Configuring a device running the Linux Operating System to authenticate on the wired Next Generation Network


Beginning in January 2020, Yale ITS will start migrating the network within all Yale buildings to a new Next Generation Network (NGN). This will provide a more modern, resilient, and secure network. All machines connecting to this new Next Generation Network will need to do so securely, which requires network security settings to be updated.

This article explains how to configure a device running the Linux operating system to connect to the NGN wired network. For instructions on connecting to the NGN wireless network for non-Linux devices, refer to Installing the SecureW2 application for the Yale Next Generation Network.

Important Information

How to Configure Network Security Settings for devices running the Linux

  1. Locate the Network icon in the taskbar for your Linux distribution
    • Typically this is an application called "nm-connection-editor"
  2. Left-click, then select Edit Connections from the drop-down menu
  3. In the Network Connections window, select the wired connection to be configured
  4. Select the cogwheel to access the Settings menu
  5. In the settings window, select the 802.1x Security tab
  6. Ensure that the use of 802.1x security for this connection is checked
  7. In the Authentication: drop-down menu, select Protected EAP (PEAP)
  8. In the CA Certificate field, select the GlobalSign_Root_CA_-_R3.pem file, located in the /etc/ssl/cert/ folder
  9. Ensure that No CA Certificate is required is not checked
  10. In the PEAP version: drop-down menu, select Automatic
  11. In the Inner authentication drop-down menu, select MSCHAPv2
  12. Enter your NetID in the Username field
  13. Enter your NetID password in the Password field
  14. Select Save
  15. Close the Network Connections window
  16. Restart your computer to make sure the connection is activated with the new settings

Resources: