eduroam is a wireless networking service for users of the education and research sector world-wide. It is based on IT industry standards which many enterprise-class wireless networking equipment supports.
eduroam directly operates the authentication infrastructure for network admission; it does not provide operators on-site with WiFi or other networking equipment. So, in order to provide eduroam at your conference or event, you need to have your own equipment with an appropriate feature set for your deployment needs. In generic terms, the WiFi equipment for your event or conference needs to support the following standard for use with eduroam:
This document provides contact information to get in touch with the responsible eduroam operator, and also administrative requirements and technical information regarding eduroam Service Provider hotspots.
If your event is taking place always in the same country, you should contact the eduroam National Roaming Operator (NRO) for your country to negotiate the RADIUS uplink for your WiFi equipment. You can get in touch with the responsible NRO by dropping the eduroam Operations team eduroam-ot (att) lists.geant.org an email make sure that you mention that you are seeking a temporary connection as Broadband Service Provider only.
If your event takes place in varying locations, eduroam Operations can provide you with a "catch-all" RADIUS server uplink. Please use the same email address and stress that your events take place in different countries.
If all eduroam users are to be put into the same VLAN, it is not usually necessary to set up and operate a RADIUS server at the conference side. Instead, eduroam Operations operates RADIUS servers for that purpose. Once you have negotiated the uplink details as detailed above, you can configure these in your WiFi equipment and are all set. Be sure to disable dynamic VLAN assignments in that case; the eduroam infrastructure cannot guarantee that a participating institution doesn't inappropriately send RADIUS attributes for VLAN assignment.
See the beginning of this Chapter ("eduroam SP") for further information regarding the exact setup of your WiFi or wired ethernet equipment.
If you want to put different users into different VLANs, you will need to set up a RADIUS server to do the VLAN assignments. Then, configure this RADIUS server to proxy authentication requests to the negotiated RADIUS uplink from above.
See the beginning of this Chapter ("eduroam SP") for further information regarding the exact setup of your WiFi or wired ethernet equipment, and your RADIUS server.