How do I get wireless access on campus?
-For Windows XP
Connecting a Windows computer to the new SFA-LAWN.
Changes in SFA-LAWN Configuration
Effective August 23, 2006
Beginning on Wednesday, August 23, 2006, SFA-LAWN will provide an encrypted connection for you and will require that you authenticate (log in) each time you connect to the wireless network. These enhancements will require that you make a “one time” change to the connection settings that you have previously been using on your PC.
Once you have completed this process and start to use SFA-LAWN, you will have to go through the NetReg process. This applies to everyone...Faculty...Staff...and Students. As always, the NetReg process must be completed at the beginning of each semester.
Before beginning, please note the following:
Do not use a wireless connection at the same time you are using a wired connection. This can cause some serious problems. using your wireless connection and then decide to use the faster wired connection, please right click the icon under Network Connections and then click disable. For security and operational reasons, please disable your wireless connection when you specifically using it. By nature, wireless connections are not as fast as wired connections. So, if you have a choice, a wired connection will give results.
To enable your computer to be connected to SFA-LAWN:
Click Control Panel
Switch to Category View, if not already there
Click "Network and Internet Connections"
Network and Internet Connections
Click "Network Connections"
Right-click your wireless connection and click "Properties"
If the wireless connection is not ENABLED you will not see the "Wireless Networks" tab below. Enable the
connection before doing the Right-Click.
Use the scroll bar and scroll down to the bottom
Double-click "Internet Protocol (TCP/IP)"
Select "Obtain an IP Address Automatically"
Select "Obtain DNS Server Address Automatically"
Select "Wireless Networks" tab
You should get…
Make sure the "Use Windows to configure my wireless network settings" box is checked off
Click the "Add" button
On the next screen...
For "Network name (SSID)" enter "SFA-LAWN" CASE Sensitive
For "Network Authentication", use the drop-down selection and choose "WPA-2" if available, otherwise"WPA"
For "Data encryption", use the drop-down selection to choose "AES" or "TKIP"; "AES" is preferred
The other options should then 'gray' out and no longer be selectable.
Your screen should look like...
If you do not see "WPA" under the Network Authentication, read the info about the WPA Update
Click the "Authentication" tab.
You should get…
Make sure the "Enable IEEE 802.1x authenticaion for this network" is checked off
For "EAP type", use the drop-down selection to choose "Protected EAP (PEAP)"
Make sure "Authenticate as computer when computer information is available" is NOT checked off
Click the "Properties" button
You should get...
Uncheck "Validate server certificate"
For "Select Authentication Method:", use the drop-down selection to choose "Secured password (EAP-MSCHAP v2)"
"Enable Fast Reconnect" will work either way.
Click the "Configure" button
You should get...
Uncheck "Automatically use my Windows logon name and password (and domain if any)"
Click "OK" . If you do not uncheck this box the laptop will send whatever name you have given your laptop to be
authenticated instead of your mySFA or Guest ID that you need to use.
Click "OK" until all boxes are closed.
You may have to restart your system.
You should get this at the bottom, right side of your screen...
The danger in using Ad-Hoc Networks
1. Click on the Wireless option in the System Tray and open the Wireless Network Connection window.
2. Click on "Change advanced settings".
3. In the Wireless Network Connection Properties window, click on the Wireless Networks tab.
4. Click on the Advanced button.
5. Click on "Access point (infrastructure) networks only" This workaround prevents you from connecting to any ad-hoc
network in the first place.
...and this box should pop-up
Fill in the fields as shown.
Click the "OK" button
The NetReg Process:
The NetReg process simply matches your mySFA info to your network card's serial number (MAC address). That way,
if your computer gets infected and we have to block you from our network, we can look up your MAC address and
cross reference that to your name. This makes the entire resolution process go more quickly for everyone and a lot
smoother for you.
When you first open a browser, you will be re-directed to our NetReg page. Read the info and click the "Next" button.
On the following screen, enter your mySFA name and PIN in the boxes and click the "Accept" button. You should then
get a message indicating a successful registration. If not, write down the error message info and call the SHACK at
x1212 (Faculty/Staff) or x4357 (Students).
If you were successful, reboot your computer. Everything should work, now.
-For Windows Vista
Windows Vista Wireless Connection Settings for the SFA-LAWN
Microsoft Compatibility Notice
Due to a known issue with Microsoft Windows Vista, many computers running Vista are unable to establish an initial
connection to the SFA Wireless Network. This is the result of using Wi-Fi Protected Access (WPA) in conjunction with
Advanced Encryption Standard (AES) - as required by The State of Texas. Microsoft and Stephen F. Austin State University
are aware of this issue and Microsoft is working to resolve the issue. Until then, no Windows Vista machine can be
guaranteed to connect to the SFA-LAWN. For further information, reference Microsoft Knowledge Base Article #935222.
The SHACK will configure any Vista computer to communicate with the SFA-LAWN. The SHACK can also install a hotfix
from Microsoft to help resolve this issue. However, this hotfix has not been released to the general public and has not
undergone full regression testing. As a result, Microsoft cannot guarantee that this hotfix will not create other as-yet
Once a computer has been properly configured to connect to the SFA network, the system will detect the network and start
prompting the user for additional information (The user's mySFA username and PIN). At this point, the behavior of the
system becomes erratic. Some systems will connect immediately while other will continue to prompt the user for a mySFA
username and PIN. Some systems have connected after a few minutes, while others have connected after over an an hour of
continued username and password entry. Some computers have simply not connected at all.
For further information on this issue, contact The SHACK at (936) 468-4357.
Instructions for Configuring Windows Vista for Connection to the SFA-LAWN
Step 1. Click on the Windows Logo in the lower left hand corner of the computer screen (Where the green "Start" button
used to be in Windows XP) and select "Network".
Step 2. Click on "Network and Sharing Center".
Step 3. Click on "Manage wireless networks".
Step 4. Click on "Add"
Step 5. Click on "Manually create a network profile".
Step 6. For "Network name" enter "SFA-LAWN". For "Security type" select "WPA2-Enterprise". For "Encryption type"
select "AES". "Security Key/Passphrase should be empty and grayed out. If it is not, something has gone wrong. Check
"Start this connection automatically" but leave "Connect even if the network is not broadcasting" unchecked.
Step 7. DO NOT SELECT CONNECT TO...! Instead, select "Change connections settings".
Step 8. Check, "Connect automatically when this network is in range", but leave the other two options blank. Then select the
Step 9. For, "Security type" select "WPA2-Enterprise" and "Encryption type" select AES. Under "Choose a network
authentication method" select "Protected EAP (PEAP)" and check the box "Cache user information for subsequent
connections to the network". Then select the "Setting..." box.
Step 10. Make sure that "Validate server certificate" is NOT CHECKED. Check "Enable Fast Reconnect but do not check
the other two options". Then click the, "Configure..." button.
Step 11. Make sure the "Automatically use my Windows logon name and password (and domain if any) box is NOT
CHECKED. Click OK and close all of the Windows that are open.
Step 12. Click on the Network icon " " in the System Tray. A small window will pop up to inform you that you are not
connected. Click on, "Connect to a network".
Step 13. Select "SFA-LAWN" and click "Connect".
Step 14. A notification in the lower-right corner of the desktop will pop up, indicating that Additional information is
required to connect to SFA-LAWN.
Step 15. Enter your mySFA username and PIN. LEAVE THE LOGON DOMAIN BLANK!!!
Step 16. Once connected, click, "Close".
Step 17. Open Internet Explorer (IE7). You should be automatically re-directed to the Wireless Network Registration
Information page. Scroll down and click "Next" after reading ALL of the notification.
Step 18. Enter your mySFA Username and PIN. Click accept.
Step 19. Reboot your computer. NOTE: This process should only be necessary at the beginning of each semester.
If you have any problems, contact The SHACK at (936) 468-4357.
Apple Macintosh Wireless Access to SFA-LAWN
These instructions are for a standard Macintosh running OS 10.4.10 (Tiger) on an Intel-based machine. Other Macs may
have different options due to OS and software update versions.
Minimum requirements to connect a Mac to the SFA-LAWN are:
OS 10.3.7 and an AirPort Extreme Wireless Card (or WPA(Enterprise)\AEK\TKIP compatible third party wireless card).
Step 1: Click on the Apple AirPort Icon in the upper right corner of the screen. From the pull down menu, select, "Open
NOTE: Your wireless card will see the SFA-LAWN, but do not try and connect it now. It must be
setup manually to connect.
Step 2: Select the, "801.1x" button from the top menu.
From the Configuration pull-down menu, select, "Edit Configurations...".
NOTE: If the, "802.1x" button is not present, select, "File" and "New 802.1x Connection".
Step 3: In the 8021x Configuration windows, every Authentication protocol, (Except TLS), is checked by default. You must deslect ALL of them EXCEPT PEAP.
In the "Description" box, you can name this connection anything you like.
Choose, "AirPort" for the, "Network Port".
The, "User Name" will be your mySFA username.
The, "Password" will be your mySFA PIN.
The, "Wireless Network" must be, "SFA-LAWN".
In the, "Authentication" window, de-select everything except, "PEAP".
Step 4: Select, "Connect" in the 802.1x window. After a minute or two, your Mac should connect to the network.
Step 5: The first time you connect, OS X will ask you to verify the certificate. Check the box in the lower-left corner
marked, "Always trust these certificates: and click, "Continue".
You are now be connected to the network.