Establishing internet access at a large educational institution is a complex process that requires careful attention to configuration details. Students, faculty, and visitors to Tomsk State University (TSU) often face the need for a fast and reliable connection to the corporate network, whether in the main building, library, or dormitory. Modern security standards require the use of encryption protocols and personal account authentication, which prevents anonymous access while guaranteeing the protection of transmitted data.
In this article, we will analyze all the nuances of connecting to a wireless network. TGU_WiFi and the guest segment TGU_GuestYou'll learn how to correctly enter your credentials, what to do if the system doesn't accept your password, and how to set up automatic login on various devices. Properly configuring DNS settings and security certificates will help avoid frequent connection drops and problems accessing educational portals.
Particular attention should be paid to the differences in settings for different operating systems. The algorithm of actions on Android may differ significantly from the settings in the environment Windows 10/11 or macOSIncorrectly selecting an encryption method or verification phase is often the reason why a device can see the network but not receive an IP address. Follow the instructions carefully to eliminate human error when entering logins.
Preparing an account and selecting a network
Before beginning the technical setup, make sure you have an active account in the university system. For students and staff, the primary identifier is the TSU domain login, which is usually the same as your email address or student record number. Without a valid password for your personal account, connecting to secure network segments is impossible, as the authorization server will reject your request.
When searching for available networks within range, you may find several options with similar names. It's important to select the SSID that matches your status. The segment is intended for educational activities and access to the university's internal resources. TGU_WiFi, while a guest channel has been created for short-term access by visitors. Using the guest network for study may result in speed limitations or blocked access to specific educational platforms.
- 🎓 TGU_WiFi — the main segment for students and employees with full access to library databases.
- 👤 TGU_Guest — a network for visitors that requires separate registration or SMS authorization.
- 🔒 Eduroam — an international network for academic roaming, accessible with credentials from other partner universities.
- 🛠 TGU_Connect — a service channel for configuring IT department equipment.
⚠️ Attention: Never connect to networks with names similar to university ones but containing extra characters or numbers (for example,
TGU_Free_123). This could be an attacker's access point created to intercept traffic (Evil Twin attack).
Setting up a connection on Android and iOS
Mobile devices are the most common clients of the university network, but they have their own peculiarities in handling security certificates. When connecting to TGU_WiFi The smartphone will ask for confirmation to install the profile or certificate. This is a standard procedure for the protocol. WPA2-Enterprise, which is necessary to encrypt the communication channel between your gadget and the access point.
In the operating system Android The process may vary depending on the OS version and the manufacturer's shell. After selecting the network, you'll often need to select an option in the "EAP Method" field. PEAP, and in the "Phase check" field set the value MSCHAPV2It is critically important not to select "CA Certificate" (or select "Do not verify") unless the university has provided you with a separate certificate file for installation, otherwise the connection will remain stuck indefinitely in the "Obtaining IP Address" status.
For users iOS (iPhone, iPad) benefit from a more unified interface. After entering your username and password, the system will automatically prompt you to trust the server certificate. You must click "Accept" or "Trust," otherwise the connection will fail. In some cases, especially when using older versions of iOS, you may need to manually enter the domain in the corresponding field, although modern TSU configuration profiles usually do this automatically.
What to do if the certificate is not accepted?
If your device displays "Certificate Error" or "Unable to connect," try deleting the saved network (Forget this network) and reconnecting. Make sure the device's date and time are set correctly—time misalignment often causes SSL/TLS certificate verification errors.
Instructions for Windows 10 and 11
On laptops running Windows Connecting to corporate networks requires careful entry of credentials. The system may offer multiple security methods, and selecting the wrong one will result in an authorization error. For the TSU network, the standard protocol is WPA2-Enterprise with encryption AESWhen you first sign in, Windows may ask which network you're connecting to. Choose "Public" or "Work," but not "Private," which limits your PC's visibility to other devices on the network.
The security window that appears after entering your password often requires additional configuration. Click "Properties" or "Advanced Settings." In the window that opens, make sure "Prompt for username and password" is checked (if required) or, conversely, the data is saved. The "Security" tab should contain the following settings: Authentication Method Microsoft: Protected EAP (PEAP)In the PEAP settings, you should uncheck "Verify server certificate" if the connection fails, although for maximum security, we do not recommend doing this without consulting with the administrator.
☑️ Windows setup checklist
A common issue in Windows is caching old passwords or profile conflicts. If you've changed your password in your account, but your laptop is still trying to connect with the old one, the connection will be lost. In this case, you'll need to delete the network profile via the command line or in the Wi-Fi settings. The command netsh wlan delete profile name="TGU_WiFi" will help clear the cache and request the data again.
⚠️ Attention: The network settings interface may change with Windows updates. If you don't see the settings described, use the Network and Sharing Center in Control Panel to access the classic wireless adapter properties menu.
Troubleshooting macOS and Linux
Operating systems from Apple and distributions Linux Network stacks have their own unique set of features. On macOS, the process is usually highly automated, but in TSU's corporate environment, conflicts with access keys stored in the keychain may arise. If the system constantly asks for a password, even if it's entered correctly, try finding the network entry. TGU_WiFi in the Keychain app and delete it, then sign in again.
For users Linux (Ubuntu, Fedora, Arch) setup may require manual editing of configuration files or use of a graphical interface NetworkManagerIn the wireless connection security settings, you must select WPA & WPA2 EnterpriseIn the "Authentication" field, select PEAP, and within the PEAP settings, certificate verification is disabled (Disable) unless a specific CA certificate is used. The username and password are entered in the appropriate fields; sometimes a domain is required. tgu.ru obviously.
| Parameter | Importance for TSU | Note |
|---|---|---|
| SSID | TGU_WiFi | Main network |
| Security | WPA2-Enterprise | 802.1x |
| Encryption | AES | Less common than TKIP |
| EAP | PEAP | Secure EAP |
| Internal authenticator. | MSCHAPv2 | Standard for Windows/Android |
Access via Eduroam for guests and partners
The university is part of a global academic network EduroamThis allows students and staff at other universities connected to the system to automatically access the internet using their native credentials. For example, a student at Moscow State University or St. Petersburg State University, when visiting Tomsk State University, can select the network eduroam and enter the login in the format user@msu.ru and your password. This eliminates the need to register on guest networks.
To configure Eduroam on personal devices before traveling, we recommend using the automatic configuration tool available on your home organization's portal. This ensures that the correct root certificates are downloaded to the device. Otherwise, when connecting to TSU, the device may block the connection due to an untrusted radius server certificate.
- 🌍 Global roaming — works in thousands of universities around the world.
- 🔐 Security — the password is transmitted only to your home university; TSU does not see it.
- 📱 Mobility — an ideal solution for conference participants and exchange students.
Diagnostics and common connection errors
Even with proper configuration, technical issues may still occur. One common issue is the "Unable to connect" error or the IP address being obtained indefinitely. This often indicates a full DHCP server range or an IP address conflict. In this case, rebooting the device's Wi-Fi module or waiting a few minutes before trying again can help. It's also worth checking that a static IP address isn't enabled on the device, which may be inappropriate for the current TSU subnet.
Another common error is the "Authentication" error. This means that the server is requesting something, but the password is incorrect or the account is locked. Make sure that the keyboard layout (input language) is not mixed up, and that the Caps Lock and there are no extra spaces at the end of the username. If you recently changed your email password, you should also update it in your Wi-Fi settings.
⚠️ Attention: Network usage rules, available protocols, and server addresses are subject to change at the discretion of the university's IT department. If the default settings no longer work, please check the current requirements in your student account or on the official TSU information portal.
If none of these methods help, the issue may be with the infrastructure or your device. Try connecting from another device to isolate the problem. If the network works on other devices, the Wi-Fi adapter drivers on your device may be outdated or corrupted. In this case, updating the drivers or resetting the operating system's network settings to factory defaults may help.
FAQ: Frequently Asked Questions
Why doesn't the TGU_WiFi network appear in the list of available networks?
Make sure you're within the coverage area (inside university buildings). If you're in a dorm or remote campus, check to see if the SSID is hidden (although this is rare at TSU). Try resetting the Wi-Fi on your device. If the issue persists, your adapter may not support the frequency standards used in your specific classroom (e.g., only 5 GHz).
Is it possible to connect to TSU Wi-Fi without a student account?
Yes, there is a network for that. TGU_GuestHowever, it may have speed, traffic, and session time limitations. For full access to the university's research databases and internal resources, a valid study or employment contract and a corresponding account are required.
How do I extend my session time if the internet is down?
The system may automatically disconnect after a period of inactivity or after a time limit (usually 12 or 24 hours). Simply re-authorize through the Captive Portal, which should open automatically when you try to access any website. If the portal doesn't open, try going to http://neverssl.com.
Does TSU support torrents and file sharing services?
The use of P2P networks and file-sharing services on the university network is generally prohibited by the university's IT resource usage rules (AUP) and is blocked by the traffic filtering system (DPI). Active downloading may result in your MAC address being temporarily blocked by the network administrator.