AARNet Copyright 2010 Network Operations The eduroam project group

AARNet Copyright 2010 Helpdesk AARNet helpdesk –Use address –Auto creates JIRA job ticket – /Phone support provided Web presence –Eduroam coverage via Google Maps –Services weather map (in development) Standard connection process –1. Build your Infrastructure1. Build your Infrastructure 802.1X WPA Authentication –2. Choose an Authentication Type2. Choose an Authentication Type –3. Certificates3. Certificates –4. Determine your IP address allocation4. Determine your IP address allocation –5. Traffic Policy5. Traffic Policy –6. Apply to join eduroam6. Apply to join eduroam –7. Configure a RADIUS Proxy and get QA'd7. Configure a RADIUS Proxy and get QA'd –8. Build your local eduroam Webpage8. Build your local eduroam Webpage –9. Home9. Home –10. Inform the community10. Inform the community 2

AARNet Copyright 2010 E2E “federated” service monitoring We can check all of the external services that form the federation. How do we check the service from the end user perspective? 1.Ask a local user? 2.Send someone to check the service? 3.Leave a probe Sheeva plugs (in final dev) to be installed at eduroam coverage areas Service status published online in real time Probe starts eduroam auth, results collated in dbase Current Status Final configuration testing with small group of institutions due early Nov Exchanging similar work with SURFNet for “best of breed” solution Expect to roll out to all participants in 2011

AARNet Copyright 2010 Current eduroam service issues Too many eduroam authentication options when deploying/operating User software installation/use is a challenge due to service variation There are limited resources at institutions and AARNet End-to-end monitoring of the authentication service is currently in trial There isn’t wide spread knowledge (technical level and client level) of eduroam at many institutions. The service has a high dependency on institutions for its success –Difficult to get momentum to deploy at all inst or maintain up to date central repository of information with participating institutions if eduroam is not seen as priority service –The variation in Internet access can lead to a poor eduroam user experience, (despite reduced risk by changes to the AARNet charging model) 4

AARNet Copyright 2010 Sites participating (Aus, NZ) The stats graph is up to date to March 2011, there are no new sites officially federated. New applications received (newest first). –The University of Waikato (NZ) –Bond University –Auckland University of Technology (NZ –Macquarie University –University of the Sunshine Coast –University of NSW –University of Western Sydney 5

AARNet Copyright 2010 Latest service utilisation graph 6

AARNet Copyright 2010 Proposed eduroam service path time to enable 7 OutcomeImpact CAUDIT Member / Institutional support Helps drive coverage, use and uniformed service levels Helps deliver end user support (backed up by monitoring of the service and central service support) Dedicated resource at AARNetAccountable for the service operation and monitoring Can coordinate service/support/deployment needs in a timely fashion. Can drive/support further deployment/development An operational e2e real time monitoring system Independently tests service availability in real time and alerts to any service issues to AARNet and on the eduroam website weather map. A captive portal solution (via Cloudpath) is being developed with CAUDIT/AARNet to user support Address windows supplicant licencing issue. Provides open captive portals with a central site to download a working eduroam configuration for different operating systems, making local/remote support less challenging with “click and select to use….” – technical details/licencing being determined

AARNet Copyright 2010 Eduroam support from APL Operations Support Requests will come from ITS Departments via NOC to eduroam helpdesk All requests to be ticketed in the eduroam JIRA ticket queue The eduroam helpdesk situated in the Operations Group will coordinate and resolve support requests with the appropriate home/visited institutions during business hours. The dedicated helpdesk will Supporting eduroam national/regional servers with adds/moves/changes maintain local and international contacts Actively monitor the service via the eduroam monitoring platform Provide use stats regularly Monitor and respond to user feedback from social platforms like FB and Twitter Maintain the website and wiki. Engage in technical and Policy development with appropriate groups 8

AARNet Copyright 2010 Summary  Eduroam is a great demonstrator of the “AREN”, a great collaborator and exemplar for federations.  Eduroam can reduce costs to support local & guest users visiting with their own devices; especially when overseas where roaming charges apply.  ITS Departments will continue to see support overheads grow for mobile devices, the amount of that overhead will be lower with eduroam if service variability issues can be contained.  Eduroam developments will improve the service offering – real time monitoring, dedicated central/local resourcing, implementation of captive portals for user support should limit access issues on eduroam to (a) incorrect username/password by the user or (b) user credentials not enabled for eduroam access  Eduroam services need greater deployment to all Aus/NZ universities and joint support from CAUDIT members.

AARNet Copyright 2010 More information – global eduroam sitewww.eduroam.org - Australian eduroam sitewww.eduroam.edu.au Eduroam group on Facebook Enquiries to

AARNet Copyright 2010