PacketFence for eduroam
ContentsIntroduction ......................................................................................................................................................................1
Configuration ....................................................................................................................................................................2
Policies and Access Control ..........................................................................................................................................2
Roles .........................................................................................................................................................................2
Domains ....................................................................................................................................................................2
Authentication Sources ............................................................................................................................................6
Network Devices .....................................................................................................................................................10
Connection Profiles.................................................................................................................................................13
System Configuration .................................................................................................................................................15
SSL Certificates > RADIUS tab .................................................................................................................................15
TLS profiles (Optional) ............................................................................................................................................15
Status ..............................................................................................................................................................................16
Services .......................................................................................................................................................................16
Testing ............................................................................................................................................................................16

Introduction
PacketFence is a feature-rich open-source network access control system. It can also be used as a RADIUS server foreduroam. The following instructions are designed to complement the official PacketFence documentation
https://www.packetfence.org/doc/PacketFence_Installation_Guide.html.
Community support is offered through mailing lists and high-quality commercial support is also available.
This guide assumes that you have already installed PacketFence and run through the initial configuration, which
includes setting the PacketFence server IP address and admin password.

This document courtesy of Dale Lloyd, Oxford Centre of Islamic Studies

Configuration
Policies and Access ControlRoles
Click New Role
Name: eduroam

Click Create

Domains
Active Directory Domains
Click New Domain

Fill in the details then click Create

After clicking Create, near the top left of the webpage, you will see a join failed message. Click on it, click Join thenprovide the appropriate credentials to join the PacketFence server to the Active Directory domain.

You should then see Join success

RealmsClick New Realm
On the General tab, type the realmOn the NTLM Auth tab, set the domain to the one created earlierOn the Stripping tab, turn off Strip in RADIUS authorization

Click Create

Authentication Sources
Internal Sources
Click New internal source > RADIUS

Do the same for roaming1.ja.net and roaming2.ja.net
Click New internal source > Active Directory

You should now have the following listed under Internal Sources:

Exclusive Sources
New exclusive source > Eduroam

Network Devices
Switch Groups
Create a Switch Group for your access points

Switches
Create a switch using an IP address or range, linked to the switch group that you just created.

Connection Profiles
Eduroam for internal members

Eduroam for visitors

System Configuration
SSL Certificates > RADIUS tab
Create the appropriate RADIUS certificates and place them here.

TLS profiles (Optional)
If you wish to accept connections from outdated operating systems, lower the TLS minimum version

StatusServices
Start and enable the radiusd-eduroam service. I suggest restarting the PacketFence server at this point to ensurethat all services are started with the current configuration.

Testing
You should now be able to use PacketFence to connect to eduroam. Look at the Auditing tab to see connection
requests and actions.