Add Janet National Proxy Servers
First add the Janet National Proxy Servers (NRPS) as external Proxy Servers.
WARNING - These settings should be tested on a suitable test/dev server before implmentation into a live working eduroam service.
Step 1 - Add a salt for generating CUIs to policy.conf
In the policy.conf in /etc/raddb find the CUI section and add a salt for your site. This value should be a long random string which is the same across all of your sites radius servers and should not change over time.
#
What is CUI?
CUI is a Chargeable User Identity and is specified in RFC 4372. A CUI is a unique identifier for a user which remains static for a given user visiting a given site. What do I mean by that? When a user visits a site their CUI will always be the same regardless of their outer identity or which device they use to login. In effect the CUI is an obscured version of the users real username.
Sending Operator Name with ACS 5.4
Cisco ACS 5.4 provides the ability to inject and/or overwrite RADIUS attributes while proxying. This means that attribute 126 Operator Name can be injected for eduroam Visited sites.
Add National Proxies as RADIUS Clients
- Go to “Network Resources > Network Devices and AAA Clients” and click ‘Create’
- In the ‘Name:’ field enter ‘roaming0.ja.net’
- Under ‘IP Address’ select the ‘Single IP Address’ button and enter in the field the IP Address of the NRPS ‘194.82.174.185’
- Under ‘Authentication Options’ tick the ‘RADIUS’ box