Connection rules
Users with a valid authorization provided by their home organization can join the eduroam network.
Rules of use:
The rules for using the eduroam network are defined by the roaming policy (https://www.eduroam.cz/en/roamingova_politika) this network.
Users have the following responsibilities:
Each roaming user is obliged to follow the roaming conditions of the guest and home networks and the principles of acceptable use of the CESNET academic network - see website https://www.cesnet.cz/ .
Each roaming user is obliged to respond immediately to the prompts and instructions for the administration of the guest and home network and the CESNET roaming center.
Each roaming user is fully responsible for the abuse of his / her login data (password, certificate,…), allow him / her to access the eduroam network.
Principles of acceptable use:
Users may not use this network for activities that:
They allow or attempt to gain unauthorized access to the resources of connected networks.
They violates intellectual property rights.
They affects the operation of the network or its individual services, prevents users from accessing these services, threatens the operation of the network or excessively limits its performance.
They waste network capacity.
Destroys the integrity of information stored on computers and other network elements. They restrict user privacy.
Connection parameters :
Network name (SSID): eduroam
Connection protocol: 802.1x
Security and encryption: WPA2-Enterprise / AES
Authentication: PEAP (alternatively TTLS)
Internal authentication protocol: MS-CHAPv2
RADIUS server name: eduroam.fnbrno.cz
Enable server certificate authentication / use system certificates (SHA256 Fingerprint root CA: d7: a7: a0: fb: 5d: 7e: 27: 31: d7: 71: e9: 48: 4e: bc: de: f7: 1d: 5f: 0c: 3e: 0a: 29: 48: 78: 2b: c8: 3e: e0: ea: 69: 9e: f4).
Only a group of services is allowed on the transport layer.
Network restrictions in University Hospital Brno:
Only IPv4 is supported.
An IPv4 address is assigned by the DHCP server.
The use of Peer to Peer networks is not permitted.
Network monitoring:
The operation of all computer networks in the University Hospital Brno is monitored in accordance with the Roaming policy of the Czech eduroam federation.
Blocking access:
If the rules are violated, the user's access to the eduroam network may be restricted (blocked).
If the computer spreads unwanted traffic, even without the knowledge of the computer owner, the user will be blocked from accessing the network. Therefore, take sufficient care to secure your computer.