Problem setting eduroam

Stefan Paetow Stefan.Paetow at
Wed Feb 8 13:33:15 CET 2017

>I have some problems setting up eduroam. I am in charge of CS department
>inside my university.

Are you in charge of the eduroam servers of your university? It sounds
like you aren't?

>CS department network and university network are not connected,
>futhermore they both refer to the national eduroam gateway for
>authentication (for historical reason, there is no hierarchy).

That sounds like whoever is in charge of your CS network treats any
authentications that come in from the national proxy as visitors and hence
they are not allowed on to your CS network.

>How can I check why I cannot authenticate? It could be 2 reasons:
>- I do not proxy properly to the national eduroam gateway
>- my university side of eduroam is not receiving/answering to the
>authenication requests coming from upper level.

>I have no credential outside of my CS department and university that I
>can use for testing.

Given that both university and CS networks refer to the national proxy,
that should be enough. Use eapol_test (read to do a test
authentication to your CS-level eduroam server, and see what response you
get. If you get an access-accept, it means that authentication *does*
succeed at your university-level eduroam server.

I would suggest running your CS-level eduroam server in debug mode for
this, so that you can see what happens. If you get an access-reject
returned from the proxy (the national level one), then yes, have a word
with the person in charge of your university-level eduroam server to check.


Stefan Paetow
Moonshot Industry & Research Liaison Coordinator

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp at
skype: stefan.paetow.janet

Jisc is a registered charity (number 1149740) and a company limited by
guarantee which is registered in England under Company No. 5747339, VAT
No. GB 197 0632 86. JiscĀ¹s registered office is: One Castlepark, Tower
Hill, Bristol, BS2 0JA. T 0203 697 5800.


More information about the Freeradius-Users mailing list