DCU Information Systems Services header
Information Systems Services

Eduroam - Eduroam Wireless Network | Information Systems & Services

Eduroam Further Information - Technical Specifications

This page covers 3 topics of further information in eduroam:

  1. Eduroam Information
  2. Advice for DCU staff & students travelling to other eduroam institutions
  3. Eduroam Usage Policy

1. Eduroam (Educational Roaming) Information

Welcome to the DCU eduroam service section of the ISS website


Eduroam (Educational Roaming) is an implementation of a wireless infrastructure which facilitates roaming educational users to gain wireless Internet access at other member sites. Access to the service is authenticated - always using your personal credentials from your home institution regardless of where you access the service. The wireless network name is the same in all places - "eduroam".

http://www.eduroam.ie
http://www.eduroam.org
http://www.eduroamus.org/

2. Advice for DCU staff and students visiting other eduroam institutions

 

  • Test that eduroam works for you in DCU before you leave. If you can't get it working here, you're likely to have problems elsewhere as well.
  • Search for (and read) any documentation the remote site has on eduroam before you leave. Forewarned is forearmed and sites might have some variations in how it is implemented.
  • The remote site may use different network security settings to that used in DCU (e.g.WPA2 TKIP AES) . If so, you will need to change that part of your network configuration.
  • The authentication part of the configuration is specific to the home institution (DCU) so that shouldn't be changed. It includes the EAP methods (Microsoft protected EAP EAP-TTLS-PAP and PEAP+MSCHAPv2, certificates and server verification. Do not change any of those.
  • Don't forget to include the realm (dcu.ie) when you're authenticating. Usually this just means using username@dcu.ie rather than simply username. The username is your Novell username and your Novell password. The realm is generally not what clients refer to as a domain. Domains should be left blank.
  • DCU users should use the following server and certificate details: idp-wireless.dcu.ie and the GTE Cyber Trust Global Root

3. Eduroam Usage Policy

The use of the eduroam service is governed by DCU's ICT policies, including acceptable usage policy:

http://www.dcu.ie/iss/policies/index.shtml

Furthermore use of the service is governed by the eduroam policy;

http://www.eduroam.ie/policy/ie-eduroam-policy.pdf

The most notable part of the eduroam policy is Section 6 which is indicated here:

1. A user's role is in principle always a visitor who wants Internet access at a Server Provider (SP). The user MUST abide by their IdP's (Identity Provider) AUP or equivalent and respect the visited organisation's AUP or equivalent. Where regulations differ the more restrictive applies. Users MUST as a minimum abide by relevant law of the country where (s)he is physically situated while using the service, home or abroad.

2. The user is responsible for taking reasonable steps to ensure that they are connected to a genuine eduroam service (as directed by their home organisation) prior to entering their login credentials. The primary means to achieve this is to validate the server certificate that is presented to the user upon login.

3. The user is responsible for their credentials and the use of any service they might provide.

4. If credentials are thought to have been compromised, the user MUST immediately report back to their IdP (home institution).

5. The user is obliged to inform the SP (where possible) and IdP of any faults with the eduroam service.

Policy compliance:

If a user is in breach of these acceptable usage policies, the following actions will be taken:

- The user will be suspended from the service. Examples of a breach of the AUP include any activity which may adversely affect the quality of the WiFi service, or which may impact on the reputation of the University.

Serious breaches e.g. infringing on copyright may result in disciplinary action being taken by the University.

Network traffic is passively monitored and details logged for incident response purposes only.

Protocols allowed on DCU eduroam service:
DCU complies with the full list of allowed ports and protocols as suggested by the eduroam policy. There may also be a range of additional protocols allowed, over and above those that have been stated as a requirement by eduroam.
Currently the eduroam service in DCU does not support IPv6
Support Contact Details : https://iss.servicedesk.dcu.ie