EduRoam ESA workshop 17 December 2004 Utrecht

2 Contents Background Requirements Architecture Current situation Conclusion / discussion

3 Background Access Provider POTS Institution A WLAN Institution B WLAN Access Provider ADSL International connectivity Access Provider WLAN Access Provider GPRS SURFnet backbone

4 Requirements definition Enable NREN users to use the Internet (WLAN and wired) everywhere in Europe with: –Minimal administrative overhead (per roaming user) –Good usability –Maintaining required security for all partners. –Scalable! Solution: 802.1X+RADIUS proxy-hierachy

5 Example: SURFnet RADIUS server Institution B RADIUS server Institution A Internet Central RADIUS Proxy server Authenticator (AP or switch) User DB Supplicant Guest Student VLAN Guest VLAN Employee VLAN data signalling

6 EduRoam participants June 2004: 275 participating institutions Soon: USA, Now: Australia

7 Conclusion / Discussion Participating in EduRoam enables: –ESA employees to roam between ESA premises –ESA employees to roam to other EduRoam participants –Allow visitors from EduRoam participants to get network access at ESA premises While: –Maintaining the required security levels

8 More information SURFnet and 802.1X – TERENA TF-Mobility – The unofficial IEEE security page –