joining eduroam wireless roaming for education and research

26
Joining eduroam Wireless Roaming for Education and Research

Upload: antonio-fitzgerald

Post on 27-Mar-2015

213 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: Joining eduroam Wireless Roaming for Education and Research

Joining eduroam

Wireless Roaming for Education and Research

Page 2: Joining eduroam Wireless Roaming for Education and Research

Joining eduroam

• What is eduroam?

• What does this mean?

• How do I get information on the service?

• What do I need to join?

• Security on eduroam.

• Global Working Group.

Page 3: Joining eduroam Wireless Roaming for Education and Research

What is eduroam?

eduroam allows roving researchers to log-in, with their usual “user name/password”, to wireless networks at participating campuses around the world and transparently get access to resources at their home institution.

Page 4: Joining eduroam Wireless Roaming for Education and Research

Joining eduroam

• What is eduroam?

• What does this mean?

• How do I get information on the service?

• What do I need to join?

• Security on eduroam.

• Global Working Group.

Page 5: Joining eduroam Wireless Roaming for Education and Research

What does that mean?• Mobility

– The ability to access your resources at other institutions.

– Global roaming.

– Freedom

Page 6: Joining eduroam Wireless Roaming for Education and Research

What does that mean?• Productivity

– No down time in cross institutional meetings or research groups.

– No waiting for temporary accounts

Page 7: Joining eduroam Wireless Roaming for Education and Research

What does that mean?

• Security

– No reduced security for roaming uses or institutions.

– Secure access for all meetings, conferences and guests

Page 8: Joining eduroam Wireless Roaming for Education and Research

What does that mean?

• Part of a signal sign on solution.

– Same username and password when traveling.

– Reduced helpdesk costs.

Page 9: Joining eduroam Wireless Roaming for Education and Research

Joining eduroam

• What is eduroam?

• What does this mean?

• How do I get information on the service?

• What do I need to join?

• Security on eduroam.

• Global Working Group.

Page 10: Joining eduroam Wireless Roaming for Education and Research

International eduroam portals

Page 11: Joining eduroam Wireless Roaming for Education and Research

community

• more than 350 connected sites.

Page 12: Joining eduroam Wireless Roaming for Education and Research

The Community?

Camp Delegates declare YES! to Interest in eduroam trials at The Australian Middleware Camp 2004.

CONNECTED OR COMMITED TO

• Bulgaria • Croatia • Czech Republic • Denmark • Finland • Germany • Greece • Italy • Latvia • Luxembourg

Many others have expressed interest in participating.

•The Netherlands •Norway •Poland •Portugal •Slovenia •Spain •Switzerland •Australia•UK

Page 13: Joining eduroam Wireless Roaming for Education and Research

Joining eduroam

• What is eduroam?

• What does this mean?

• How do I get information on the service?

• What do I need to join?

• Security on eduroam.

• Global Working Group.

Page 14: Joining eduroam Wireless Roaming for Education and Research

What do I need to join

At the NREN

• A national radius server

• A eduroam web portal

Page 15: Joining eduroam Wireless Roaming for Education and Research

What do I need to join

At the institution

• A wireless network • A radius server• A hook to your IMS system

Page 16: Joining eduroam Wireless Roaming for Education and Research

Joining eduroam

• What is eduroam?

• What does this mean?

• How do I get information on the service?

• What do I need to join?

• Security on eduroam.

• Global Working Group.

Page 17: Joining eduroam Wireless Roaming for Education and Research

Security

• Web redirect– Not Secure / Not Scalable

• VPN walled garden– Secure / Not Scalable

• 802.1x– Secure if Deployed Correctly / Scalable

• Future Security Deployments– 802.11i

Page 18: Joining eduroam Wireless Roaming for Education and Research

Security• Minimum Service levels( AU policy).

– eduroam SSID broadcasted.• (if technically possible on AP).

– 802.1x WPA TKIP EAP-TTLS– http, https, ssh & VPN pass though permitted.– Radius Server.– eduroam portal at site.

Security is locally enforced.

So you are in control of your environment.

Page 19: Joining eduroam Wireless Roaming for Education and Research

Joining eduroam

• What is eduroam?

• What does this mean?

• How do I get information on the service?

• What do I need to join?

• Security on eduroam

• Global Working Group

Page 20: Joining eduroam Wireless Roaming for Education and Research

Global Working GroupA Global Working Group has been

setup.

There is an open email list to share

The first meeting was at EuroCAMP 2005

The second meeting was held after the I2 members meeting.

We have a conference call every 2

weeks .

Page 21: Joining eduroam Wireless Roaming for Education and Research

Global Working Group

What are we doing

Working on standards and systems for safe roaming internationally

eduroam NG (next generation)

Peering policies and frameworks

There are representatives from Europe, USA and ASIA PAC

Page 22: Joining eduroam Wireless Roaming for Education and Research

Global Working Group• Current eduroam

environment

• Hierarchy of radius proxies

• shared key security

• Manual configuration of all links

Page 23: Joining eduroam Wireless Roaming for Education and Research

Global Working Group• Future eduroam

environment

• Radius discovery

• PKI secured links

• Via radiator or diameter

• Possible SHIB attribute passing.

Page 24: Joining eduroam Wireless Roaming for Education and Research

GWG Policy

• Foster & Protect Trust

• Ensure minimum standards

• Provide a scalable/manageable solution to deal with abuse, hacking, vulnerability scenarios

• Adhere to higher layer policy frameworks

Page 25: Joining eduroam Wireless Roaming for Education and Research

eduroam Links

Eduroam AU Sitehttp://www.eduroam.edu.au

Eduroam Global Working Grouphttp://www.eduroam.edu.au/gwg-eduroam

Global working group email [email protected]

Email Enquiries

[email protected]@eduroam.au

Page 26: Joining eduroam Wireless Roaming for Education and Research

Joining eduroamThankyou

Please Join eduroamhttp://www.eduroam.org

http://www.eduroam.edu.au

AcknowledgmentsSurfnet, TF Mobility TERENA,UNI-C & AARNet

TECH [email protected] [email protected]