Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="e7eb9f3a05e8f754-488d4a2e-4b7c4b78-bb759d35-a7e50bddd1ac9961cdac7760"><ac:plain-text-body><![CDATA[

AUTH

Notice

[WLAN-1] Associated WLAN station 64:b9:e8:a0:2e:a4 []

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="7a6cc4900e887c81-8773be13-407c40e7-9b0eb908-7287904e40959bfee658dfdc"><ac:plain-text-body><![CDATA[

AUTH

Notice

[WLAN-1] WLAN station 64:b9:e8:a0:2e:a4 [] authenticated via 802.1x [user name is certuser-2010-001@restena.lu]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="5eac5e7bd258f808-b08a331e-433348b5-92998f2b-67d0a91c5d246b6ea998b085"><ac:plain-text-body><![CDATA[

AUTH

Notice

[WLAN-1] Key handshake with peer 64:b9:e8:a0:2e:a4 successfully completed

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="ed3c3682c0f7178e-268513f8-4bc741fc-ad5b823d-e626cf17723eebd0b459a94d"><ac:plain-text-body><![CDATA[

AUTH

Notice

[WLAN-1] Connected WLAN station 64:b9:e8:a0:2e:a4 []

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="7896dbc2adfb5d3e-bd14206f-48144cf2-923c9551-037c1037b5327918e134eb27"><ac:plain-text-body><![CDATA[

AUTH

Notice

[WLAN-1] Determined IPv4 address for station 64:b9:e8:a0:2e:a4 []: 158.64.3.24

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="985f9240aa1a1430-90b9a6df-4bc64795-96efa5a8-f983a9b3e08d927094fb2068"><ac:plain-text-body><![CDATA[

AUTH

Notice

[WLAN-1] Determined IPv6 address for station 64:b9:e8:a0:2e:a4 []: 2001:0a18:0000:0403:66b9:e8ff:fea0:2ea4

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="5565441bced4133a-f24c42cc-46264b3f-a7d79166-10f8cf6743d85d9c72dd2c41"><ac:plain-text-body><![CDATA[

AUTH

Notice

[WLAN-1] Determined IPv6 address for station 64:b9:e8:a0:2e:a4 []: fe80:0000:0000:0000:66b9:e8ff:fea0:2ea4

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="67da6aca85cdcac5-a9838ba4-480b454f-ac1bb8f6-b4e7cc0fba344b92f5927658"><ac:plain-text-body><![CDATA[

AUTH

Notice

[WLAN-1] Disassociated WLAN station 64:b9:e8:a0:2e:a4 [] due to station request (Disassociated because sending station is leaving BSS

]]></ac:plain-text-body></ac:structured-macro>

...

When deploying your hotspot, you should also consider some non eduroam-specific guidelines for WLAN deployment. An incomplete list of things to consider is collected in chapter FOO.

B.2.5 Security settings

     1. Configure You need to make two security-relevant settings: configure the RADIUS server to use for authenticating users and configure the eduroam Wireless LAN to use RADIUS at all.

First, let's define a RADIUS server for authentication. As a pure eduroam SP, the RADIUS server in question is likely the one of your national federation. If you are both an eduroam IdP and an eduroam SP, the RADIUS is your own RADIUS server.

Select "Configuration" > "Wireless LAN" > "IEEE 802.1X" > "RADIUS server" and click on "Add". (see screenshot below). Then, fill in your RADIUS server details as negotiated with your eduroam IdP or federation operator.

In the second step, we'll to use: Select Configuration – Wireless LAN – IEEE 802.1X – RADIUS
         server.
     2. Click on add and enter your server details: Image Removed
You must now apply the RADIUS server and encryption scheme to the SSID eduroam:
     3. Select Configuration>Wireless LAN>802. To do that, go to the menu "Configuration" > "Wireless LAN" > "802.11i/WEP.
     4. Click on " > "WPA or Private WEP setting – 80211.i/WEP.     5. Click on the slot in which you previously configured the SSID eduroam and enter the following settings:
         Encryption Activated to Activated.
         settings". Then, click on the WLAN network which you chose for the "eduroam" SSID before (see screenshot).

Set the following entries:

  • Encryption Activated to Activated
  • (Key 1/passphrase is irrelevant)
  • Method/Key 1 Length to 802.11i(WPA)-802.1x.

...

  • WPA Version to

...

  • WPA2.

...

  • (WPA1 Session Key Type

...

  • is irrelevant)
  • WPA2 Session Key Type to AES
  • (WPA rekeying cycle is at your discretion; the default value 0 is a sane default)
  • (Client EAP method is irrelevant)
  • (Authentication is irrelevant)
  • (Default key is irrelevant)

Other settings are irrelevant with WPA-Enterprise:

...