Wireless Local Area Networking at DESY in Zeuthen

1. Limited Access (guest networks)
1. 1 WLAN DESY-guest
1. 2 WLAN eduroam
1. 3 Conference WLAN
2. Access to DESYs internal Network
2.1 WLAN DESY

Currently supported WLAN standards are 802.11a/g/n with a bandwidth of up to 217 Mbps. These standards are supported by nearly any available WLAN card. The wireless network at Zeuthen is nearly available on the whole campus.

Installing and operating of private WLANs or Access Points at DESY is not allowed. If you have problems to connect to DESY-WLANs (e.g. because of received signal quality is to low) please contact UCO (uco-zn@desy.de).

Important remark concerning security: It has to be mentioned that any usage of wireless LAN technologies based on the 802.11a/g/n standard has to be seen as potentially dangerous as the current implementation of the standard is an insecure protocol. The data transfer is unencrypted or encrypted with an algorithm quite easy to break and thus any other WLAN-User can capture the data stream. This means that i.g. passwords are easily visible and can only be avoided by using secure protocols like ssh or VPN.

The network interface of the device has to have DHCP enabled to get automatically an IP address. There are basically two different options to get wireless connectivity at DESY – limited access (DESY-guest network) and access to DESYs internal network.

1. Limited Access (guest networks)

In the DESY-guest network, a cable based and a wireless network interface are provided. The guest subnet is mainly provided for guests staying at DESY for a short time. Access to internal services is very limited (no login into Windows Domain). The access rights basically correspond to those of anonymous external hosts.

1.1 Wireless network DESY-guest
To use this wireless network a registration (MAC address, user name, institute, email address) is necessary. The registration can be done by email (uco-zn@desy.de) or through a web form.

Remark: It has to be mentioned that any usage of wireless LAN SSID guest the data transfer is unencrypted thus any other WLAN-User can capture the data stream. This means that i.g. passwords are easily visible and can only be avoided by using secure protocols like ssh or VPN.


Top

1.2 Wireless network eduroam
This wireless network can be used by guests whose home institutes offer service eduroam. For authentication 802.11x technology is used. The data transfer is encrypted with WPA/WPA2 algorithm. For registered user this is a quick and easy way to obtain a secure access to the Internet without any further registration.
DESY employees can take part in the project eduroam and, when travelling to participating institutes, use the WLAN eduroam.
Here you will find detailed information about eduroam at DESY.

1.3 Conference WLAN
It is possible to occasionally activate guest WLANs for conferences, workshops or something similar. The duration and the name of the conference WLAN depends on the event.

2. Access to DESYs internal Network

The DESY Computer Security Council (RSR) issued a set of rules and recommendations to be followed by anyone operating computers attached to the DESY internal network.
To use this wireless network a registration (MAC address, user name, institute, email address) is necessary (UCO). Wireless network interfaces of devices registered at DESY Hamburg are considered trusted devices in Zeuthen.

2.1 WLAN DESY
Login to WLAN DESY will be possible with the DESY user name and WLAN password. At the moment the encryption method used with WLAN DESY is considered to be one of the safest in the field of WLAN.


Top