Page History

...

Uplink to authentication server: "auth-server"

The uplink can be realised over "good old" RADIUS/UDP, but then a shared secret and static IP address need to be negotiated with eduroam OT. Or, as a holder of a eduPKI RADIUS/TLS certificate, the connection can be established over RADIUS/TLS ("RadSec"). Pick one of the two variants below.

RADIUS/UDP

wlan auth-server OR_Proxy_eduroamOT
ip ...                                                      # IP address of the preliminary OpenRoaming ANP-side proxy of eduroam OT
port 1812
acctport 1813
key ...                                                     # your shared secret for the preliminary OpenRoaming ANP-side proxy of eduroam OT
service-type-framed-user 1x

RADIUS/TLS

wlan auth-server OR_Proxy_eduroamOT
radsec
ip openroaming-ap.eduroam.org
port 1812
acctport 1813
rfc5997 auth-only
service-type-framed-user 1x

wlan cert-assignment-profile
pki-cert-assign application radsec cert-type ClientCert certname RADIUS-TLS


Venue information in ANQP: "anqp-venue-name"

hotspot anqp-venue-name-profile YourVenueInfo
enable
venue-group business                                        # repeats beacon info (see above) in ANQP
venue-type research-and-dev-facility                        # repeats beacon info (see above) in ANQP
venue-lang-code eng                                         # a descriptive name for the venue in English language follows
venue-name "RESTENA Offices"                                # the name in English

...