Networking, QuickConnect, FAQ
This page contains frequently asked questions about QuickConnect, which allows users to easily sign into the walkup networking service through a web page.
How-to and login troubleshooting
Open your browser, and connect to any http:// URL. QuickConnect will intercept your connection, ask you for your Network ID and password, and if you enter them correctly, you will be redirected to your original URL.
A popup window will be created after you successfully login. If you leave it open, this window will automatically renew your credentials (without retransmitting your password) once an hour for as long as you are connected.
I tried to go to an https:// URL like Google Apps @ Illinois, but I wasn't prompted to log in -- how do I get a login prompt?
Because you are going to a secure web site (one which begins with https:// and shows a lock in the lower corner of the browser window), QuickConnect can not intercept your request and redirect you to the login page.
After you've successfully logged in, you can go to your secure https:// URL without any problems.
Without the renewal window, you will be allowed access to the network for approximately one hour. At the end of that hour, you will be prompted again to authenticate.
Popup or ad-blocking software often blocks this window. If you configure your software to allow popups from quickconnect.cites.illinois.edu and quickconnect2.cites.illinois.edu, the popup renewal window should appear the next time you log in.
You are still permitted to access the network. About an hour after you first authenticated, you will be logged out automatically. The next time you visit a web page, you will be prompted to reauthenticate to the network.
Your session may have timed out, or perhaps the hardware running the service was rebooted for maintenance. Just click the login button again, and you will be connected to the network again.
I closed my browser windows, but forgot to log out. I want to log out, so that no one can use my connection. How do I log out after I closed my browser?
Go to http://quickconnectlogout.cites.illinois.edu/ to log out.
After you've used your Network ID to log in through Shibboleth, QuickConnect places an identification cookie on your system. This cookie stays in effect for up to an hour, if the browser application (Internet Explorer or Firefox, for example) is running. The cookie is removed when your browser window closes.
However, even if you close your browser window and destroy the cookie, you're still allowed to connect to the network for up to an hour. After an hour has passed, if you want to continue networking, you'll need to log in again.
If your renewal window is still running, then your identity is still remembered. You may be presented with the login screen in order for QuickConnect to confirm the identity of your computer, but if your own identity is still verified by the authentication cookie, then you won't need to use your Network ID after you've clicked the login button.
I had to reboot my computer, and when it came up again, I was prompted to log in.
(OR) I had to reboot my computer, and when it came up again, I wasn't prompted to log in.
After you authenticate to the Quick Connect service, you are authorized to use the service from that computer for about an hour. The service operates without any software on your computer, so you can close your browser or even reboot your computer without the service's knowledge. If this happens, you will be automatically logged out approximately an hour after you authenticated.
When your browser window closes, your personal identifier (the authentication cookie) is erased, but your computer's identifier in the QuickConnect system is not erased until an hour has passed. If your system hibernates with the renewal window still open, and it wakes up within an hour, both you and your computer are likely to be remembered. If your system reboots, your identity won't be remembered but your computer's identity may be remembered. Depending on how long has passed since you last authenticated yourself, you may or may not be prompted to log in again.
I was using the service in one building, then I put my computer in sleep mode and went to another campus building. Now I can't get on the network at all! What can I do?
For technical reasons, in order to ensure a robust campus network, roaming between buildings occasionally requires that your computer acquire a new IP address in order to continue to use the wireless service.
Some of the ways to acquire a new IP address include:
- Disconnecting your network connection and then reconnecting it:
Unplug your Ethernet cable for 10 seconds and then reinsert it.
Your computer will request a new IP address as it connects to the network again.
- Telling the system to release its IP address and renew it:
Windows users may be successful by running the command ipconfig /renew in a command prompt (found at Start -> Programs -> Accessories).
Macintosh OS X users may be successful in reconnecting by opening their system preferences, clicking on "Network," selecting Airport (or the appropriate interface) and clicking "Configure...". Select the "TCP/IP" Tab and click "Renew DHCP Lease".
Security FAQs and troubleshooting
The answer to this is both yes and no.
QuickConnect securely encrypts your username and password when it logs you in to the network, and your password is not part of the information stored in the authentication cookie placed on your system. So logging in is secure.
However, unlike the VPN system (which encrypts all communication between your computer and the VPN server), QuickConnect does not change your network communication in any way once you've logged in.
If you visit a secure web site (https://) or use secure protocols (SSH, SFTP, etc) while logged in to QuickConnect, then that communication is secured by the software involved.
If you visit a regular web site (http://) or use insecure protocols while logged in to QuickConnect, then that communication is not secured. QuickConnect does not add any security to a communication method that is insecure to begin with.
In order to improve the security experienced by UIUCnet users, many insecure methods of communication (including telnet, FTP, and Microsoft networking) are not permitted over a QuickConnect network connection.
Yes, because there's a special arrangement for antivirus software updating from the on-campus repository.
For recent Windows system users, the first two update repositories listed in the UIUC-configured VirusScan software are an on-campus FTP site and NAI's FTP site. The third repository listed is NAI's HTTP site.
Ordinarily, FTP is prohibited over QuickConnect, but FTP requests to the on-campus antivirus repository are permitted in order to make antivirus updates more convenient. (You will need to be logged in to QuickConnect in order for this to work.)
Most HTML editing packages provide several ways of uploading edited files to a web server. Some of them are permitted through QuickConnect; others are not permitted.
Permitted upload methods Denied upload methods
- A web interface
- Making the remote server appear to be a mapped drive on your system using a Novell NetDrive connection with a permitted protocol such as WebDAV
- Microsoft networking
Check with your web server's system administrator to find out if any of the permitted upload methods are available on their system for you to use.
Sometimes, websites publish material in frames or use SSI or other methods to insert content from a different location into the page that you see. If part of the content is coming from a standard web port (80, 8080, or 443), that part will display correctly, while any content that's coming from an unusual port won't display.
If you need to access a website that's using nonstandard ports for part of its content, use the VPN instead.
There are several factors determining whether QuickConnect users can print to a certain printer:
- Printer drivers and printer location: If you don't have the correct driver to print to that machine when you're part of the regular UIUCnet wired network, then you also won't be able to print to it when you're part of the QuickConnect network.
Likewise, if you haven't defined that printer's network location while you're connected to UIUCnet, you won't be able to print until you do tell your computer where to find that printer.
To resolve driver and identification issues, ask the printer's administrator to help you configure your computer's printer drivers and locate their printer on the network.
- IP filtering: If the printer limits who can and cannot print in that location based on what IP address the computer is using, the QuickConnect IP range (188.8.131.52 to 184.108.40.206) may or may not be in the printer's "permitted" list. If it's not in the permitted list, then you won't be able to print to that printer.
- Microsoft networking: If the printer uses the LPD printing port, you can print to it (assuming that you have the drivers and that QuickConnect is not blocked, as described in points 1 and 2 above).
However, if the printer is configured to be accessible only through Microsoft networking, then you won't be able to use QuickConnect to print to that printer.
If you have problems printing through QuickConnect, you can also try the VPN. The VPN client will resolve issue #3 (VPN users can use Microsoft networking). However, issues #1 and #2 may still apply (you'll still need correct drivers, you'll still need to locate the printer on the network, and the VPN IP range may or may not blocked by the printer's IP filter).
In general, if a program doesn't communicate through one of the methods listed on the permitted connections list, then it will be denied.
For example, some audio streaming and video streaming sites will encounter problems with QuickConnect even though they're presented through a web browser, because audio streams and video streams are often sent from different networking ports than regular web pages are.
For more information on what is and is not permitted through QuickConnect, see QuickConnect and security.
If you need to use a service which is blocked through QuickConnect, you can use the VPN instead. The VPN server allows nearly all types of networking to succeed.
I want to use QuickConnect instead of the VPN to authenticate when I'm off campus and I need an on-campus IP address for the library or some similar application. Why doesn't that work?
UIUCnet QuickConnect doesn't change the IP address you're given. The VPN does. That's why, when you're trying to connect to the library or the UIUC subscription to the Oxford English Dictionary from off campus, you'll need to use the VPN server to receive a UIUC IP address.