The internet in the home
Basic facts about LAN, WLAN and speed
Many rooms have wired LAN. When wired LAN is available, it is the fastest and best way to use the internet. We do not guarantee Wi-Fi reception in these rooms and flats.
In NEARLY all rooms there is WLAN via the networks SMUC (encrypted, password 'akademiker') or unencrypted via STUDENTENWOHNHEIME-MUC.
LAN cable is always best. This is immediately followed by WLAN in 5GHz according to the AC standard. All access points of this standard have 5AC in their name (e.g. STUDENT_CAP_5AC) and are fast. The 5GHz range is also good and is called STUDENT_CAP5. Bad is the 2GHz range - because it is very crowded. It's called STUDENTHOME-MUC or STUDENT_CAP, depending on the device model.
This means: STUDENT RESIDENTIAL HOMES-MUC
or STUDENT_CAP are great, because they are available in all houses - e.g. for the smartphone.
Much faster, however, are the 5GHz access points, which do not allow ROAMING and therefore have different names at every point in the building.
Use behaviour and speed
We measure your used volume daily for the last 15 days. The fastest because unlimited and highest priority are those,
who were below the average of all users during that period.
The worst are those who use more than 17x the amount of the 15-day average of all students.
This is almost impossible to do with legal usage. File sharing is illegal in Germany - and will quickly relegate you to the slowest category.
In between there are 3 further priority gradations. The fastest of the current 8 gradations is currently 4Mbit upload, 40MBit download with short peak load 10M/120M.
The "slowest" is 2.5M/18M with peak 4M/70M. For normal internet use including Microsoft Teams and other video chat apps, the slowest gradation is also sufficient.
The main difference is that the slowest are behind the least users in priority. This is not so bad, because the few users do not use the
use the internet little anyway - and consequently there are enough free spaces.
As can be seen, our lines are far from being utilised on average. The load is distributed over several lines. For example, at Clemensstr. 118 as of 5/2020, 2 MNet lines are active fibre with 300 MBit and 2 lines Telekom nit 250MBit.
Currently 5 devices are allowed per user
1 fast device (Usually LAPTOP or router) - logs in with VPN????@STUDENT as username.
4 slower devices (tablet, phone) logs on to the WLAN with VPN????@PHONE (800k/15M with peak power 5M/60M ) mostly.
If something is not working with the internet you need the following checklist and with it you can call the internet hotline at 089-30623-1999.
-What is your VPN number.
-Are you connecting via CABLE or WLAN?
-If via CABLE have you tried PPPoE? Is the cable in the right socket.
-What is the current IP address of the PC (169.X.X.X or 192.X.X.X or __________)
(You can find out how to find out the IP address at the bottom of the page or on Google for your device if necessary).
Without this information, no help is possible.
It is possible to run your own routers in all flats with LAN connections.
But be careful: Make sure that you do not send any DHCP services to our network!!!
Otherwise we have to search for the troublemaker at great expense. We charge a flat rate of 100€ for this.
Therefore, do not simply plug them in. The things must be set up!!!
We have good experience with MIKROTIK routers (e.g. Mikrotik RB941-2nD-TC from Reichelt.de for 19.90€ or
e.g. the better model with 5GHz RBD52G-5HacD2HnD-TC approx. 65 €).
Mikrotik routers are very cheap and professional.
If you install a router, be sure to use the PPPoE connection to our systems.
This is a professional and stable protocol and works without any problems.
At Mikrotik, a professionally set up router looks like this: (Copy/Paste - Change access data yourself)
add auto-mac=no comment=defconf name=bridge
add add-default-route=yes disabled=no interface=ether1 keepalive-timeout=60 \
name=Studentenwohnheim password=1234 use-peer-dns=yes user=1234@student
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=\
20/40/80mhz-XXXX distance=indoors frequency=auto installation=indoor \
mode=ap-bridge ssid=MikroTik-412924 station-roaming=enabled \
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
group-ciphers=tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik \
unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=passwort \
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
management-protection=allowed mode=dynamic-keys name=profile1 \
supplicant-identity="" wpa-pre-shared-key=passwort \
set [ find default-name=wlan1 ] band=2ghz-onlyn channel-width=20/40mhz-XX \
country=germany disabled=no distance=indoors frequency=auto installation=\
indoor mode=ap-bridge security-profile=profile1 ssid=WLANZimmernummerAxx \
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add address-pool=default-dhcp disabled=no interface=bridge lease-time=4w2d10m \
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf disabled=yes interface=wlan2
/ip neighbor discovery-settings
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=ether1 list=LAN
/interface wireless cap
set discovery-interfaces=ether1 enabled=yes interfaces=wlan2
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan type=A
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" disabled=yes \
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
add action=drop chain=forward comment="defconf: drop invalid" \
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new disabled=yes in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="masquerade network" \
add action=masquerade chain=srcnat comment="defconf: masquerade" \
set name="Zimmernummer Privat"
Picture of how to set up a Mikrotik router, for example