DSGVO: Neues Europäisches Recht

Datenschutz Grundverordnung der EU

Wir sind ein Kleinbetrieb und nicht in der Lage alle Aspekte der DSGVO abzuschätzen. Wir sichern jedoch zu, daß wir die Daten so verantwortungsbewußt nutzen wie auch wir dies von anderen erwarten. Um unseren Service zu nutzen müssen Sie deshalb nach DSGVO aktiv zustimmen, daß wir all Ihre Daten vollumfänglich nutzen und speichern und an Fremde Dienstleister wie unsere Steuerberater, unsere EDV-Dienstleister etc. weitergeben dürfen. Datenschutz-Beauftragter ist Oliver Fendt
Diese Einwilligung ist gem gesetzlichen Bestimmungen jederzeit widerrufbar.

   

Mit Nutzung der Website stimmen ich der Nutzung ausdrücklich zu.

Internet in the houses

Basics on LAN, WLAN and speed.

Many rooms have wired LAN. If wired LAN is available, this is the fastest and best way to use the internet. In these rooms and apartments we do not guarantee WLAN reception. In ALMOST all rooms there is WLAN via the networks SMUC (encrypted, password 'akademiker') or unencrypted via STUDENTENWOHNHEIME-MUC.

LAN cable is always best. Next best is 5 GHz WLAN according to the AC standard. All access points of this standard have 5AC in the name (e.g. STUDENT_CAP_5AC) and are fast. Also good is the 5 GHz range named STUDENT_CAP5. Poor is the 2 GHz range – because it is very crowded. It is named STUDENTENWOHNHEIME-MUC or STUDENT_CAP, depending on the device model.

That means: STUDENTENWOHNHEIME-MUC or STUDENT_CAP are great because they are available throughout all houses – e.g. for the smartphone.
Much faster, however, are the 5 GHz access points, which do not allow roaming and therefore have different names at every location in the building.

Usage and speed

We measure your volume used over the last 15 days every day. Fastest – unlimited and highest priority – are those who were below the average of all users in that period.
Slowest are those who use more than 17 times the 15-day average of all students. That is almost impossible with legal use. File sharing is illegal in Germany – and will quickly put you in the slowest category. In between there are 3 further priority steps. The fastest of the current 8 steps is currently 4 Mbit upload, 40 MBit download with short-term peak 10M/120M. The "slowest" is 2.5M/18M with peak 4M/70M. For normal internet use including Microsoft Teams and other video-chat apps, even the slowest step is enough. The main difference is that the slowest have lower priority than the light users. That is not so bad, because light users hardly use the internet anyway – so there is enough spare capacity.

As you can see, our lines are far from fully loaded on average. The load is spread across several lines.
At Clemensstr. 118 as of 2023, for example, 2 MNet fibre lines with 1000 MBit each and 2 Telekom lines with 250 MBit each are active.

Several computers / phones / tablets

Currently 5 devices per user are allowed.
1 fast device (usually laptop or router) – logs in with VPN????@STUDENT as username.
4 slower devices (tablet, phone) log in with VPN????@PHONE (800k/15M with peak 5M/60M), usually on WLAN.

WLAN, cable: Internet is now available in all apartments of the houses Clemensstr. 118, Emanuelstrasse and Gabelsbergerstrasse via LAN (cable).
WLAN is not guaranteed there. That is why many students use a router (e.g. TP-Link TL-WR841N about 15€ or with fast WLAN6: TP-Link Archer AX10).
In houses that have LAN cable we do not guarantee WLAN – even if WLAN is often available.
In Clemensstrasse 127 some apartments are already connected to LAN cable – but we have good WLAN6 that works in every apartment.

If something does not work with the internet you need the following checklist, then you can call the internet hotline on 089-30623-1999.
-What is your VPN number
-Do you connect via CABLE or WLAN
-If via CABLE have you tried PPPoE? Is the cable in the correct socket
-What is the current IP address of the PC (169.X.X.X or 192.X.X.X or __________)
(How to find the IP address is explained further down this page or on Google for your device) Without this information, help is not possible.

Own routers

In all apartments with a LAN connection you may run your own router.
But please note: Make sure you do not send DHCP services into our network!!! Otherwise we have to hunt down the troublemaker at great effort. We charge a flat 100€ for that.
THEREFORE do not just plug it in. These devices must be configured!!!
Always plug the cable that leads into our network into the usually BLUE WAN port (Mikrotik "ETH1", TP-Link "WAN", FritzBox: set up first) – not!!! into the often YELLOW LAN port.

We have had good experience with MIKROTIK routers (e.g. Mikrotik RB941-2nD-TC at Reichelt.de for 19.90€ or e.g. the better 5 GHz model RBD52G-5HacD2HnD-TC about 65 €).
Mikrotik routers are inexpensive, professional and from a European manufacturer.
Many students use routers from the Chinese manufacturer TP-Link – they are very cheap and easier for a one-time setup.
If you install a router, always use the PPPoE connection to our systems. That is a professional, stable protocol and works without problems.
On Mikrotik a professionally set-up router looks like this: (Copy/Paste – change the login data yourself)

Example TP-Link









/interface bridge
add auto-mac=no comment=defconf name=bridge
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 keepalive-timeout=60 \
name=Studentenwohnheim password=1234 use-peer-dns=yes user=1234@student
/interface wireless
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=\
20/40/80mhz-XXXX distance=indoors frequency=auto installation=indoor \
mode=ap-bridge ssid=MikroTik-412924 station-roaming=enabled \
wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
group-ciphers=tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik \
unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=passwort \
wpa2-pre-shared-key=passwort
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
management-protection=allowed mode=dynamic-keys name=profile1 \
supplicant-identity="" wpa-pre-shared-key=passwort \
wpa2-pre-shared-key=passwort
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn channel-width=20/40mhz-XX \
country=germany disabled=no distance=indoors frequency=auto installation=\
indoor mode=ap-bridge security-profile=profile1 ssid=WLANZimmernummerAxx \
station-roaming=enabled wireless-protocol=802.11
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge lease-time=4w2d10m \
name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf disabled=yes interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=ether1 list=LAN
/interface wireless cap
set discovery-interfaces=ether1 enabled=yes interfaces=wlan2
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan type=A
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked disabled=yes
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid disabled=yes
add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \
protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" disabled=yes \
dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
disabled=yes in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
disabled=yes ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
disabled=yes ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related disabled=yes
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked disabled=yes
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid disabled=yes
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new disabled=yes in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="masquerade network" \
ipsec-policy=out,none out-interface-list=WAN
add action=masquerade chain=srcnat comment="defconf: masquerade" \
ipsec-policy=out,none out-interface=Studentenwohnheim
/snmp
set enabled=yes
/system clock
set time-zone-name=Europe/Berlin
/system identity
set name="Zimmernummer Privat"

Picture of how a Mikrotik router is set up, for example

M_Skype

Internet is available in all our houses. In Gabelsberger Str., Clemensstrasse 118 and Emanuelstrasse as well as many renovated rooms via LAN cable. Otherwise via WLAN. WLAN reception with a reasonable antenna is available in all units that do not already have wired LAN. Note, however, that the antenna in some cheap laptops is not optimal, and reception is not equally good at every point in the room. We have had good experience with USB WLAN sticks, because with a USB extension cable for a few euros you can simply change the position and then get good reception even in unfavourable spots.

The settings are quickly explained: EVERYTHING on Windows default.
That means AUTOMATIC IP address.
Our HOTSPOTS are normally named either STUDENTENWOHNHEIM or IMMOFENDT (with a code for the position), e.g. STUDENTENWOHNHEIM2OG.

Internet with the smartphone @PHONE

You can use our internet system with up to 4 further devices (such as PlayStation, smartphone, tablet...).

The extra access is somewhat reduced in speed – otherwise it works exactly like the normal accesses, i.e. either web-authenticated or via PPPoE.

So that our system recognises that this is the 2nd access you must enter VPNxxxx@phone as username. The password stays the same as before.

Frosch_Handy

Connecting with PPPoE: (recommended)

Version for APPLE (copied from an Apple website, without warranty)

Configuration steps

  1. Get the following information from your internet provider:
    • Username and password (the username is e.g. VPN1234)
  2. Open the "Apple" menu and choose "System Preferences".
  3. Open the "Settings" menu and choose "Network".
  4. Select "Ethernet (Built-in)" from the "Show" menu (before Mac OS X 10.1 the pop-up menu "Configuration").
  5. Click the heading "PPPoE".
  6. Enable the option "Connect using PPPoE".
  7. Enter your username in the "Account Name" field.
  8. Enter your password in the corresponding field. If you want all users of the computer to use the same connection type, choose the option "Save password".

     Tip: If you want the computer to connect automatically when you open a network program (web browser, e-mail etc.), click "PPPoE Options" and enable "Connect automatically when needed".

  9. Click the heading "TCP/IP".
  10. According to your internet provider's instructions, choose "PPP" from the "Configure" menu.
  11. Click "Apply".
  12. Open a web browser or another internet program (TCP/IP program) to check your connection to the internet.

Tip: If you did not select the option to connect automatically in step 8, you must first open the program "Internet Connect", select the correct configuration and then click "Connect". Choose "Internet Connect Help" from the "Help" menu for more information.

Further steps for AirPort

  1. Open a web browser to make sure the computer connects to the internet.
  2. After the computer has successfully connected to the internet, you can physically connect the base station to the network.
  3. Unplug the power cable of the DSL or cable modem for a few seconds and plug it back in.
  4. Use the AirPort Setup Assistant (in the folder "Applications/Utilities") to copy the computer's settings to the base station.
  5. If you selected "Connect automatically when needed" in step 8 above, open the System Preference "Network" after using the AirPort Setup Assistant. Disable that setting there for the option "Ethernet (Built-in)". This prevents the problem described in the following article: AirPort: Via PPPoE a connection to the base station is possible, but not to the internet.

Information on troubleshooting the base station is in the article AirPort: Troubleshooting overview.

 

Otherwise there is also the HOTSPOT method:

The first time you open an internet page our login page appears – no matter what you wanted to open. Here you can enter your VPN number and password. e.g. VPN1234@STUDENT and 0000 as password. You are then forwarded to the page you wanted, if your browser allows it. If you get an error message, simply type the address again, then you will be connected. That's it.

Note that programs such as SKYPE only work after you have opened an internet page to identify yourself.

If the internet does not work...

Internet in the houses is available via hotspots and PPPoE concentrators. Technically the routers filter all traffic to the internet. Exceptions are released pages (e.g. www.studentenwohnheime-muc.de). As soon as you connect your computer to the network (LAN or WLAN) it builds a connection to our system. Our system blocks the computer until it is authenticated.

The physical connection should work automatically with the default settings. (Obtain IP address automatically [DHCP]) You then receive a network address.

What do I need to watch with WLAN?

We have professional centrally managed access points from Mikrotik and Ubiquiti. They can transmit unencrypted (SSID: STUDENTENWOHNHEIMe-MUC) or encrypted on a 2nd ID (SMUC). The key is: akademiker
In addition there are access points in the fast 5 GHz range – all start with STUDENT. E.g. STUDENT1272OG5GHZ.

What do I need to watch with LAN?

Mainly to hit the right socket. In some rooms there are 2 identical sockets that look the same … because there used to be telephones in the room! If needed, try the other socket.

File sharing

File sharing is illegal in Germany. Upload in particular is strictly forbidden under German law. Under the TKG we store connection data – and must pass it on to the authorities. We therefore recommend NAPSTER. Napster is currently a fully legal music download source for 10 euros a month. It works well and is genuinely affordable.

How do I test whether the cable / WLAN works.

If the cable or WLAN works, you are assigned an IP address. You can test this under START – RUN – CMD [OK] – IPCONFIG [ENTER]. You should then get an IP address of the form 192.168.1??.???. You have then taken the first hurdle!
Note: If the number 169.XXX appears, you do not have a connection yet! The addresses all start with 192.168.x.x (begin with 192.168.).