jump to navigation

Post-it: PROXIMUS_AUTO_FON and TelenetWifree (Belgium) from GNU/Linux (or Windows 7) 2015-04-14

Posted by claudio in Uncategorized.
Tags: , , , , , ,


Update 20160818: added Proximus RADIUS server.

The Belgian ISPs Proximus and Telenet both provide access to a network of hotspots. A nice recent addition is the use of alternative ssids for “automatic” connections instead of a captive portal where you login through a webpage. Sadly, their support pages provide next to no information to make a safe connection to these hotspots.

Proximus is a terrible offender. According to their support page on a PC only Windows 8.1 is supported. Linux, OSX *and* Windows 8 (!) or 7 users are kindly encouraged to use the open wifi connection and login through the captive portal. Oh, and no certification information is given for Windows 8.1 either. That’s pretty silly, as they use EAP-TTLS. Here is the setup to connect from whatever OS you use (terminology from gnome-network-manager):

Security: WPA2 Enterprise
Authentication: Tunneled TLS (TTLS)
Anonymous identity: what_ever_you_wish_here@proximusfon.be
Certificate: GlobalSign Root CA (in Debian/Ubuntu in /usr/share/ca-certificates/mozilla/)
Inner Authentication: MSCHAPv2
Usename: your_fon_username_here@proximusfon.be
Password: your_password_here
RADIUS server certificate (optional): radius.isp.belgacom.be

Telenet’s support page is slightly better (not a fake Windows 8.1 restriction), but pretty useless as well with no certificate information whatsoever. Here is the information needed to use TelenetWifree using PEAP:

SSID: TelenetWifree
Security: WPA2 Enterprise
Authentication: Protected EAP (PEAP)
Anonymous identity:what_ever_you_wish_here@telenet.be
Certificate: GlobalSign Root CA (in Debian/Ubuntu in /usr/share/ca-certificates/mozilla/)
Inner Authentication: MSCHAPv2
Usename: your_fon_username_here@telenet.be
Password: your_password_here
RADIUS server certificate (optional): authentic.telenet.be

If you’re interested, screenshots of the relevant parts of the wireshark trace are attached here:

proximus_rootca telenet_rootca


1. Tom - 2015-12-15

is there a comparable manager on windows 7, or can it be configured via the OS itself? I tried adding all manually but it would still not connect

claudio - 2015-12-15

You need to add the SSID through the Network and Sharing Center (https://technet.microsoft.com/en-us/library/cc733147%28v=ws.10%29.aspx) -> Manage Wireless Networks.


2. Yannik - 2016-01-02

Hello, thanks to the article but i fail on linux ubuntu mate:-/

I use this usb wifi : http://www.tp-link.fr/products/details/cat-11_TL-WN823N.html

Any idea what i’m going wrong ?

Sorry to my bad english …. xD

3. claudio - 2016-08-21

Sorry, I didn’t see the comment.

I am writing this connected through TelenetWifree and earlier today I connected to PROXIMUS_AUTO_FON, using the settings above. I am running Ubuntu 16.04 x64 using the built-in Intel Corporation Wireless 7260 of my laptop.

Funnily enough I have the same usb wireless card at home. I use it on my Kodi media center (also running on Ubuntu 16.04 x64). While I haven’t used the card for connecting to other networks than my private one, I do recall it worked out-of-the-box.

Are you sure the network you’re trying to connect is in range? When they are to weak (far) I also have trouble connecting (no DNS, asking voor user/pass, etc). On the other hand, the same behaviour happens on Windows laptops.


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: