Eduroam at TSSG

Background information:

Eduroam (Educational Roaming) is an implementation of an infrastructure which facilitates roaming educational users to gain Internet access at other member sites by authenticating against a server hosted at their own institution.

Network access at member sites is via 802.1X

Authentication is via a hierarchical network of Radius servers. A number of NREN’s maintain national Radius proxy servers (known as Federation Level Radius servers, or FLR) which relay authentication requests to and from their local member institutions’ Radius servers. These FLR’s, in turn, relay requests via the European top-level Radius servers.

Tips for TSSG staff :

Test that eduroam service will work locally before you leave. If you can’t get it working here, you’re likely to have problems elsewhere as well.
Authentication protocol is site specific (A TSSG user is ms-chap-v2 )
Your Relam is tssg.ie and no domain parameter.
Gather and read local information about how out how the eduroam service is delivered locally, www.eduroam.ie, www.eduroam.org
You will need to pay attention to the type of network encryption on site. TSSG uses WPA2
Check if the radius service is up and running for that relam http://monitor.eduroam.org/eduroam/mon_realm.php
Local firewall restriction will apply.
Background information http://www.eduroam.org/downloads/docs/GN2-08-230-DJ5.1.5.3-eduroamCookbook.pdf

TSSG Service Details :

Media:

Wirless 802.b/g
Wireline is available on request

SSID:

eduroam

Encryption:

802.11i. WPA2/CCMP/AES is supported

Authentication:

802.1x. Local users will be authenticated using EAP-TTLS-PAP

Platforms Supported at TSSG :

Windows XP SP3 or better
Microsoft Windows Vista
Apple Mac OS X v10.3 (Panther)
Apple Mac OS X v10.4 (Tiger)
Apple Mac OS X v10.5 (Leopard)
Apple Mac OS X v10.6 (Snow Leopard)
Apple iPhone, iPod touch: ( version 2)
Ubuntu desktop 9.04

Activate service:

A TSSG user will need to open a help desk ticket (helpdesk@tssg.org) requesting the eduroam service to be activated on their account. Once the service is activated you are free to login and roam.

Successful logon:

When a local or remote eduroam user successfully authenticates at the TSSG site from a TSSG access point the user will then receive an IP address via DHCP in the range 192.168.20.100-200/24.