What is JRS / EDUROAM

EDUROAM (educational roaming) is a secure internet connection service available at participating universities around the world. The Janet Roaming Service is the UK partner of the international EDUROAM federation.

UEL staff and students are able to access network resources including the internet at many locations in the UK and beyond.

Visitors to UEL from other EDUROAM-enabled organisations will be able to access the UEL EDUROAM network using the network credentials  (username and password) of their home organisation.

When using the EDUROAM service, users are bound by the acceptable use policy of EDUROAM (Janet Roaming Policy, Janet Acceptable Use Policy and Janet Security Policy ) as well as the policies of the ‘home’ and the ‘visited’ organisation.

UEL Network polices can be found here.

How much does EDUROAM cost?

EDUROAM is completely free to end users (staff and students) and the system can be implemented for very little cost.

How does EDUROAM work?

EDUROAM works by passing authentication requests and replies between a global hierarchy of authentication servers based on the realm part of the username.

How does EDUROAM keep my password secure?

The EDUROAM infrastructure maintains secure links between trusted authentication servers which means when two servers exchange user credentials, the transmission is encrypted. For more information, please see the design reference page.

Where is EDUROAM available?

EDUROAM is available in over 70 universities and HEIs in the UK as well as many countries in Europe. For transcontinental traveling scholars, Japan, Taiwan and Australia are already on-board and many other Asian nations are joining. Canada has many participating institutions and although take up in the US has been slow it is said to be on the increase. For up-to-date EDUROAM map locations, see here for UK maps and here for world map.

At UEL, the EDUROAM wireless network is currently available at all campuses.

Who can use EDUROAM?

EDUROAM is available to staff and students at participating institutions. Not all universities around the world have an EDUROAM service yet but the service is getting more popular all the time.

How EDUROAM works?

Essentially, EDUROAM is a proxy authentication service. When your wireless device joins the EDUROAM network, you will be prompted for your username and password which must be in the following format userid@uel.ac.uk eg. u01234567@uel.ac.uk

The local EDUROAM authentication server uses the realm (whatever is to the right of the @ delimiter which in our case is uel.ac.uk) part of the username to determine that the authentication is to happen elsewhere and forwards the request up the EDUROAM hierarchy. When the home organisation receives the request, a secure tunnel is setup to protect the credentials as they are transmitted across the public internet and /or educational backbone. The home radius server then checks its user database and if the username and password are valid, responds with an access accept message. The local server can then allow you onto the visited EDUROAM network.

The important information for visitors to UEL is that we are compliant with JRS Tier 2 and we only use the WPA2/AES cipher suite as recommended by ‘EDUROAM Operations Team Admin Advisory-003’. This is configurable within your wireless hardware’s settings.

• JRS Tier - 2 [WPA2/AES]
• Network Name (SSID) - EDUROAM
• Band - 802.11a/b/g/n
• Authentication - WPA2 Enterprise
• Cipher - AES
• EAP - PEAP MS-CHAP-V2

...remember to append username with @uel.ac.uk

Why use EDUROAM?

Many staff and students use the facilities of other universities already. Whether it’s attending conferences or seminars, collaboration, strategic partnerships, use of specialist library facilities or just ease of physical access to a campus, a need for secure mobile internet access has been met by EDUROAM. The service is also completely free for end users.

“The goal of EDUROAM has been to help users from the academic community in accessing the internet while they are visiting other academic institutions.” - Tomasz Wolniewicz 2009

“When a student or professor travels to another college campus, hopping online to check e-mail or surf the Web is usually difficult. Most college networks require a local user name and password to log on, and guest accounts can be a hassle to obtain. Now a few colleges in the United States are joining a system that lets visitors log on to their networks using a login and password from another college. The system, called EDUROAM, is already popular in Europe, where more than a thousand institutions participate. In the United States, fewer than 10 institutions are members so far, but the numbers are growing.” - Mary Helen Miller Jan 2010

Getting Connected

Operating Systems

• Windows XP
• Windows Vista
• Windows 7
• Mac OS X 10.4
• Mac OS X 10.5
• Mac OS X 10.6
• Ubuntu Linux
• Fedora Linux
• Linux CLI
• Generic OS

Mobile Devices

• iPhone / iPad / iPod Touch
• Blackberry
• Windows Mobile 5

External Links

• Janet Roaming
• EDUROAM

UEL International Welcome Programme

February 2013: Welcome Programme Review

As part of your induction to UEL we run a series of events designed to help you settle in and to make new friends. If you arrived too late to attend the Orientation Programme on 29th January, it is important that you attend our Welcome Programme Review to catch up on what you missed.

The event is a condensed version of the Orientation Programme and will include important information to help you settle in and be succesful at UEL.

If you attended the Orientation but would like a refresher, you are welcome to attend.

Wednesday 20 February 2013

• 3pm - 5pm Orientation (SD 1.12, SportsDock, Docklands Campus)

• 5pm - 6.30pm Speed Friending (UELSU Lounge, Ground Floor, North Building, Docklands Campus)

The Review will include information about:

• Student discount travel
• Opening a bank account
• Employablity and Enterprise
• Study Skills and English for Academic Purposes
• Complying with your Tier 4 visa
• Personal Safety
• Support available at UEL
• Making the most of your time in the UK

After the Review you will have the opportunity to meet other new students at a 'Speed Friending' event. This is a fun way to socialise and meet as many new people as you can!

We look forward to seeing you there!

UEL International

Page last updated 06/02/2013

Using Enduroam at UEL

UEL network account holders - staff and students

We advise UEL staff and students to only use EDUROAM at UEL for testing purposes i.e. test that EDUROAM works for you here before leaving to use EDUROAM elsewhere. If nothing else, IT Services would be able to provide better support if you are here on campus at UEL. If you need wireless access to internal resources then please join the UEL wireless LAN

When connected to EDUROAM at UEL, the connection is filtered to allow only the IP services specified in the Janet Roaming Technical Specification. For internal resource access, EDUROAM users will be able to access UEL Webmail / Active Sync as well as the UEL website.

Visitors to UEL from EDUROAM-enabled institutions

Ensure your wireless adapter is set to WPA2 Enterprise Mode with AES

All Users - IP Forwarding / Filtering

If you successfully authenticate to the EDUROAM wlan at UEL, you will be assigned an IP address in the range 161.76.64.10 - 161.76.71.254

For a complete, up-to-date list of permitted protocols, please see JRS Tech Spec. Section 4.5

The list covers most of the applications users are likely to need including Remote Access VPN, Email, Web browsing.

Visited organisations MAY implement IPv4 and IPv6 filtering between the visitor network and other external networks, providing that this permits the forwarding of the following mandatory protocols.

41.1.  IPv6 Tunnel Broker NAT traversal: UDP/3653;TCP/3653 egress and established.
41.2.  IPSec NAT traversal: UDP/4500 egress and established.
41.3.  Cisco IPSec NAT traversal: UDP/10000; TCP/10000 egress and established.
41.4.  PPTP: IP protocol 47 (GRE) egress and established; TCP/1723 egress and established.
41.5.  OpenVPN: UDP/1194; TCP/1194 egress and established.
41.6.  NTP: UDP/123 egress and established
41.7.  SSH: TCP/22 egress and established.
41.8.  HTTP: TCP/80 egress and established.
41.9.  HTTPS: TCP/443 egress and established.
41.10.  LDAP: TCP/389 egress and established.
41.11.  LDAPS: TCP/636 egress and established.
41.12.  IMSP: TCP/406 egress and established.
41.13.  IMAP4: TCP/143 egress and established.
41.14.  IMAP3: TCP/220 egress and established.
41.15.  IMAPS: TCP/993 egress and established.
41.16.  POP: TCP/110 egress and established.
41.17.  POP3S: TCP/995 egress and established.
41.18.  Passive (S)FTP: TCP/21 egress and established.
41.19.  SMTPS: TCP/465 egress and established.
41.20.  Message submission: TCP/587 egress and established.
41.21.  RDP: TCP/3389 egress and established.
41.22.  VNC: TCP/5900 egress and established.
41.23.  Citrix: TCP/1494 egress and established.
41.24.  AFS: UDP/7000 through UDP/7007 inclusive egress and established.