1. 19 May 2003 © The JNT Association 2002 1 Terena Technical Advisory Council Terena Mobility Task Force http://www.terena.nl/tech/task-forces/tf-mobility/ Mobility Issues James Sankar

2. 19 May 2003 © The JNT Association 2002 2 Background Mobility workshops were arranged in Amsterdam in March, June & October 2002 to define and agree a charter. On January 1 2003, the charter was approved, two chairman were appointed and the task force started. Key objectives –Evaluate AAA techniques in mobile environments (802.1X, VPN, Web). –Create an Inter-NREN WLAN roaming architecture and testbed. –Evaluate mobile equipment and technology. –Evaluate next generation mobile technology for handover and roaming (mobile IP v4 and v6). Participation: SURFnet, UKERNA, DFN, SWITCH, UNINETT, FUNET

3. 19 May 2003 © The JNT Association 2002 3 Requirements definition 1) With minimal administrative overhead (per roaming user) Very little admin work to enable roaming per user Minimize the complexity of additional systems required No n2 work required when scaling system No regulatory entanglement 2) With g ood usability Available to most current WLAN (and wired) users. No additional software required to enable roaming. Enable all (work, guest, home networks, IPv4 and IPv6). 3) Maintaining required security for all partners Allow use only for approved NREN users. Provide accountability but also confidentiality of traffic. Guard against data manipulation and session hijacking. Allow real security (e2e) on top. Don’t aggravate security issues of visited networks. Enable NREN users to use Internet (WLAN and wired) everywhere in Europe

4. 19 May 2003 © The JNT Association 2002 4 Inventory 1 - VPN

5. 19 May 2003 © The JNT Association 2002 5 Inventory 2 – Cross-domain 802.1X with VLAN assignment AuthZ at home institution, 802.1X, TTLS (SecureW2), (proxy) RADIUS. Public hotspots within Freeband project http://www.surfnet.nl/innovatie/wlan RADIUS server Institution B RADIUS server Institution A Internet Central RADIUS Proxy server Authenticator (AP or switch) User DB Supplicant Guest piet@institution_b.nl Student VLAN Guest VLAN Employee VLAN data signalling

6. 19 May 2003 © The JNT Association 2002 6 Inventory 3 – Web based Internet Public Access Network Public Access Controller AAA Server WWW-browser 1. 2. 3. 4. 5.

7. 19 May 2003 © The JNT Association 2002 7 Next steps 1.Finalise and publicise inventories for external review and comment. 2.Agree on an architecture to i) accommodate and support the requirements definition and ii) where possible ensure the interoperability of the 3 solutions 3.Monitor emerging wireless standards (802.11a & g etc) and if ratified, review the proposed architecture to determine whether it can support these new standards. 4.Continue to develop a knowledge base wireless device performance and interoperability issues.

8. 19 May 2003 © The JNT Association 2002 8 Contact Details: James Sankar Email: J.Sankar@ukerna.ac.uk Telephone: 01235 822 223 Website: http://www.ja.net/development/network_access/index.html Thank you & Questions