Wireless - Eduroam - Information Technology Services (ITS)

Eduroam at USP

Eduroam is short for “education roaming”.
eduroam is a global service enabling staff and students of educational, research and related institutions to visit another eduroam participating institution and connect to the visited institution’s wireless network automatically, i.e. with minimal effort for both user and visited institution.

Eduroam infrastructure provided by USP, AARNet and global participants enables a USP visitor’s ‘home institution’ to authenticate the visitor remotely. Upon successful authentication, USP grants wireless network access to the visitor. Other eduroam participating institutions similarly grant network access to visiting users from USP.

If configured correctly, eduroam users should be able to get a network connection at a visited institution just by opening their laptop or activating their phone or tablet device.

More about eduroam is available from AARNet, the eduroam AU ‘roaming operator’.

Eduroam Coverage – Laucala

All services as available through the local LAN is now also available through the wireless services, though the student wireless would have the same restrictions as the machines in the labs.

For assistance please contact the Helpdesk.

There are some requirements that are needed by end user devices before connecting to the University Wireless Service:

All Windows & MacOS Laptops must support WPA2 Enterprise and AES Data Encryption.
All Windows & MacOS Laptops must have a valid Anti-Virus & Spyware Application.
All Windows & MacOS Laptops must have the latest Service Packs & Security Patches.

The above requirements ensures that all user experience of the service is not impeded or disrupted. Below are the wireless signals (SSID) that eduroam users can connect to while at the University.

SSID (Network Name): eduroam (case-sensitive)
Wireless Network Connection Protocol: WPA2 Enterprise
Data Encryption Method: AES

All service availability will be subject to the policies and guideline for The University of the South Pacific.

For more details, please refer to our USP Policy Library.

USP users should configure eduroam authentication locally (i.e. while on USP campus) and confirm successful authentication by USP eduroam infrastructure before travelling to other eduroam participating institutions.

Authentication Configuration
The following authentication parameters apply for authentication of USP staff via eduroam (below assumes the realm is usp.ac.fj):

Security	WPA2-Enterprise
Encryption	AES
EAP Method	PEAP
Inner Method	MSCHAPV2
Identity	<USP username>@usp.ac.fj
Anonymous Identity	Do not configure an anonymous identity
CA Certificate	Will auto-detect

User Device Configuration

Device configuration guidelines are provided via the following links:

Windows 8 and Above
Mac OSX
Linux
iOS mobile devices (iPhone)
Android mobile devices

(Note, instead of above guidelines, configuration scripts may be available via the eduroam “Configuration Assistance Tool”. Please check with AARNet).

Who can use eduroam at USP?
Eduroam is available to general staff, academics, researchers and students from eduroam participating educational, research and related institutions globally.
How do I use eduroam at USP?

Note: as an eduroam user, you should have already configured access to eduroam while on your home campus, using the authentication parameters provided by your home institution local eduroam webpage.

The wireless encryption protocol used by USP access points is the Wi-Fi standard “WPA2/AES” (also called WPA2 Enterprise). Accessing eduroam successfully within USP requires only that your device’s configured wireless network connection and encryption protocol is compatible. Due to near-ubiquity of “WPA2/AES” support by institutional wireless access points, it is pretty much guaranteed that your wireless connection will be configured correctly if you’ve already tested your eduroam authentication on your own campus.

Note: There is no need to change any of your authentication parameters. These are only relevant to your home institution. If you have successfully configured authentication to eduroam at your home institution, you should be able to access USP campus’s network via eduroam with no change to your setup.

Where exactly can I use eduroam within USP?
USP provides eduroam at the following locations:

eduroam coverage map for USP

Network Services Provided
USP provides full outbound access with NAT’ed IP addresses. In other words, you can access any services you normally do e.g. the Internet, your institution via VPN etc. However any servers running on your devices will not be accessible externally while connected to the USP network.

How do I get support in using eduroam?
When you’re on a USP campus and connect to eduroam, due to relative complexity of wireless and eduroam infrastructures, you may experience difficulty in getting a network connection due to several reasons e.g. an issue with your device configuration, wireless networking, institutional eduroam operability or eduroam infrastructure operability.

If network access issues occur, in the first instance eduroam users should contact their home institution’s IT helpdesk to seek support.

If this is not possible, or if the home institution can’t resolve the issue, visiting users may contact the USP IT support (phone, email).

If required, your home institution’s or USP eduroam support staff will contact AARNet, the eduroam AU national roaming operator, for additional assistance.

What Usage Logs are kept by USP and what are they used for?

The eduroam trust model (between institutions remotely authenticating their users, and other institutions providing network access, via eduroam) is supported by the ability to trace a particular network access event to an authentication of a ‘real user’ by their home institution.

Home institutions agree to take appropriate action on behalf of visited institutions in case a user doesn’t comply with the home institution’s network AUP.

In order to provide this traceability, remote authentication and network access transactions via eduroam are logged by USP, with logs being retained for a period of six months. Access to usage logs is restricted to authorised personnel and authorities as required by the law.

Usage logs may also be used for purposes of service trouble-shooting and user support.