EDUROAM: How do I connect?

Audience

Students, Employees 

Question

How do I connect?

Answer

With eduroam, Minnesota State students and employees can use their StarID credentials to access Wi-Fi when visiting participating institutions. Visitors from other eduroam-participating colleges and universities can access Wi-Fi at participating Minnesota State colleges and universities using the usernames and passwords from their home institutions.

Before traveling to another eduroam-participating institution, we recommend signing onto eduroam at your home campus with each device you will be using, to be sure everything works. Connecting involves installing a security certificate.

Connecting to eduroam

1. On your device, select the eduroam from the list of available Wi-Fi networks.
2. You will be prompted to sign onto the network. Enter the following for credentials:
   Username: StarID@minnstate.edu or StarID@go.minnstate.edu (for example, ab1234cd@minnstate.edu)
   Password: your StarID password.
3. You may be prompted to accept a security certificate. If this happens, verify that the certificate is from radius.mnstate.us. If so, click OK to accept.

Note: Linux devices may not prompt for credentials when you first join eduroam. If that's the case, set up a "hidden" network with the settings below.

If your device asks for more information, use the following settings:

• Security: 802.1x EAP / WPA2 Enterprise
• EAP Method: TTLS (Tunneled TLS)
• Phase-2 (Inner) Authentication: PAP or GTC
• Proxy Settings: none
• IP Settings: DHCP
• CA Certificate: Use system certificates (no CA certificate is required)
• Domain: minnstate.edu
• Anonymous Identity: anonymous@minnstate.edu 

Sometimes a device may prompt for authentication several times, even though the password is correct. If this happens, keep trying. Once the device has connected, it usually connects automatically from then on. If the device tells you that the password is invalid, though, it probably is. Re-enter and try again.

Using the eduroam configuration assistant

Some devices, especially those running Windows older than Windows 10, may require the use of eduroam’s configuration assistant to make eduroam work. Note that this requires administrative privileges on your device.

1. Go to https://cat.eduroam.org/
2. Click/tap the “eduroam user: download your eduroam installer” button.
3. Select Minnesota State Colleges and Universities as your Home Institution.
4. Click Download your eduroam installer for your operating system
5. Enter the following when prompted:
   Username: StarID@minnstate.edu or StarID@go.minnstate.edu (for example, ab1234cd@minnstate.edu)
   Password: your StarID password
6. Go to your device’s Wi-Fi setting and select eduroam
7. Your device is connected to eduroam and will automatically connect at eduroam-participating institutions.

Firewall restrictions for BSU and NTC eduroam clients

Devices connected to eduroam while on the BSU and NTC campuses may not connect to non-public BSU/NTC IT resources such as file servers, printers, etc.

Institutions that implement eduroam will often treat these clients as guests and therefore have firewall restrictions in place, per guidelines from the eduroam governing body.

While connected to eduroam on the BSU and NTC campuses, devices will only be allowed to communicate with off-campus resources using the following protocols/ports:

• IP Protocol 41 - IPv6 Encapsulation
• IP Protocol 50 - Encapsulating Security Payload
• IP Protocol 51 - Authentication Header
• tcp/21 - FTP
• tcp/22 - SSH
• tcp/80 - HTTP
• tcp/110 - POP3
• udp/123 - NTP
• tcp/143 - IMAP4
• tcp/220 - IMAP3
• tcp/udp/443 - HTTPS
• tcp/465 - SMTPS
• udp/500 - ISAKMP
• tcp/587 - SMTP
• tcp/993 - IMAPS
• tcp/995 - POP3S
• udp/1194 - OpenVPN
• tcp/1723 - PPTP
• tcp/1935
• tcp/3389 - RDP
•  tcp/udp/4172
• udp/4500
• tcp/udp/8443
• tcp/10000
• tcp/32111