Difference between revisions of "Eduroam Basics"

From NREN
 
(6 intermediate revisions by the same user not shown)
Line 6: Line 6:
 
* Dates:
 
* Dates:
 
** eduroam Basics 01 - 2018-12-31
 
** eduroam Basics 01 - 2018-12-31
** eduroam Basics 02 - TBD (Tentative Jan 2nd week)
+
** eduroam Basics 02 - 2019-01-11
** eduroam Basics 03 - TBD (Tentative Jan last week)
 
** eduroam Basics 04 - TBD (Tentative Feb 2nd week)
 
  
 
== Workshop Contents ==
 
== Workshop Contents ==
Line 42: Line 40:
  
 
* eapol_test tool is available at https://w1.fi/hostapd/, we have compiled it to save time for Lab.
 
* eapol_test tool is available at https://w1.fi/hostapd/, we have compiled it to save time for Lab.
  cd
+
[[eapol testing]]
  mkdir eapol_test
 
  curl -O https://training.nren.net.np/download/eapol_test-ubuntu1804.tar
 
  tar zxvf eapol_test-ubuntu1804.tar
 
  sudo cp eapol_test /usr/local/bin
 
 
 
Run Tests and watch for response
 
  $ eapol_test -c eap-ttls.conf -s testing123
 
 
 
  $ eapol_test -c peap-mschapv2.conf -s testing123
 
 
 
Run tests with incorrect password, watch for response. Did you notice anything different?
 
  $ eapol_test -c eap-ttls-invalid.conf -s testing123
 
 
 
  $ eapol_test -c peap-mschapv2-invalid.conf -s testing123
 
  
 
=== Setting up APs ===
 
=== Setting up APs ===
Line 67: Line 51:
 
Documentation is in progress. Check back again for more/updated contents.
 
Documentation is in progress. Check back again for more/updated contents.
  
[[Category:Workshop]]
+
[[Category:Workshops]]

Latest revision as of 12:56, 11 January 2019

Workshop Info

This is an introductory workshop for eduroam. After the completion of the workshops, participants are expected to be able to configure WiFi APs for 802.1X authentication, configure freeradius server with database and LDAP user databases, peer with .np FLR and fully implement eduroam at their institution.

  • Venue: NREN Secretariat, Conference Hall
  • Time: 13:00 to 17:00
  • Dates:
    • eduroam Basics 01 - 2018-12-31
    • eduroam Basics 02 - 2019-01-11

Workshop Contents

  • Presentation Slides (to be added)

Lab Plan

Identity Provider

  • Install Ubuntu 18.04 server
    • Update Ubuntu
    • Install freeRADIUS
    • Configure freeRADIUS
    • Testing

Service Provider

  • Configure WiFi AP
  • Configure Certificates for WPA2 Enterprise
  • Configure WiFi - uni1, uni2, uni3, uni4
 (For lab use only)

  • Testing
    • Check IDP (Local university login)
    • Configure Peering
    • Check peering

Note: SSIDs should be lowercase "eduroam" for the production deployment. In the Labs, for easier troubleshooting we are using different SSIDs.

System Preparation

Four VPSes with freshly installed Ubuntu 18.04 LTS Server is provided to participants divided into four groups or two to four participants. The participants are expected to use their Laptop and ssh client to connect to their assigned VPS and follow the lab instructions.

freeRADIUS configuration

Testing

You can use eapol_test tool to test PEAP, TLS and TTLS authentications on the configured freeRADIUS server. Download the tool from NREN training website.

eapol testing

Setting up APs

Documentation is in progress. Check back again for more/updated contents.

Peering with NRO

Documentation is in progress. Check back again for more/updated contents.

Setting up Roaming

Documentation is in progress. Check back again for more/updated contents.