Eduroam Service Template

This template is designed for the following scenarios:

Local campus users connecting to eduroam from the local wireless network.

Roaming users from an eduroam campus connecting to their campus network.

Roaming users connecting from a local campus or other campuses that are part of the eduroam federation.

To access the Eduroam service template:

1. Navigate to Configuration > Service Templates & Wizards.

2. From the Service Templates & Wizards page, select Eduroam. The Service Templates - Eduroam page opens to the General tab.

Figure 1  Eduroam Service Template

Specify the parameters used in the Eduroam service template as described in the following table:

Table 1: Eduroam Service Template Parameters

Parameter

Action/Description
General

Select Prefix

Select a prefix from the existing list of prefixes.

This populates the pre-configured information in the Authentication, Service Rule, Wireless, andFederation Level Radius Server (FLR) tabs. The Name Prefix field is not editable.

Name Prefix

Enter a prefix that you want to append to services using this template.

Use this to identify services that use templates.

Service Rule

Enter domain details

Enter the domain name of the network.

For example, @edunet.ucla.com. This field is mandatory.

Select Vendor

Select the vendor of the network device. This field is mandatory.

Authentication

Select Active DirectoryMicrosoft Active Directory. The directory server that stores information about a variety of things, such as organizations, sites, systems, users, shares, and other network objects or components. It also provides authentication and authorization mechanisms, and a framework within which related services can be deployed.

Select an authentication source from the list, the information updated in the Authentication, Wireless, and Federation Level Radius Server (FLR) tabs are auto-populated.

Active Directory Name

Enter the hostname or the IP address of the Active Directory server. This field is mandatory.

Description

Enter a description that helps you identify the characteristics of this template. This field is mandatory.

Server

Enter the host name or the IP address of the Active Directory server. This field is mandatory.

Identity

Enter the Distinguished Name (DNDistinguished Name. Distinguished Name. A series of fields in a digital certificate that, taken together, constitute the unique identity of the person or device that owns the digital certificate. Common fields in a DN include country, state, locality, organization, organizational unit, and the “common name”, which is the primary name used to identify the certificate. ClearPass uses this account to access all other records in the directory. For Active Directory, the bind DN can also be in the administrator@domain format (for example, administrator@acme.com).) of the administrator account. This field is mandatory.

NetBIOSNetwork Basic Input/Output System. A program that lets applications on different computers communicate within a LAN.

Enter the server Active Directory domain name. This field is mandatory.

Base DN

Enter the Distinguished Name (DN) of the administrator account. This field is mandatory.

Password

Enter the account password. This field is mandatory.

Port

Enter the TCPTransmission Control Protocol. TCP is a communication protocol that defines the standards for establishing and maintaining network connection for applications to exchange data. port where the server is listening for a connection. This field is mandatory.

Wireless Network Settings

Select wireless controller

Select a wireless controller from the drop-down list.

Wireless controller name

Enter the name given to the wireless controller.

Controller IP Address

Enter the IP address of the wireless controller.

Vendor Name

Select the manufacturer of the wireless controller.

RADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  Shared Secret

Enter the shared secret that is configured on the controllerand inside Policy Manager to send and receive RADIUS requests.

Enable RADIUS CoAChange of Authorization. The RADIUS CoA is used in the AAA service framework to allow dynamic modification of the authenticated, authorized, and active subscriber sessions.

Select to enable RADIUS initiated CoA on the network device.

RADIUS CoA Port

Specifies the default port 3799 if RADIUS CoA is enabled. Change this value only if you defined a custom port on the network device.

Federation Level RADIUS Server (FLR)

Host Name

Enter the host name of the federation RADIUS server.
IP Address Enter the IP address of the federation RADIUS server.

Vendor Name

Select the manufacturer of the wireless controller.

RADIUS Shared Secret

Enter the shared secret that is configured on the controllerand inside Policy Manager to send and receive RADIUS requests.

Enable RADIUS CoA

Select to enable RADIUS initiated CoA on the network device.

RADIUS CoA Port

Specifies the default port 3799 if RADIUS CoA is enabled.

NOTE: Change this value only if you defined a custom port on the network device.

RADIUS Authentication Port

Enter the port number for the RADIUS Authentication Port.

RADIUS Accounting Port

Enter the port number for the RADIUS Accounting Port.