Eduroam (EDUcation ROAMing) is a standardized visitor network offered in more than 5,000 participating institutions worldwide. It allows users to seamlessly and securely obtain Internet connectivity when visiting an institution other than their own.

When a user visits an eduroam-capable institution her credentials will be checked against her home institution through a federation of authentication servers. If the user’s home institution validates credentials the user will be granted Internet connectivity in the visited institution.

You can learn more about eduroam at https://www.eduroam.us/ http://en.wikipedia.org/wiki/Eduroam and https://www.eduroam.org/.

SLAC is offering the eduroam service site wide through the wireless network, at no cost for users. SLAC Today announcement

How to connect to eduroam at SLAC

The SLAC set up is standard and we expect users to be able to use eduroam at SLAC as in any other participating institution.

• You are a visitor from an eduroam enabled institution
  • Connect to the wireless network called “eduroam”, you will be asked to authenticate in accordance with your institution's eduroam policy. Then, if valid, you will be connected to the eduroam wireless network and given Internet connectivity.
• You are a SLAC employee
  • We encourage SLAC employees with a centrally managed device to use the SLAC secure wireless when at SLAC. The Eduroam service is mainly of interest while travelling to another institution.

To use eduroam you can enroll your mobile device in MDM – Mobile device management system. The device will then be preconfigured for eduroam and will automatically use a certificate to connect to the eduroam network.

We are working on automatically pushing a suitable eduroam profile to centrally managed devices. In the meantime you can use a SUNet ID as described in the section below.

• You have a SUNet ID (Stanford University account)
  • You can connect to eduroam using the full login string like <user>@.stanford.edu and your SUNet password. You may be asked to validate with Stanford’s radius server certificate. Documentation about this service on Stanford campus is available at bottom of the page https://itservices.stanford.edu/service/wirelessnet/access.
  • Some Windows devices are unable to connect to eduroam because they try to use an authentication mechanism which is not supported. To alleviate this issue an eduroam wireless profile with suitable parameters can be manually created as described in this document. Then when trying to connect to eduroam wireless network you will be prompted for credentials.
    

FAQ

• I have two devices connected on SLAC’s eduroam network, can they talk to each other?
  No, all user-to-user traffic is prevented. This is a security measure in order to avoid spreading viruses, scanning etc.

• I have trouble using this service, how can I have support?
  You can contact SLAC IT helpdesk at 650 926-4357 - ithelp @ slac.stanford.edu
  You can escalate your issue to the networking team, net-admin @ slac.stanford.edu
  
  
• I can successfully connect to eduroam in my home institution but not at SLAC, what could be happening?
  If authentication is login/password based please ensure you are using the full login string <user>@domain.com and not only <user> which is only valid in user's home institution (default local domain is then preprended, but when roaming another domain might be preprended)
  
  
• My chromebook/android device is asking more parameters to connect, what are these?
  To use Stanford SUNet IDs on some devices you need to explicitly configure the authentication mechanisms. Wireless encryption is WPA2-Enterprise/AES. First authentication is PEAP and second MSCHAV2.