EduRoam Australia Project Experience in location independent wireless networking with international collaboration with TERENA EduRoam Project 19 th APAN Meeting Network Engineering and NOC Session & 27 Jan 2005 Version 1.0

In the Beginning The EduRoam project was originated in the Netherlands at SURFnet and has spread across the UK and Europe and now Australia. TF-Mobility group in TERENA ( ) Requirements Analysis (March 2003) Enable roaming network access everywhere in Europe with: Minimal admin overhead (per roaming user). Minimum complexity / configuration to the user. Secure access. Scalable! New – Policies in place for participants. Results of roaming access evaluation (Dec 2003) Web: Scalable, Unsafe VPN: Not Scalable, Safe 802.1x: Safe, Scalable…. but new and costly (This has now changed) TF-Mobility – Croatia 2003TF-Mobility – Rhodes 2004

Why EduRoam What does EduRoam do. EduRoam allows roving researchers to log-in, with their usual “user name/password”, to a wireless networks at participating campuses around Australia and the World and gain access to resources at their home institution. The program, is based on inter- institutional trust. Why EduRoam Users –Becoming more demanding of network access provision. –Coverage (Multiple locations), Security, Performance, User-friendly –Want to use their own laptop computers NRENs –Desire to develop value added services. –Keen to encourage and support collaborative developments. –Requirement identified to support network access for guests. –EduRoam is Location Independent Wireless Networking. –This is a policy based system that relies on trust between organizations. Technology –802.1x standard developed and ratified (2001). –EAP-TTLS supplicant developed by Alfa & Ariss for secure access. –“Off the shelf” affordable wireless access solutions appearing. –Deployments are based on open standards on open source products.

EduRoam Global Web Sites

EduRoam Deployment Dec 2004: 350+ participating institutions

EduRoam in Australia Requirements EduRoam solved. –Participant Requirements. Researches, Staff and students able to move between Universities. Researches, Staff and students able to work on collaborative e-science projects. Solution for Inter University Conferences. (with safe wireless) Reduced costs due to VoIP calls using SIP or H323 over wireless. Reduce productivity loss in visiting other institutions. –Support group benefits. This would remove the requirements of IT support groups to create temporary wireless accounts for visitors from other Universities. Requirement for open access for events. Security not lost as local security policies are enforced and supported by inter university access policy. User ID could be tracked.

EduRoam Australia Project Goals The EduRoam project has six deliverables; –Inter University Access Policy. –Acceptable use Policy. –Interconnected Trusted Wireless Federation. –Security Framework Model. –EduRoam branded Web Portal. –Inter continental Global Federation.

EduRoam Australia Deployment Minimum Service levels. –EduRoam SSID broadcasted. (if technically possible on AP). –802.1x WPA TKIP EAP-TTLS –Access to R&E networks. (My be ACL and firewalls). –http, https & VPN pass though permitted. –Radius Server. –EduRoam portal at site.

EduRoam in Australia Camp Delegates declare YES! to Interest in EduRoam trials at The Australian Middleware Camp In Australia we performed an extensive PR campaign which is still continuing. Concept presentations to state RNO’s technical and management levels. Web presents established. Target meetings with critical path organizations. and news release campaign. Track release propagation via web trends. Presentations at conferences and meetings.

EduRoam Australia participants to date Institution Participants Bureau of Meteorology MelbourneCityUnder Development CSIRO PerthARCUnder Development Deakin MelbourneGeelongUnder Development GrangeNet/APL CanberraYarralumlaUnder Development RMIT MelbourneCityFederated MelbourneBundooraFederated MelbourneBrunswickFederated Swinburne MelbourneHawthornUnder Development MelbournePrahranUnder Development MelbourneLilydaleUnder Development MelbourneCroydonUnder Development MelbourneWantirnaUnder Development Many others have expressed interest in participating.

EduRoam Australia stage 1 Complete

EduRoam Australia stage 2 Complete

EduRoam’s Future

Network Issues –Secure access over wireless networks. –Multiple network access solutions under consideration. –Connecting to the backend (central directories etc.). Communications –Promoting EDUROAM services to end users. –Supporting guest users when things go wrong and how to define where the problem is. –Providing a facility for end user / administrator feedback. Access to more than simple network access –Access to content (e.g. use of attributes to access e-journals). –Access to local services (e.g. printers). New requirements appearing –The authentication space (mutual authentication methods, combined with AA systems in the AP, or backend system). –The authorisation space (quarantine users to check for viruses, Windows Updates etc before granting access).

EduRoam enhancements –SSO: Use of RADIUS attributes for network and content access. –Alternative routes to home Authentication server. –Enhanced security. –XML RADIUS configuration Easier EduRoam deployment –EduRoam in a box. –EduRoam checklist for compliance. End user focus –EduRoam web site. –Access points “phone book”. –Location Based Services (SMS). Measurement and Monitoring –Infrastructure monitoring : Server availability, RADIUS Authentication and Authorisation monitoring. –End-to-end monitoring: Load analysis /accounting log analysis (E2E), usertracking.surfnet.nl. –Minimum standards for RADIUS / DIAMETER accounting logs. EduRoam International –Expand participation outside Europe (ASIA, USA) There are areas for collaboration

EduRoam Future in ASIA-Pacific

EduRoam Links EduRoam Home Site Link to list in Australia International links

Thank-you & Questions EduRoam works! Please join!! Institutional and user feedback is a critical success factor, how to capture this will be key.