Internet2

close
Use Internet2 SiteID

Already have an Internet2 SiteID?
Sign in here.

Internet2 SiteID

Your organization not listed? Create a local account to use Internet2 services.

Create SiteID

eduroam

overview
Service Type(s):
Trust and Identity
Phase:
Early Adopter
Subscribers:
Other R&E Participant, Internet2 Member
Email:
netplus@internet2.edu
Contact(s):
Mike Zawacki

The service that started in Europe (www.eduroam.org) and is rapidly growing globally has had much success in the US and will soon reach one hundred participating institutions. Available to the research and education community (including libraries, museums, and selected government agencies), the eduroam service provides instant, authenticated and encrypted network access, mainly to Wi-Fi networks, to all participants of the federation. Connect once to the eduroam service at your local institution, and you are ready to roam regionally, nationally, and internationally—with no other steps required.

features

THE Global SSID for Education

eduroam (education roaming) is the secure worldwide federated network access service developed for the international research and education community.

What does eduroam do for the traveler? eduroam provides per-user, per-session encrypted network access for visitors from participating institutions, without the need to gain guest credentials on arrival to an eduroam enabled location. The connectivity is instantaneous and the infrastructure is authenticated by the user. Study abroad students can join thousands of eduroam hotspots without any hassle or any data roaming charges.

What does eduroam do for the institution? eduroam removes the administrative steps required to provision visitors from other educational institutions. Access between networks from R&E institutions is negotiated once during the federation process and for all members of participating institutions. The eduroam network addresses CALEA requirements for visitors from other schools.

For more on eduroam, see http://www.eduroamus.org/introduction.

What is eduroam?

Want to get a feel for eduroam in a minute thirty? Watch this.

How It Works

eduroam "how it works" graphic

eduroam combines the power of 802.1x, SSL, and RADIUS to create a standards based global trust fabric.

eduroam US Institutions

Click the image below to see a map of all current eduroam US institutions.

Google map of eduroam US institutions

faq

Which technology is needed to join the service?

WPA2-Entrerprise (A.K.A. 802.1x) is required to join eduroam. The RADIUS server of the joining institution that is used to operate WPA2-Enterprise locally will be connected to the national infrastructure.

How long does it take to connect the institution to eduroam?

The connection of the institution's RADIUS server to the national infrastructure takes an average of two hours. This step will allow users of that institution to visit other eduroam campuses. Making the local campus an eduroam hotspot takes more time since it involves the broadcasting of the network name across campus and some backend network engineering (subnets and firewall configurations). Count some time to inform your community about the new offering and its local support.

How does the local institution support visitors?

One of the main rule of eduroam is that visitors have to first contact their home institution to seek support. This said, many places elect to support eduroam visitors locally since in many cases it doesn't add much burden to the local help desk.

How is abuse handled?

All eduroam users are authenticated (a good thing for CALEA purposes) in the form user@realm (e.g. username@institution.edu). In case of abuse, the local institution can block users the same way it is done locally (MAC address and username/realm filtering) For DMCA complaints, the request can be forwarded to the institution of the offending user either directly or through the eduroam-US service.

Still have questions? A more detailed eduroam FAQ is available at http://www.eduroam.us/faq.

More Information

Thank you for your interest in Internet2 NET+ eduroam. Please check NET+ eduroam home for updates as they become available. Check Internet2 NET+ Services for news and updates on all Internet2 NET+ service offerings. Have a question not answered here? Send an email to netplus@internet2.edu.

participate

Internet2 NET+ now offers the eduroam service in the Early Adopter Net+ Service Phase. Eduroam will be built into the overall value for Internet2 higher education members. Annual Internet2 membership dues will cover the cost of the service. Members who are already using the eduroam service will simply need to sign the soon-to-be-available eduroam service agreement. A link to the agreement will be made available on this web page prior to eduroam's full General Availability.

Higher educational institutions that are not Internet2 members are also welcome to join the service. Annual and other fees will apply.

To participate in the NET+ eduroam service, you must first determine if your organization is a Qualified Entity. Qualified Entities are:

  • U.S. higher education institutions with a .edu domain suffix
  • U.S. Non-profit organizations with a .edu domain suffix
  • Qualified Federal Agencies and Laboratories
  • Some organizations with strong affiliation to research and education institutions

Internet2 will ultimately determine all Qualified Entities. The official definition is listed below:

“Qualified Entity” means U.S. universities, U.S. colleges, any non-profit organization with the “.edu” domain suffix that is located in the U.S., Qualified National Laboratories/Qualified National Agencies, organizations with strong affiliations with research and education institutions (as determined by Internet2 in its reasonable discretion).

Image displaying a decision tree to determine what constitutes a Qualified Entity for eduroam

To sign up for the eduroam service, or if there are any additional questions, simply contact Internet2 by sending a note to the following email address: netplus@internet2.edu.