Govroam

The Roaming solution for the public sector

User Tools

Site Tools


public:faq

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
public:faq [2019/08/20 12:55]
admin [Technical]
public:faq [2020/08/03 10:31]
admin [Onboarding]
Line 7: Line 7:
 A: Contact <govroam@jisc.ac.uk> and you'll be sent all the appropriate documentation for joining. A: Contact <govroam@jisc.ac.uk> and you'll be sent all the appropriate documentation for joining.
  
-The {{ :public:20180815_full_boarding_v3.0_gov011.docx |full boarding form}}  needs filling out completely. It asks for contact information, information about your RADIUS servers and various other pieces of information. The form refers to a {{ :public:federationregistry.xls |Registry}} document - if you're joining as a Federation, please fill that in too. Send them to <govroam@jisc.ac.uk>.+The {{ :public:20191115_full_boarding_v5.0_gov011.docx |full boarding form}} needs filling out completely. It asks for contact information, information about your RADIUS servers and various other pieces of information. The form refers to a {{ :public:federationregistry.xls |Registry}} document - if you're joining as a Federation, please fill that in too. Send them to <govroam@jisc.ac.uk>.
  
 Once we have properly completed forms then we'll sort out the appropriate payments, shared secrets for RADIUS servers, access to the CAT, the Govroam App, subscribe you to the support mailing lists and add your support details to our Support Matrix. Once we have properly completed forms then we'll sort out the appropriate payments, shared secrets for RADIUS servers, access to the CAT, the Govroam App, subscribe you to the support mailing lists and add your support details to our Support Matrix.
Line 15: Line 15:
 A: Contact <govroam@jisc.ac.uk> and you'll be sent all the appropriate documentation for joining. A: Contact <govroam@jisc.ac.uk> and you'll be sent all the appropriate documentation for joining.
  
-The {{ :public:20180820_visited_boarding_v3.0_gov012.docx |Visited Only Boarding form}} needs filling out completely. It asks for contact information, information about your RADIUS servers and for a letter of consent, on corporate headed paper, from someone senior e.g:+The {{ :public:20191115_visited_boarding_v4.0_gov012.docx | Visited Only boarding form}} needs filling out completely. It asks for contact information, information about your RADIUS servers and for a letter of consent, on corporate headed paper, from someone senior e.g:
  
 <code> <code>
Line 38: Line 38:
  
   - Take your existing eduroam configuration, duplicate the part of it related to visitors, change the 'eduroam' bits to 'govroam'. So that should cover the SSID, 802.1x setting on your wireless controllers, a VLAN to put the visitors on, an address range for them, firewall settings (same as eduroam). Then the RADIUS config should be able to send unknown realms to our NRPS.    - Take your existing eduroam configuration, duplicate the part of it related to visitors, change the 'eduroam' bits to 'govroam'. So that should cover the SSID, 802.1x setting on your wireless controllers, a VLAN to put the visitors on, an address range for them, firewall settings (same as eduroam). Then the RADIUS config should be able to send unknown realms to our NRPS. 
-  - Download the {{ :public:20180820_visited_boarding_v3.0_gov012.docx |Visited Only Boarding form}}, fill it out and send it back to <govroam@jisc.ac.uk>.+  - Download the {{ :public:20191115_visited_boarding_v4.0_gov012.docx | Visited Only boarding form}}, fill it out and send it back to <govroam@jisc.ac.uk>.
   - Have your Director of IT (or someone suitably senior) write a brief letter of authorisation, on corporate headed paper, along the lines of   - Have your Director of IT (or someone suitably senior) write a brief letter of authorisation, on corporate headed paper, along the lines of
 <code> <code>
Line 108: Line 108:
 A: Following on from the above question: between zero and a lot. If you have a spare piece of hardware, or can create a VM at no cost then installing a linux variant and FreeRADIUS would cost nothing. As would adding the ORPS capability to an existing RADIUS configuration. If you have to buy hardware then £500-1000 should cover the cost of a suitable Dell server. If you want to purchase RADIUS software such as Clearpass then you'll have to talk to a reseller as the licences can be complex. Even a reasonably sized hospital ought to be able have something for under £5,000 though. The final costs with depend on a number of factors which are site specific.  A: Following on from the above question: between zero and a lot. If you have a spare piece of hardware, or can create a VM at no cost then installing a linux variant and FreeRADIUS would cost nothing. As would adding the ORPS capability to an existing RADIUS configuration. If you have to buy hardware then £500-1000 should cover the cost of a suitable Dell server. If you want to purchase RADIUS software such as Clearpass then you'll have to talk to a reseller as the licences can be complex. Even a reasonably sized hospital ought to be able have something for under £5,000 though. The final costs with depend on a number of factors which are site specific. 
  
-==Q: What do I do with users once they're authenticated?===+===Q: What do I do with users once they're authenticated?===
  
 A: You can make this as simple or as complex as you wish. There is a minimum service level associated with govroam but it's not particularly restrictive. At the simplest level govroam Visitors to your site need a network segment separate from other users, a basic set of open ports (such as web and VPN) and some bandwidth.  A: You can make this as simple or as complex as you wish. There is a minimum service level associated with govroam but it's not particularly restrictive. At the simplest level govroam Visitors to your site need a network segment separate from other users, a basic set of open ports (such as web and VPN) and some bandwidth. 
Line 165: Line 165:
   - The site is provided with a login to Jisc's App site so that they can populate Govroam locations on a map.   - The site is provided with a login to Jisc's App site so that they can populate Govroam locations on a map.
  
-This {{ :public:federationregistry.xls |spreadsheet}} can be used as a template for the information that should be collected for sending to Jisc.+This {{ :public:federationregistry.xls |spreadsheet}} can be used as a template for the information that should be collected for sending to Jisc: (<govroam@jisc.ac.uk>). Use RED to indicate information to be removed, YELLOW for changes, and GREEN for new additions. 
 + 
 +===Q: How do I unpack the file sent?=== 
 + 
 +A: Follow these instructions: [[Unpacking .tar.gpg.zip file]] 
 + 
public/faq.txt · Last modified: 2023/06/22 08:43 by emily_sadler