You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

Internetstiftelsen is moving the eduroam service to a new operating environment. Our new proxy servers, r5 and r6, will replace r3 and r4. This page describes the changes existing customers need to make to their RADIUS servers and firewalls.

We will use the connection details and configuration we already have for your organisation. Update your environment for our new servers as described below.

Complete the changes by November 30, 2026. The old environment will be shut down after this date.

What you need to do

  1. Configure connections to both r5 and r6 using the instructions for your connection type.

  2. Confirm to us when the changes are complete.

If an external provider manages your eduroam connection, forward this information to the team responsible for your RADIUS servers and firewalls.

New servers

ServerIPv4IPv6
r5.eduroam.skolfederation.se46.21.103.1412a02:750:20:e::e
r6.eduroam.skolfederation.se37.152.61.1542a02:750:21:6::6

Configure connections to both servers. Use the same ports and traffic directions as for your existing connections to r3 and r4. We will configure our new environment accordingly.

RADIUS over UDP

Firewall

Use your existing firewall rules for r3 and r4 as a starting point and adapt them for r5 and r6 using the new server addresses. Keep the same protocols, ports and traffic directions.

RADIUS configuration

Use your existing RADIUS configuration for r3 and r4 as a starting point and adapt it for r5 and r6 using the new server addresses. Keep the same ports for incoming and outgoing traffic.

Use your existing shared secret for the corresponding connection to r5 and r6. We will reuse the configuration we already have for your connection.

RadSec

Connections and firewall

Use your existing RadSec configuration for r3 and r4 as a starting point and adapt it for r5 and r6 using the new server addresses. Keep the same ports.

Also adapt your existing firewall rules for the new server addresses. Keep the same protocols, ports and traffic directions.

Certificate

Add the new certificate we provide for r5 and r6 to your RadSec configuration.

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Confirmation

Confirm to us when you have completed the changes so that we can follow up on the migration and check that everything is working.

Contact

If anything is unclear or you need help with the changes, please contact us at info@skolfederation.se

Technical background

Skolfederation’s eduroam connection guide describes the organisations’ roles and how authentication requests are forwarded through Skolfederation and SUNET.

RFC 6614 describes RadSec transport over TLS and authentication between servers.

  • No labels