Skip to content

Latest commit

 

History

History
40 lines (25 loc) · 2.34 KB

README.md

File metadata and controls

40 lines (25 loc) · 2.34 KB
Raw

RADIUS Configurations: Service Provider proxy

This guide explains how to become a eduroam Service Provider. Unless you are an institution, you will most likely want the other guide.

How eduroam authentication works

eduroam makes use of the domain name to know where to forward the request. The hierarchical structure is similar to the workings of a DODAG tree. When a server has information about treating a request with the specified domain, it proxies it to that server or authentication module. Otherwise, it forwards it to it's parent.

Contact your national RADIUS proxy server provider

First, determine what orgnistaion is responsible for your country's national RADIUS proxy server. You will have to contact them to discuss details about feasibility and requirements, as well as transmit your future proxy's IP address and a shared secret.

For Belgium, this organisation is Belnet.

Creating your proxy server

FreeRADIUS is available as a package for Debian and as OCI image. The IP address for the server must be a static one, as you will need to share it to your national RADIUS proxy server.

To configure this server, use the configuration files available in this direcrtory and check the resources below.

Included in the configuration

The configuration in this directory are the minimum required to run an operational proxy.

  • The proxy.conf specifies the national RADIUS proxy.

    👉 You need to change this file.

  • The eduroam virtual server confgures the request proxying.
  • The clients.conf specifies the client configuration (IP address and shared secret).

    👉 You need to change this file.

Resources