{toc}
h1. eduroam for temporary events
h2. Deployment of eduroam at a conference or event
eduroam is a wireless networking service for users of the education and research sector world-wide. It is based on IT industry standards which many enterprise-class wireless networking equipment supports.
eduroam directly operates the authentication infrastructure for network admission; it does not provide operators on-site with WiFi or other networking equipment. So, in order to provide eduroam at your conference or event, you need to have your own equipment with an appropriate feature set for your deployment needs. In generic terms, the WiFi equipment for your event or conference needs to support the following standard for use with eduroam:
* IEEE 802.11i Enterprise (WPA2/AES with RADIUS authentication)
* a separate SSID named "eduroam" (without the quotes)
This document provides contact information to get in touch with the responsible eduroam operator, and also administrative requirements and technical information regarding eduroam Service Provider hotspots.
h2. Contact information for the RADIUS connection to eduroam
If your event is taking place always in the same country, you should contact the eduroam National Roaming Operator (NRO) for your country to negotiate the RADIUS uplink for your WiFi equipment. You can get in touch with the responsible NRO by using this [contact form|http://www.eduroam.org/index.php?p=contact] ("My organisation wants to connect to eduroam", and then your country) - make sure that you mention that you are seeking a temporary connection as Service Provider only.
If your event takes place in varying locations, eduroam Operations can provide you with a "catch-all" RADIUS server uplink. Please use the same contact form as in the previous paragraph, but select "My country is not in the list...".
h3. Simple setup: all eduroam users in the same VLAN
If all eduroam users are to be put into the same VLAN, it is not usually necessary to set up and operate a RADIUS server at the conference side. Instead, eduroam Operations operates RADIUS servers for that purpose. Once you have negotiated the uplink details as detailed above, you can configure these in your WiFi equipment and are all set. Be sure to disable dynamic VLAN assignments in that case; the eduroam infrastructure cannot guarantee that a participating institution doesn't inappropriately send RADIUS attributes for VLAN assignment.
See the following chapter ("eduroam SP") for further information regarding the exact setup of your WiFi or wired ethernet equipment.
h3. Advanced setup: dynamic VLAN assignment
If you want to put different users into different VLANs, you will need to set up a RADIUS server to do the VLAN assignments. Then, configure this RADIUS server to proxy authentication requests to the negotiated RADIUS uplink from above.
See the following chapter ("eduroam SP") for further information regarding the exact setup of your WiFi or wired ethernet equipment, and your RADIUS server.
{include:eduroam SP} |