eduroam 802.1X deviceauth refresh

Posted on 2022-11-10 by Christopher Causer

Do you recognize the following web form? If you don’t then you can stop reading. If you do then, even if you haven’t had occasion to fill it in often, please read on as there are changes coming. Above is … Continue reading →

Posted in eduroam | Tagged , | Comments Off on eduroam 802.1X deviceauth refresh

eduroam and realmless usernames: an update

Posted on 2018-08-01 by Christopher Causer

You may be aware that the University of Oxford will shortly be mandating fully qualified usernames for eduroam, explained and for reasons discussed in a previous blog post. This post is intended as a followup, highlighting how we’re intending on … Continue reading →

Posted in Uncategorized | Tagged , , , | Comments Off on eduroam and realmless usernames: an update

FreeRADIUS, sql_log, PostgreSQL and upserting

Posted on 2015-07-15 by Christopher Causer

While this is superficially a post for creating an upsert PostgreSQL query for FreeRADIUS’s sql_log module, I felt the problem was general enough to warrant an explanation as to what CTEs can do. As such, the post should be of … Continue reading →

Posted in eduroam, Uncategorized | Tagged , , | Comments Off on FreeRADIUS, sql_log, PostgreSQL and upserting

Linux and eduroam: RADIUS

Posted on 2015-02-16 by Christopher Causer

A service separate from, but tightly coupled to, eduroam is our RADIUS service. This is the service that authenticates a user, making sure that the username and password typed into the password dialog box (or WPA supplicant) is correct. Authorization … Continue reading →

Posted in eduroam, Linux | Tagged , , , | 3 Comments

Linux and eduroam: Building for speed and scalability

Posted on 2014-08-21 by Christopher Causer

When upgrading the eduroam infrastructure, there was one goal in mind: increase the bandwidth over the previous one. The old infrastructure made use of a Linux box to perform NAT, netflow and firewalling duties. This can all be achieved with … Continue reading →

Posted in eduroam, Firewall, Linux | Tagged , | 3 Comments

Linux and eduroam: link aggregation with LACP bonding

Posted on 2014-07-31 by Christopher Causer

In previous posts, I discussed the roles of routing and NATing in the new eduroam infrastructure . In one sense, that is all you need to create a Linux NAT firewall. However, the setup is not very resilient. The resulting … Continue reading →

Posted in eduroam, Linux | Tagged , , , | 8 Comments

Linux and eduroam: Routing

Posted on 2014-07-21 by Christopher Causer

This is a continuation of the series of blog posts describing the Linux servers in the middle of the new eduroam infrastructure. Packets sent by your eduroam client eventually end up on one of the Linux boxes in the eduroam … Continue reading →

Posted in eduroam | Tagged , | Comments Off on Linux and eduroam: Routing

Linux’s role in the new eduroam infrastructure

Posted on 2014-06-05 by Christopher Causer

People within Oxford University may be aware that the eduroam service has recently been upgraded to increase its bandwidth, which was saturated on the old infrastructure. This included the replacement of two Linux servers which provide services key to the … Continue reading →

Posted in eduroam, Linux | Tagged , | Comments Off on Linux’s role in the new eduroam infrastructure