Web authentication on NTNU's wireless and public networks

What is webauth?

Webauth is an authentication system enabling access to NTNU's wireless and public networks. The system gives admission to services listed at the bottom of this page, and is a simpler alternative to VPN.

How does it work?

Connect to the wireless network choosing the net with ESSID ntnu. When you are connected the wireless network ntnu, open a web browser. The browser should be directed to a page where you are required to enter your user name and password (the same user name and password you normally would enter using Cisco VPN Client). If you connect to one of the public networks with Webauth (i.e. at "Stripa" in Sentralbyggene), you only need to open a web browser and provide your user name and password to get access to the network.

Where does it work?

Web authentication is accessible at following sites on campus:

Wireless networks

• Gløshaugen
• Medisinteknisk forskningssenter (MTFS), Øya
• Dragvoll
• Musikkkonservatoriet/Olavshallen
• Marinteknisk senter
• Kalvskinnet
• Valgrinda

Public networks

When we say public networks we mean open network connections in public areas of the different campuses.

• Dragvoll public area networks

Guest access

Guests without a NTNU user account also have the opportunity to use NTNU's wireless and public networks. For access connect to the ntnuguest network. You will only be admitted to http, https websites and VPN (ipsec).

The difference between web authentication and VPN

Wireless access is very insecure, enabling others to monitor the network traffic between your computer and the access point. With a VPN connection the computer creates an encrypted tunnel making it difficult for others to monitor your transmission. Using the web authentication the only data being encrypted is when transmitting your user name and password. All traffic sent beyond this point is unsecured. This is the reason only services considered secure/encrypted are enabled for access.

Available services

Services in the public networks

There are no limitations to the type of services allowed on the public networks.

Services in the Wireless networks

Services listed are tested and should work. Without any guarantee, other services may be functional.

• http/https
• imaps/pops
• smtp and smtps
• smb
• MSN/ICQ/Jabber
• SSH
• RDP
• Applications using ITEAs licensingservices (e.g Matlab)
• News (NNTP)
• Submission
• Realtime Streaming Protocol
• Time synchronization (NTP)
• IPP
• rsync
• FTP to external sites

Common problems

• The web browser does not support SSL or is deactivated. Most up to date web browsers supports SSL.
• A service does not seem to work. Try connecting with VPN client. If the service is available it probably was deliberately disabled. Please contact orakel@ntnu.no if you want to request a service being enabled.