Re: [87attendees] eduroam (Re: IETF wireless)

All,

The eduroam ssid and associated authentication back end has been provided
at the IETF since IETF 78 in Maastricht. Paul Dekkers of SURFnet first
approached us with the idea of supporting this authentication system at
IETF meetings (thanks Geert Jan de Groot for bringing this to us!). Many of
the core network volunteer team offered suggestions and insights into how
to best support this. The eduroam folks that have most recently been
involved include Stefan Winter and Dubravko Penezic. Currently, Karen
O'Donoghue is our main contact with the eduroam folks as well as with
Radiator (our authentication server), Bjoern Zeeb handles the
authentication server side of things, and I maintain the AP and switch
configs.

Some of the interesting challenges we've encountered include authentication
timeouts as the eduroam Radius server "tree" is extensive and can result in
many Radius proxies before reaching the end (authoritative?) authentication
server. We're using a couple of techniques to improve reliability and
security and speed up authentication: Radius to the eduroam servers via
TLS/TCP, and supporting DNSRoam to shorten authentication times.

Thanks for the kind words. It's a pleasure to be able to help provide a
service that just works (most of the time!)

Chris.

On Thu, Aug 8, 2013 at 6:56 AM, Tim Chown <tjc@ecs.soton.ac.uk> wrote:

>
> On 8 Aug 2013, at 10:46, grenville armitage <garmitage@swin.edu.au> wrote:
>
> >
> >
> > On 08/08/2013 19:34, Carsten Bormann wrote:
> >> On Aug 8, 2013, at 08:35, Stefan Winter <stefan.winter@restena.lu>
> wrote:
> >>
> >>> The IETF also provides eduroam
> >>
> >> And tons of kudos go to whoever started this.
> >
> > +1
> >
> > (When I flipped open my laptop on the first day it automagically
> associated with eduroam. I initially thought this was some delayed holdover
> from when I'd last used WiFi at my home university. But lo and behold,
> eduroam in the IC was real, and worked well all week!)
>
> eduroam's been at the IETF a while.  Very welcome!
>
> Tim
> _______________________________________________
> 87attendees mailing list
> 87attendees@ietf.org
> https://www.ietf.org/mailman/listinfo/87attendees
>

-- 
Chris Elliott
chelliot@pobox.com