Last updated: 
6 days 8 hours ago
Group Manager
A place to share information on all aspects of eduroam in the UK. Follow us on Twitter @eduroamuk - for news, interest, information, photos and fun. Contents Click on item and scroll down to the selected content at the bottom of the page. Advisory: Implications of MAC address randomisation on eduroam(UK) members Advisory: CA Certificate Validation in Android Devices (Nov 2020) Deploying Govroam alongside eduroam Advisory: EAP server certificate considerations (July 2020) eduroam Visitor Access Administrator Manual - Configuration and Management eduroam Visitor Access Portal User Manual - Creating Guest Accounts eduroam Visitor Access User Manual - Creating Guest Accounts for Groups and SMS Events eduroam Visitor Access Guide - UKAMF IdP Configuration Requirements Advisory: Injection of Operator-Name at the NRPSs Walled Garden for Onboarding User Devices to eduroam Using eduroam Support site; Connecting to the NRPS; User on-boarding – CAT Introducing the eduroam Support Server 2 - Networkshop45 Presentation - April 2017 Guidance document - eduroam and Safeguarding Guidance document - Cost of Implementing eduroam eduroam(UK) Technical Specification Summary of Recommendations Checklist eduroam(UK) Technical Specification Summary of Requirements Checklist eduroam(UK) Technical Specification NHS and eduroam/shared use of wireless/govroam ORPS in Azure - alternatives to the use of ICMP Sending Operator Name with Cisco ISE 2.0 eduroam in Public Buildings and Spaces in City Centres TLS 1.2 and updated RADIUS requirements FreeRADIUS Packet Handling - examining the flow FreeRADIUS Best Current Practice Configuration for eduroam  Performance tweaks for RADIUS and backend authentication systems eduroam(UK) Microsoft NPS Configuration Guide eduroam(UK) Service Provider Assurance Tool User Guide eduroam(UK) Service Provider Assurance Tool Phase2 Field Trial Feedback Improving the Reliability of NPS as an Authenticator in eduroam Advisory: Using Status Server Advisory: Use of MD5 Certificates Deprecated in Favour of SHA-1 for RADIUS servers Advisory: Windows Mobile 8 and Certificate Verification NWS41 eduroam Forum presentations - TKIP, CUI, NAPTR, QoS Probe NWS40 FreeRADIUS Demystified seminar presentation Geant Funding available Janet Lumen House eduroam Service Information UK eduroam Usage Feb 2013 EAP-pwd Moving Towards a Deployable Standard Site Finder and Service Information Directory eduroam(UK) Technical Specification 1.3 (archived) - superseded by 1.4 eduroam User Troubleshooting Flowchart for IT Support Staff eduroam Administrators Troubleshooting Flowchart NAPTR Record Creation Using Microsoft Windows 2008 R2 DNS Server eduroam Best Practice Pointers FreeRADIUS 2 eduroam Deployment at University of Sussex

Group administrators:

eduroam(UK) Service Provider Assurance Tool Feedback

15 April 2015 at 1:56pm

Scope

It is intended that this document acts as a shared area for reporting experiences during the broadening of the proof of concept trial following Networkshop 42 (March 31 2014). It is editable by all members of the group. Feedback will be used by Scott and Alan to further develop the system ready for the intended integration into the national service.

Current Status of Probe Development

The status of development work is:

  • Probe prototype developed to state of stable and functional unit based on TP MR3020 APs
  • Probe software built on OpenWRT and wpa_supplicant runs a series of test at 15 min intervals
  • Probe units need to be registered in the Probes database and associated with sites in the eduroam(UK) database on Support
  • Probes run a series of wireless environment, authentication, and network services tests
  • The units report results of tests back to Probes database (currently on Support, but to be moved to Development)
  • There is no remote access functionality in the probes, the Ethernet port is also disabled (power is provide via mini-USB)
  • Updates to the test suite are achieved through an automated system in which the probe detects any parent code change and initiates a refresh
  • Next step is to develop further tests including support for VPNs

Proof of Concept Status

Following the initial Jan-March field trial, the trial is being extended and expanded to include a wider section of the community.

Feedback Area Below

Participants in the extended trial are invited to submit findings and suggestions below or you can e-mail eduroam@ja.net.

Comments/suggestions regarding using the probe and Support server portal in practice:

Features that you would like to see added to the probe:

Would status/results indicators be useful on the probe unit itself?

The original intention was for the probe results to be used by eduroam(UK) Support and the site system administrators. Do you agree with this scope? (Bearing in mind that there is already a publicly available service status page that helpdesks etc can view https://support.roaming.ja.net/?q=general)

Do you see the probe status page having a broader audience? Which group(s) so you think might benefit?

The probe package has been deliberately chosen to be a small neat unit, but it is limited to the 2.4G band. Would you be happy to deploy a larger unit more akin to a standard AP that would also test the 5G band?

Would you deploy multiple probes (e.g. one per eduroam visitor VLAN)?

Janet is able to provide one probe per member organisation. Would your organisation be willing to purchase additional pre-programmed units from Janet or to purchase AP/mifi units and send kit to Janet to be programmed and sent back to you?

Any other suggestions?