200 likes | 349 Vues
Philippe Hanset ANYROAM LLC phanset@anyroam.net. eduroam is a NET+ Service. www.internet2 .edu/netplus/eduroam / www.eduroam.us. This work has received support from . eduroam is provided by. eduroam is. The ease of use of cellular for Wi- Fi (even internationally, users are not charged)
E N D
Philippe Hanset ANYROAM LLC phanset@anyroam.net Great Plains Network
eduroam is a NET+ Service www.internet2.edu/netplus/eduroam/ www.eduroam.us This work has received support from Great Plains Network
eduroam is provided by Great Plains Network
eduroam is • The ease of use of cellular for Wi-Fi (even internationally, users are not charged) • A bungee cord for WPA-2 enterprise • An automatic guest-access provisioning tool Great Plains Network
eduroam is not • A replacement for your existing guest access • It is a complement to what you already have to make your infrastructure compatible with others • Your users can join eduroam when traveling • You can welcome eduroam users on your campus • A VPN to your home institution Great Plains Network
Technology Overview • eduroam is EAP insensitive (but requires a tunneled EAP-method like PEAP or EAP-TTLS • Encryption • Initial authentication between device and home RADIUS • traffic between device and WLAN • Great service for Identity Based Networking • Reminder: WPA-2enterprise (AKA 802.1X) is a Layer 2 protocol Great Plains Network
eduroam in the US Great Plains Network
Let’s not forget Great Plains Network
Growth in one year Great Plains Network
eduroam Worldwide Great Plains Network
Time consuming ? • Connect your RADIUS to the eduroam federation • Shared Secret and IP address exchange • Create RADIUS rules • Exchange test credentials • Check Firewall(s) • Create an SSID and assign a network (even your existing guest network) • Inform your community about eduroam • Very little load on Help Desk Great Plains Network
How to join? • www.eduroam.us, click on “Join eduroam-US” (left side bar) • Welcome message • a more formal NET+ agreement is in the works • Peering Process (to VA and to KS) Great Plains Network
Policies • No Web portal between authentication and Internet • Users always contact Home Helpdesk first • 6 Months RADIUS logs retention • Handling of abuse • Block users (MAC, REALM, CUI) • DMCA complaints Great Plains Network
Business Model • Included in Membership fee for Internet2 members • $500 initial setup coming soon (when NSF funding dries out) • Yearly fee for non-members • ~10 cents per student per year • Large entities (school systems) model being discussed Great Plains Network
Free eduroam tools • eduroam companion for iOS and Android • eduroam CAT (802.1X installer) • http://cat.eduroam.org • Coming up: As part of InCommon Certificate Service: InCert (www.internet2.edu/incert) Great Plains Network
eduroam Companion Great Plains Network
eduroam Companion (cont.) Great Plains Network
eduroam only (native) … • Less Network Name (SSID) confusion • VLAN assignment done based on REALM (e.g. @local.edu ≠ @remote.edu) • CAT tool for all of campus • Saves on Help Desk • Saves on existing installer cost • Branding ? • 802.11u will make SSIDs irrelevant in a few years Great Plains Network
Resources • Administrator Guide at eduroam.us and also eduroam.org • Internet2 discussion list for eduroam administrators: https://lists.internet2.edu/sympa/info/netplus-eduroam-admins • TF-MNM (a TERENA resource) • Our team will help you from A to Z Great Plains Network
Contact us… support@anyroam.net Great Plains Network