1. Philippe Hanset ANYROAM LLC phanset@anyroam.net
8/23/13
Great Plains Network

2. eduroam is a NET+ Service
This work has received support from
8/23/13
Great Plains Network

3. eduroam is provided by
8/23/13
Great Plains Network

4. eduroam is The ease of use of cellular for Wi-Fi
(even internationally, users are not charged)
A bungee cord for WPA-2 enterprise
An automatic guest-access provisioning tool
8/23/13
Great Plains Network

5. eduroam is not A replacement for your existing guest access
It is a complement to what you already have to make your infrastructure compatible with others
Your users can join eduroam when traveling
You can welcome eduroam users on your campus
A VPN to your home institution
8/23/13
Great Plains Network

6. Technology Overview
eduroam is EAP insensitive (but requires a tunneled EAP-method like PEAP or EAP-TTLS
Encryption
Initial authentication between device and home RADIUS
traffic between device and WLAN
Great service for Identity Based Networking
Reminder: WPA-2 enterprise (AKA 802.1X) is a Layer 2 protocol
8/23/13
Great Plains Network

7. eduroam in the US
8/23/13
Great Plains Network

8. Let’s not forget
8/23/13
Great Plains Network

9. Growth in one year
8/23/13
Great Plains Network

10. eduroam Worldwide
8/23/13
Great Plains Network

11. Time consuming ? Connect your RADIUS to the eduroam federation
Shared Secret and IP address exchange
Create RADIUS rules
Exchange test credentials
Check Firewall(s)
Create an SSID and assign a network (even your existing guest network)
Inform your community about eduroam
Very little load on Help Desk
8/23/13
Great Plains Network

12. How to join?
click on “Join eduroam-US” (left side bar)
Welcome message
a more formal NET+ agreement is in the works
Peering Process (to VA and to KS)
8/23/13
Great Plains Network

13. Policies No Web portal between authentication and Internet
Users always contact Home Helpdesk first
6 Months RADIUS logs retention
Handling of abuse
Block users (MAC, REALM, CUI)
DMCA complaints
8/23/13
Great Plains Network

14. Business Model Included in Membership fee for Internet2 members
$500 initial setup coming soon (when NSF funding dries out)
Yearly fee for non-members
~10 cents per student per year
Large entities (school systems) model being discussed
8/23/13
Great Plains Network

15. Free eduroam tools eduroam companion for iOS and Android
eduroam CAT (802.1X installer)
Coming up: As part of InCommon Certificate Service: InCert (
8/23/13
Great Plains Network

16. eduroam Companion
8/23/13
Great Plains Network

17. eduroam Companion (cont.)
8/23/13
Great Plains Network

18. eduroam only (native) …
Less Network Name (SSID) confusion
VLAN assignment done based on REALM
CAT tool for all of campus
Saves on Help Desk
Saves on existing installer cost
Branding ?
802.11u will make SSIDs irrelevant in a few years
8/23/13
Great Plains Network

19. Resources Administrator Guide at eduroam.us and also eduroam.org
Internet2 discussion list for eduroam administrators:
TF-MNM (a TERENA resource)
Our team will help you from A to Z
8/23/13
Great Plains Network

20. Contact us…
8/23/13
Great Plains Network