The eduroam Architecture for Network Roaming

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 37
Abstract: This document describes the architecture of the eduroam service for federated (wireless) network access in academia. The combination of IEEE 802.1X, the Extensible Authentication Protocol (EAP), and RADIUS that is used in eduroam provides a secure, scalable, and deployable service for roaming network access. The successful deployment of eduroam over the last decade in the educational sector may serve as an example for other sectors, hence this document. In particular, the initial architectural choices and selection of standards are described, along with the changes that were prompted by operational experience.
Publication Date: 2015-09-01
Status Note: Informational
DOI: 10.17487/RFC7593
Link: https://doi.org/10.17487/RFC7593
Author(s): Klaas Wierenga
Stefan Winter
Tomasz Wolniewicz
Keyword(s): Federated Authentication, AAA, RADIUS, IEEE 802.1X, Roaming, EAP, eduroam

Latest version of IETF RFC 7593

Document Versions — IETF RFC 7593

▶ IETF RFC 7593 (2015-09-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2865 [Active*]
IETF RFC 3748 [Active*]
IETF RFC 4279 [Active*]
IETF RFC 4372 [Active*]
IETF RFC 5246 [Superseded*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5580 [Active*]
IETF RFC 5997 [Active*]
IETF RFC 6613 [Active*]
IETF RFC 6614 [Active*]
IETF RFC 6973 [Active*]

Bibliographic Reference(s)

10.1109-ieeestd.2010.5409813 — IEEE.802.1X EXTERNAL
IETF.draft-ietf-abfab-arch-13 — ABFAB-ARCH EXTERNAL
IETF.draft-ietf-radext-dynamic-discovery-15 — DYN-DISC EXTERNAL
Wierenga, K., "Subject: proposal for inter NREN roaming", message to the mobility@terena.nl mailing list, initial proposal for what is now called eduroam, 30 May 2002, < http://www.terena.org/activities/tf-mobility/ start-of-eduroam.pdf >. EXTERNAL
Tomasek, J., "Dead-realm marking feature for Radiator RADIUS servers", 2006, < http://www.eduroam.cz/dead-realm/docs/dead-realm.html >. EXTERNAL
Delivery of Advanced Network Technology to Europe, "eduPKI Trust Profiles", 2012, < https://www.edupki.org/edupki-pma/ edupki-trust-profiles/ >. EXTERNAL
Delivery of Advanced Network Technology to Europe, "eduroam CAT", 2012, < https://cat.eduroam.org >. EXTERNAL
Trans-European Research and Education Networking Association, "Preliminary selection for inter-NREN roaming", December 2003, < http://www.terena.org/activities/tf-mobility/ deliverables/delG/DelG-final.pdf >. EXTERNAL
Trans-European Research and Education Networking Association, "eduroam Homepage", 2007, < http://www.eduroam.org/ >. EXTERNAL
GEANT, "eduroam Policy Service Definition", Version 2.8, July 2012, < https://www.eduroam.org/downloads/docs/GN3-12- 192_eduroam-policy-service-definition_ver28_26072012.pdf >. EXTERNAL
Open System Consultants, "RadSec: a secure, reliable RADIUS Protocol", October 2012, < http://www.open.com.au/radiator/radsec-whitepaper.pdf >. EXTERNAL
Trans-European Research and Education Networking Association, "eduroam Compliance Statement", October 2011, < http://www.eduroam.org/downloads/docs/ eduroam_Compliance_Statement_v1_0.pdf >. EXTERNAL
IETF RFC 3588 [Superseded*]
IETF RFC 3958 [Active*]
IETF RFC 4017 [Active*]
IETF RFC 6733 [Active*]
IETF RFC 6929 [Active*]
IETF RFC 7170 [Superseded*]
IETF RFC 7542 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7593.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7593, The eduroam Architecture for Network Roaming. Available at https://doi.org/10.17487/RFC7593

Snippet:

IETF RFC 7593, The eduroam Architecture for Network Roaming. Available at https://doi.org/10.17487/RFC7593

HTML (ISO 690 compliant)

Preview:

IETF RFC 7593, The eduroam Architecture for Network Roaming. Available at https://doi.org/10.17487/RFC7593

Snippet:

<span class="citation"><cite>IETF RFC 7593</cite>, The eduroam Architecture for Network Roaming. Available at <a href="https://doi.org/10.17487/RFC7593" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7593</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7593, The eduroam Architecture for Network Roaming
doi: 10.17487/RFC7593
url: https://doi.org/10.17487/RFC7593

Snippet:

<li>
<cite id="bib-rfc7593">IETF RFC 7593</cite>, The eduroam Architecture for Network Roaming
<span class="doi">10.17487/RFC7593</span>
</li>

Referenced By

IETF RFC 7585 [Active*]
IETF RFC 9190 [Active*]