Connect to the IONIS (eduroam) WiFi on Linux, Android, and iOS

Filed under Notes on September 8, 2025 · updated

Set up EPITA's IONIS network (eduroam) with PEAP/MSCHAPv2 and no CA certificate: GUI, nmcli, iwd, and netctl.

IONIS is EPITA’s campus WiFi, and it is eduroam under another name: the same settings and credentials work on any eduroam SSID at any participating university. Login is your EPITA email plus your IONIS (Microsoft) password, no CA certificate. It only broadcasts on 5 GHz: if the SSID does not show up, blame your WiFi card, not your config. Official doc: docs.forge.epita.fr.

Pixel / Android (GrapheneOS)

Settings > Network & internet > Internet > tap IONIS, then fill it in exactly like this:

  • On first connect, a modal shows the server certificate: tap Trust. That is the Trust on First Use step (“Do not validate” no longer exists on modern Android).
  • Anonymous identity is required on a recent Pixel: your email, same as Identity. Only on Android 13 and older use anonymous or leave it empty.
  • If it fails: forget the network and start over. Android does not retry cleanly on a broken saved profile.

Linux: NetworkManager (GUI)

Default on Ubuntu, Fedora, and GNOME in general. Click IONIS and the dialog should end up like this:

Linux: NetworkManager (CLI)

Without a GUI, use nmcli. nmtui has no EAP fields, so it can’t set up enterprise networks. The whole connection in one command:

nmcli connection add type wifi con-name IONIS ifname wlan0 ssid IONIS \
  wifi-sec.key-mgmt wpa-eap 802-1x.eap peap 802-1x.phase2-auth mschapv2 \
  802-1x.identity "first.name@epita.fr" 802-1x.password "your-ionis-password"

Linux: iwd / impala (Omarchy, Arch)

impala handles 802.1X directly: select IONIS, enter email and password, done.

Bare iwd needs the profile by hand. Create /var/lib/iwd/IONIS.8021x:

[Security]
EAP-Method=PEAP
EAP-Identity=first.name@epita.fr
EAP-PEAP-Phase2-Method=MSCHAPV2
EAP-PEAP-Phase2-Identity=first.name@epita.fr
EAP-PEAP-Phase2-Password=your-ionis-password


[Settings]
Autoconnect=true

Then restart iwd and connect:

sudo systemctl restart iwd
iwctl station wlan0 connect IONIS

Linux: netctl (Arch)

Create /etc/netctl/wlan0-IONIS:

Description='IONIS Wifi'
Interface=wlan0
Connection=wireless
Security=wpa-configsection
IP=dhcp
WPAConfigSection=(
  'ssid="IONIS"'
  'key_mgmt=WPA-EAP'
  'eap=PEAP'
  'identity="first.name@epita.fr"'
  'password="your-ionis-password"'
  'phase2="auth=MSCHAPV2"'
)
sudo netctl enable wlan0-IONIS
sudo netctl start wlan0-IONIS

iPhone

Tap IONIS, enter your email and password, then tap Trust on the certificate warning.

Last updated on
-- views