1. 10 Years of eduroam (from an idea to a product)
Miroslav Milinović
University Computing Centre, University of Zagreb, Zagreb, Croatia
TNC 2012
Reykjavik, Iceland, May 2012

2. It all started with ...

3. (inter-NREN) roaming requirements
Identify users uniquely at the edge of the network
Enable guest usage
Scalable
local user administration and authentication
Easy to install and use
at the most one-time installation by the user
Open (

4. Web-based solution

5. VPN-based solution

6. The solution: eduroam XYZnet Commercial Employee VLAN VLAN Student
Supplicant
Authenticator
(AP or switch)
RADIUS server
University A
RADIUS server
University B
User DB
User DB
user
XYZnet
Employee
VLAN
Commercial
VLAN
Central RADIUS
Proxy server
Student
VLAN
signalling
data

7. Radius proxy hierarchy
SURFnet
FUNET
(DFN)
Srce
Radius proxy hierarchy
Participation guidelines are being drafted
Aim is to increase membership. Spain, Norway, Slovenia, Czech Republic & Greece have indicated their willingness to join.
University of
Southampton
FCCN
RADIUS Proxy servers
connecting to a European
level RADIUS proxy server
February 2004

8. GEANT2: from a pilot to a service
JRA5 (2004)  SA5 (2007)
European eduroam Policy v .1.0 (January 2008)
Supporting services
European eduroam confederation
Service officially started on September 1, 2008

9. Objectives/goals
build and maintain (European) roaming service:
provide secure, consistent and uniform network access service inside the boundaries of the confederation
motto: “open your laptop and be online”
eduroam infrastructure:
technology infrastructure:
ETLRSs, FLRSs, IdPs and SP RADIUS servers, network access elements (APs/switches)
supporting infrastructure:
monitoring service, eduroam database, TTS, eduroam web site, mailing lists

11. eduroam growing ... Global eduroam Governance committee (GeGC)
eduroam Compliance Statement, October 2011
50+ countries
European confederation (43 countries)
Australia, Canada, Japan, USA, ...
Asia & Pacific, Latin America, Africa, ...
5000+ service locations only in Europe
cumulative stats from 20+ European countries
total of over 250 million successful authN (≈ 6% is international)
ETRLS servers (March 2012):
successful authN
≈ CSI/days (device/days)
eduroam is ranked as 27th most widely used SSID (

12. ... and this is just a start ... ongoing deployment ...
new members
increasing coverage inside the countries that have joined
... & development
core technology (RadSec/dynamic discovery, EAP types, ...)
supporting services (CAT, eduroam companion, diagnostics, ...)