networks outside of CAEN Wireless, you should be aware that your VPN client may conflict with the Cisco VPN client, or vice versa. Whenever similar programs are installed on the same machine, there is always the possibility they may interfere with each other, even if only one is running at any given time. Make sure to check with your VPN software manufacturer to determine if any conflicts exist.

Can I use my handheld device (PDA) on the CAEN Wireless network?

Users with handheld devices (PDAs) can access CAEN Wireless using the web-based authentication system. There is currently no VPN service available for PDAs. Note: The web-based authentication system restricts certain network access. Click here for more information.

Can I print documents directly from my laptop to printers in CAEN labs and the Duderstadt Center?

Unfortunately, there is no direct method in which you may print to printers in CAEN computer labs, but ITCS does provide a web-based service that allows you to upload documents to ITCS printers, such as those in the Duderstadt Center. For more information, please visit:

• http://mprint.umich.edu/

I am a visitor to the University. How can I gain access to CAEN Wireless?

CAEN provides free wireless access to all visitors of the University of Michigan. Guest login passwords can be obtained at the CAEN Hotline, Monday through Friday between the hours of 8:00 a.m. and 5:00 p.m. Guest logins may also be obtained through College of Engineering departmental computing support staff.

One of two requirements must be met before CAEN Hotline staff can issue a wireless password:

• You must visit the Hotline with a valid photo ID, and must be accompanied by a University faculty or staff member who has a valid U-M Mcard, or...
• You must have a University faculty or staff member request a password using the authenticated Contact CAEN form. CAEN staff will respond to the request within one business day.

Guest wireless passwords can only remain valid for a maximum of two weeks. If access is required beyond this time period, you may request a new password.

Note: These free guest wireless passwords are only valid on the CAEN Wireless network, located in College of Engineering Buildings. If you require access to a different wireless network on campus, you should contact the administrators of that network. For example, ITCS runs the campus U-M Wireless Network. Information on guest access can be found at:

• http://www.itcs.umich.edu/accounts/conference-program.html