I understand there are two wireless services generally available on campus, MWireless and UM Wireless Network. Why is that and when did that happen?
MWireless, was made available to campus during the summer in 2008 and uses the latest wireless security standards, which were not available in 2003 when the first UM Wireless Network locations were installed.
Should I use MWireless rather than UM Wireless Network?
Yes. MWireless and UM Wireless Network, provided by ITCS, are both available in many locations on campus. MWireless provides a more secure wireless connection as all of the data between your wireless device and the Access Point is encrypted. When using UM Wireless Network just your uniqname and password is encrypted during the login process.
What is the difference in the login procedure for the two SSIDs?
MWireless: Once you have setup your wireless device, use your network management software to select MWireless. Using that software login with your U-M uniqname and UMICH Kerberos password.
UM Wireless Network: Use your network management software to select UM Wireless Network. Launch a web browser. Your web browser home page will be redirected to the UM Wireless Network authentication page. Login by typing your U-M uniqname and UMICH Kerberos password in the appropriate login boxes. Your network browser will return to your predetermined home page. You are now connected to the UM Wireless Network and can use your network applications.
If you roam out of range, put your computer in hibernation/sleep mode or turn it off for at least 10 minutes, you will be automatically logged out of UM Wireless Network
How do I configure my laptop so that I can use MWireless?
Mac:
Mac OS X 10.5 — The installer for Mac OS X 10.5 is completely automated, download and run the installer from the U-M Blue Disc or the Setting Up MWireless web pages.
Mac OS X 10.4 — The installer for Mac OS X 10.4 includes two steps that must be done manually. Download and run the installer from the U-M Blue Disc or the Setting Up MWireless web pages. The installer will provide instructions needed for the manual steps at appropriate times.
Windows XP and Vista:
If your laptop has wireless functionality, there is also software that manages the wireless functions of your computer. This may be Microsoft Windows Zero Config or proprietary software developed for your laptop.
If Microsoft Windows Zero Config is used on your laptop, download and run the SecureW2 installer from the U-M Blue Disc or the Setting Up MWireless web pages, and configure your laptop with the proper settings.
If your laptop uses software other than Microsoft Windows Zero Config you will need to manually configure the settings on your laptop. There are instructions for how to do this for some of the more popular wireless software used, as well as, configuration information available on the Setting Up MWireless web pages.This process has been automated for the two more common proprietary wireless software implementations: Dell Wireless WLAN Card Utility and Intel® PROSet/Wireless.
What are the system requirements to use the software needed for MWireless on a Windows laptop?
Windows XP or Vista:
- The most current Microsoft patches and updates for the OS on the laptop.
- Wireless card that supports 802.1X/WPA2.
Some wireless devices do not support WPA2 or may require an update of the wireless card driver, an add-on card, or an external adapter. You can contact the vendor to determine 802.1X/WPA2 compatibility or check the WiFi Alliance web site.
What are the system requirements to use the software needed to use MWireless on a MAC laptop?
OS 10.4 or later.
Why won't the Wireless Network Configuration tool work on my...?
...MAC
Make sure that you have Mac OS X 10.4 or above.
...Windows
Verify that Microsoft Windows Service Pack 3 is installed.
If your laptop uses software other than Microsoft Windows Zero Config you will need to manually configure the settings on your laptop.
...Linux
Due to the many variations of Linux distributions, it is not an operating system that is supported. While it will work, you will have to find the software that will work for your distribution and wireless device. Below are some links that may be of help.
...iPhone and iPod touch
Currently the software for the iPhone and iPod touch is not supported by ITCS. If you are having difficulty please send a message to um.wireless.network@umich.edu
What is WPA2?
Wi-Fi Protected Access 2 (WPA2) is the most recent standard method to provide security on wireless networks. WPA2 is based on the IEEE 802.11i standard. It uses Advanced Encryption Standard (AES), which provides the strongest level of encryption today.
What is IEEE and what does it have to do with wireless?
IEEE stands for the Institute of Electrical and Electronics Engineers. It is a developer of industry standards in a broad-range of global industries. 802.11 is a set of standards for wireless local area network (WLAN) computer communication, developed by IEEE committees in the 5 Gigahertz (GHz) and 2.4 GHz public spectrum bands.
Will the UM Wireless Network SSID go away?
No, it will remain. Its main purpose will be to support guests, first time users, users with older equipment or equipment for which the needed software does not exist.
Aren't wireless networks inherently insecure?
Yes, wireless networks are inherently insecure. All of the data can be intercepted anywhere the radio signals used to transmit data can be heard.
What is the most secure way to connect to the wireless network at the University of Michigan?
When you are on campus, you use MWireless where available. If an IEEE 802.11i software is not available for your wireless device, you can use the U-M VPN client when using a wireless network. Note, if you are using a wireless network provided by someone other than ITCS you may need to first login to the network and then launch the U-M VPN client.
What is the VPN?
Virtual Private Network (VPN) allows you to connect to U-M networks using a software client that provides a secure 128-bit level of encryption. This prevents unwanted users from eavesdropping on your connection. When connecting to a U-M network from a remote location, hardwired or wireless, you should use a VPN to increase the security of your session.
When do I need to use MWireless versus the VPN?
Use MWireless to connect to ITCS provided wireless network on U-M's Ann Arbor campus.
Use the U-M VPN when you are connecting to a U-M network from a remote location, using either a wireless or wired network. You can also use the U-M VPN when connecting to a wireless network on campus that is not provided by ITCS. Note, you may first need to authenticate to the wireless network and then launch the VPN client on your laptop.
How do I get the VPN client?
Information and client software is available on the U-M VPN web site.
I really want to understand the technology. Why do I need to configure my laptop to use MWireless? Why do I need to do different things depending upon what software is being used to manage the wireless functions on my wireless device?
Wi-Fi is a relatively new technology, different hardware vendors still use proprietary software and applications in their wireless implementations. In addition, there are multiple mechanisms that are used to maintain the security of your wireless connection. Things like the network name (SSID) and wireless authentication type (WEP, WPA2, Open) all need to be defined in order to connect to different wireless networks. To keep this needed data, operating systems use a wireless manager to store the data and thus allow you to use different wireless networks with different settings.
To use MWireless your device must also have an authentication client called a supplicant (where you type your uniqname and UMICH password). The supplicant must be able to support the security protocol TTLS/PAP. This protocol is not included in Windows and must be added by installing SecureW2, if you are using Windows Zero Config to manage your wireless environment.
The Microsoft Windows default wireless manager is Microsoft Wireless Zero Config. However, Windows hardware manufacturers often include and use proprietary software that includes both the wireless management and supplicant. These proprietary applications usurp Windows Zero Config.
Mac OS X.4 and later contains both wireless management and a supplicant that supports TTLS/PAP.
| Wireless software example |
Manages wireless connection |
Supplicant supports TTLS/PAP |
| Wireless Zero Config |
Yes |
No |
| SecureW2 |
No |
Yes |
| Intel® PROSet/Wireless |
Yes |
Yes |
| Dell Wireless WLAN Card Utility |
Yes |
Yes |
| Mac OS X 10.4 and later |
Yes |
Yes |
Is my computer protected from malicious software while using the campus wireless network?
- While the MWireless network is encrypted, it does not prevent malicious software such as viruses and spyware from attacking your machine. It is strongly recommended that you maintain anti-virus software on your machine. This can be obtained from U-M Virus Busters.
What should I do to increase the security of my laptop and data?
There are many things you can do. Following the recommendations of the Information Technology Security Services (ITSS) and the ITCS Virus Busters' Some Computer Security Recommendations will help you increase the security of both your laptop and the data on it.
Do most commonly used applications have built in security?
Commonly used applications, such as SSH, HTTPS and SCP provide built in security. However, other commonly used applications, such as ftp, standard POP and IMAP mail, telnet, and any web site that has a URL which starts with http:// (no s) do not. Take care not to send or receive sensitive or confidential data when using these unprotected applications.
Where is wireless connectivity available on the University of Michigan campus?
MWireless and UM Wireless Network locations, as well as information about other wireless networks available on campus, can be found on the ITCom web site.
When you click on a building in which a wireless network exists, you will find information about the wireless network(s) in that building. Buildings in which the MWireless and UM Wireless Network SSIDs are available are colored blue. When you click on a blue building, you will see a list of the building floors. Select a floor and you will see specific locations where the MWireless and UM Wireless Network SSIDs are available on that floor. MWireless and UM Wireless Network available in the same locations in academic buildings and residence halls located on the U-M Ann Arbor campus.
Why are some parts of the floor maps colored blue and some colored maize?
Areas colored blue have an 802.11a/b/g/n network and areas colored maize have an 802.11a/b/g or 802.11b/g network.
What is the difference between 802.11 a/b/g/n and 802.11 a/b/g?
The difference is the amount of throughput. 802.11n represents an approximate 4x leap in wireless network throughput performance as compared to an 802.11a/g network. This improves the user experience and also enables new applications to use the wireless network and/or high user densities, such as in large auditoriums and lecture halls. In order to take advantage of an 802.11a/b/g/n at U-M, the wireless card in your device must include 802.11n in the 5 GHz band. Some devices have 802.11n capabilities only in the 2.4 GHz band. If that is the case your device will simply connect at an 802.11 a/b/g level.
Can I print from MWireless and UM Wireless Network?
Yes, you can print from a computer connected to MWireless or UM Wireless Network. mPrint allows you to upload PDF, PostScript and text documents via an authenticated web interface and print to charged-for printers across campus.
