Eduroam Basics

Workshop Info

This is an introductory workshop for eduroam. After the completion of the workshops, participants are expected to be able to configure WiFi APs for 802.1X authentication, configure freeradius server with database and LDAP user databases, peer with .np FLR and fully implement eduroam at their institution.

• Venue: NREN Secretariat, Conference Hall
• Time: 13:00 to 17:00
• Dates:
  • eduroam Basics 01 - 2018-12-31
  • eduroam Basics 02 - TBD (Tentative Jan 2nd week)
  • eduroam Basics 03 - TBD (Tentative Jan last week)
  • eduroam Basics 04 - TBD (Tentative Feb 2nd week)

Workshop Contents

• Presentation Slides (to be added)

Lab Plan

Identity Provider

• Install Ubuntu 18.04 server
  • Update Ubuntu
  • Install freeRADIUS
  • Configure freeRADIUS
  • Testing

Service Provider

• Configure WiFi AP
• Configure Certificates for WPA2 Enterprise
• Configure WiFi - uni1, uni2, uni3, uni4
 (For lab use only)

• Testing
  • Check IDP (Local university login)
  • Configure Peering
  • Check peering

Note: SSIDs should be lowercase "eduroam" for the production deployment. In the Labs, for easier troubleshooting we are using different SSIDs.

System Preparation

Four VPSes with freshly installed Ubuntu 18.04 LTS Server is provided to participants divided into four groups or two to four participants. The participants are expected to use their Laptop and ssh client to connect to their assigned VPS and follow the lab instructions.

freeRADIUS configuration

• freeRADIUS configurations Follow eduroam Configuration for basic setup and configuration lab

Testing

You can use eapol_test tool to test PEAP, TLS and TTLS authentications on the configured freeRADIUS server. Download the tool from NREN training website.

• eapol_test tool is available at https://w1.fi/hostapd/, we have compiled it to save time for Lab.

cd
mkdir eapol_test
curl -O https://training.nren.net.np/download/eapol_test-ubuntu1804.tar
tar zxvf eapol_test-ubuntu1804.tar
sudo cp eapol_test /usr/local/bin

Run Tests and watch for response

$ eapol_test -c eap-ttls.conf -s testing123

$ eapol_test -c peap-mschapv2.conf -s testing123

Run tests with incorrect password, watch for response. Did you notice anything different?

$ eapol_test -c eap-ttls-invalid.conf -s testing123
 
$ eapol_test -c peap-mschapv2-invalid.conf -s testing123

Setting up APs

Documentation is in progress. Check back again for more/updated contents.

Peering with NRO

Documentation is in progress. Check back again for more/updated contents.

Setting up Roaming

Documentation is in progress. Check back again for more/updated contents.