1. EduRoam Klaas.Wierenga@SURFnet.nl ESA workshop 17 December 2004 Utrecht

2. 2 Contents Background Requirements Architecture Current situation Conclusion / discussion

3. 3 Background Access Provider POTS Institution A WLAN Institution B WLAN Access Provider ADSL International connectivity Access Provider WLAN Access Provider GPRS SURFnet backbone

4. 4 Requirements definition Enable NREN users to use the Internet (WLAN and wired) everywhere in Europe with: –Minimal administrative overhead (per roaming user) –Good usability –Maintaining required security for all partners. –Scalable! Solution: 802.1X+RADIUS proxy-hierachy

5. 5 Example: SURFnet RADIUS server Institution B RADIUS server Institution A Internet Central RADIUS Proxy server Authenticator (AP or switch) User DB Supplicant Guest piet@institution_b.nl Student VLAN Guest VLAN Employee VLAN data signalling

6. 6 EduRoam participants June 2004: 275 participating institutions Soon: USA, Now: Australia

7. 7 Conclusion / Discussion Participating in EduRoam enables: –ESA employees to roam between ESA premises –ESA employees to roam to other EduRoam participants –Allow visitors from EduRoam participants to get network access at ESA premises While: –Maintaining the required security levels

8. 8 More information SURFnet and 802.1X –http://www.surfnet.nl/innovatie/wlanhttp://www.surfnet.nl/innovatie/wlan TERENA TF-Mobility –http://www.terena.nl/mobilityhttp://www.terena.nl/mobility The unofficial IEEE802.11 security page –http://www.drizzle.com/~aboba/IEEE/