Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3

eduroam SP

Basic deployment considerations for wireless LANs

An eduroam wireless network is a wireless network. This sounds trivial, but it is important to keep in mind that

  • a poorly managed Wireless LAN won't magically become better by naming it eduroam. Before diving into eduroam-specific configuration, make sure you understand how to manage
    • WiFi coverage
    • bandwidth requirements
    • enough DHCP addresses to accomodate all clients
  • by naming the network eduroam, you are becoming part of a world-wide recognised brand. Arriving users will think of this being an eduroam network, with a set of expectations for such networks. If your wireless network fails to deliver in the points mentioned above, users will consider this an eduroam failure and your installation will hurt the global brand eduroam, not only your own site and users.

This section provides general advice regarding wireless LAN deployment. It is not meant as a replacement for further literature; there are many books and online publications regarding good wireless LAN planning, and you are encouraged to familiarise yourself with this topic.

(Editor's note: place all your helpful advice HERE! :-) )

Administrative obligations of eduroam SPs

Set up of WiFi hotspots

All of the solutions presented below support the basic requirements for an eduroam SP: support for IEEE 802.1X authentications, WPA2/AES support. When deploying eduroam, deployers often want to make use of additional features such as multi-SSID support, dynamic VLAN assignment and others. Every section contains a table with a short overview of their support of such additional useful features.

Cisco (controller-based solutions)

Feature

supported?

multi-SSID

yes

VLANs

yes

dynamic VLAN assignment

partial; not with IPv6

Include Page
cisco_controller
cisco_controller

Cisco (stand-alone APs with IOS)

Feature

supported?

multi-SSID

yes

VLANs

yes

dynamic VLAN assignment

yes

Include Page
3.2.6
3.2.6

Aruba

Include Page
aruba
aruba

Trapeze (Juniper)

Include Page
trapeze (juniper)
trapeze (juniper)

Meru

Feature

supported?

multi-SSID

yes

VLANs

yes

dynamic VLAN assignment

yes

Include Page
meru-controller
meru-controller

Lancom

Feature

supported?

multi-SSID

yes

VLANs

yes

dynamic VLAN assignment

yes

Include Page
lancom-ap
lancom-ap

Apple AirPort Express

Feature

supported?

multi-SSID

no

VLANs

no

dynamic VLAN assignment

no

Set up of switches for wired eduroam

Include Page
wired
wired

Set up of networking equipment in the network core

Set up of eduroam SP RADIUS servers

Include Page
freeradius-sp
freeradius-sp