̽»¨ÊÓƵ

Eduroam

What is eduroam?

eduroam is short for "education roaming". eduroam is a global service enabling staff and students of educational, research and related institutions to visit another eduroam participating institution and connect to the visited institution's wireless network automatically, i.e. with minimal effort for both user and visited institution.

Eduroam infrastructure provided by The SYDNEY HIGH SCHOOL FOUNDATION, AARNet and global NRENs enables a visitor's 'home institution' to authenticate the visitor remotely. Upon successful authentication, The SYDNEY HIGH SCHOOL FOUNDATION grants wireless network access to visitors authenticated via eduroam.

We provide eduroam access in the Sydney Boys High UTS Gymnasium. If configured correctly, an eduroam user can connect just by opening their laptop or activating their phone or tablet device.

is available from AARNet, the eduroam AU ‘national roaming operator’.

eduroam Policy

Trust in eduroam authentication is underpinned by use of a proven secure technical infrastructure and protocol, and a set of policies to which all eduroam participants are required to comply. In participating in eduroam AU, we conform to the and the eduroam AU policy maintained by AARNet.

What is the user's responsibility in using eduroam?
The eduroam AU policy states that users must conform to their home institution's network Acceptable Use Policy. (AUP). However visitors must also comply with our AUP, below.

What about user privacy?
When using eduroam, the eduroam protocol prevents your institutional password from being revealed to any eduroam server other than your home institution’s eduroam server. Your login password is protected and remains secret between your connecting device and your home institution.

However, your username is visible to us and to and other eduroam infrastructure servers involved in routing your authentication request from your device to your home institution, and will be captured in logs. We, and the entire eduroam AU national infrastructure, protect these logs from unauthorised access.

Wireless Settings

SSID (Network Name)	eduroam
Wired Network Connection Protocol	WPA2 Eneterprise
Data Encryption Method	AES

Using eduroam

Who can use eduroam?
eduroam access is available to visitors who are configured to be remotely authenticated by their home institution via the eduroam global infrastructure.

Users are strongly advised to have confirmed their eduroam authentication at their home institution, prior to visiting.

How do I use eduroam?
Note: as an eduroam user, you should have already configured access to eduroam while on your home campus, using the authentication parameters provided by your home institution local eduroam webpage.

The wireless encryption protocol required by eduroam access points is WPA2/AES (also called WPA2 Enterprise). Global eduroam policy requires use of WPA2/AES, hence your wireless connection will work correctly if you’ve already tested your eduroam authentication on your own campus.

Where can I use eduroam?
On the Sydney Boys High School, Moore Park Campus, we prodide eduroam access within the Sydney Boys High UTS Gymnasium.

Network Services Provided

We provide outbound access with NAT’ed IP addresses. In other words, you can access any services you normally do e.g. the Internet, your institution via VPN etc. However, any servers running on your devices will not be accessible externally while connected to eduroam on our site.

As a NSW secondary school we have special additional considerations in keeping our staff and students safe online compared to most tertiary institutions. You may find the categories of website that you can access are restricted - for example gambling, weapons, download services - as well as server endpoints which are overseas and/or do not have a known safe reputation. If trying to access such sites, you will typically receive a 'Connection Reset' error.

How do I get support in using eduroam?
When you're on our site and connect to eduroam, due to relative complexity of wireless and eduroam infrastructures, you may have issues in getting a network connection due to several reasons e.g. recent change of password, changed device configuration, overlapping eduroam wireless network, our eduroam infrastructure operability or national/global eduroam infrastructure operability.

If network access issues occur, in the first instance eduroam users should contact their home institution's IT helpdesk to seek support. If this is not possible, or if the home institution can’t resolve the issue, visiting users may seek support at the Sydney Boys High School ICT Support Centre during operating hours.

If required, your home institution's or our eduroam support staff will contact AARNet, the eduroam AU national roaming operator, for additional assistance.

What Usage Logs are kept and what are they used for?
The eduroam trust model (between institutions remotely authenticating their users, and other institutions providing network access, via eduroam) is supported by the ability to trace a particular network access event to an authentication of the user by their home institution.

Home institutions must take appropriate action on behalf of visited institutions in case a user doesn’t comply with the home institution’s network AUP. In order to provide this traceability, remote authentication and network access transactions via eduroam are logged, with logs being retained for a period of three months. Access to usage logs is restricted to authorised personnel and authorities as required by the law.

Usage logs may also be used for purposes of service trouble-shooting and user support.

 

Eduroam Acceptable Use Policy

References:

• ̽»¨ÊÓƵ Foundation privacy policy

Policy:

Network Access

• Network access is provided at the discretion of the ̽»¨ÊÓƵ Foundation and Sydney Boys High School and notwithstanding the provisions of this acceptable use policy, may be restricted or removed without cause or reason.
• Access to Eduroam services is provided to persons with membership of an Eduroam-affiliate home institution, aged 18 or over or with parental consent to use the service.
• Access to internet services via Eduroam may be filtered or otherwise restricted for any reason.
• Users accept that the Eduroam service is provided as-is and no representation as to service availability, quality or adequacy is made.
• Users make use of the Eduroam service at their own risk.

Responsibilities

• Eduroam users must adhere to their home institution acceptable use policy in addition to that of this service.
• Users will ensure that their use of the service is connected to their learning or role at their home institution.
• Users must only access the service using their individual login credentials of their home institution and not provide these credentials to other persons or use these credentials with devices not under their personal control.
• Users will not use the service to transmit, publish or communicate:
  • a message that was sent to them in confidence.
  • a computer virus or attachment that is capable of damaging recipients’ computers.
  • chain letters and hoax emails.
  • spam, e.g. unsolicited advertising material.
  • unacceptable or unlawful material or remarks, including offensive, abusive or discriminatory comments, threatening, bullying or harassing another person or making excessive or unreasonable demands upon another person.
  • sexually explicit or sexually suggestive material or correspondence.
  • false or defamatory information about a person or organisation.
• Users will not use the service to:
  • download software, graphics, music or other material that is unauthorised or otherwise infringe another person’s or organisation’s intellectual property rights
  • attempt to gain unauthorised access to computer systems, services or equipment of any person or organisation, including of the ̽»¨ÊÓƵ Foundation or Sydney Boys High School
  • facilitate unauthorised commercial activities, political lobbying, online gambling or any unlawful purpose.
  • make any hoax call, including calls to an emergency service
  • violate or infringe any duty or obligation owed to any person under law

Privacy and Monitoring

• Usage of the Eduroam service constitutes consent to monitoring in accordance with this policy.
• All use of the service will be logged. The service may log any metadata or data transmitted through it. The service will log usage information including user and device identifiers, protocols used and sites visited for a period of no less than 90 days. This material may be monitored by authorised persons for any purpose.
• No representations as to security or integrity of the service are made. Users should consider the confidentiality of the material they intend to transmit when choosing to use the service.