Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
public:faq [2019/03/19 19:06]
admin [Q: We're a public sector organisation and would like to join Govroam, what are the next steps?]
public:faq [2019/09/06 07:40] (current)
admin [Technical]
Line 7: Line 7:
 A: Contact <​govroam@jisc.ac.uk>​ and you'll be sent all the appropriate documentation for joining. A: Contact <​govroam@jisc.ac.uk>​ and you'll be sent all the appropriate documentation for joining.
  
-The [[https://www.jisc.ac.uk/​forms/​apply-for-full-boarding-of-govroam|full boarding form]] needs filling out completely. It asks for contact information,​ information about your RADIUS servers and various other pieces of information. The form refers to a {{ :​public:​federationregistry.xls |Registry}} document - if you're joining as a Federation, please fill that in too. Send them to <​govroam@jisc.ac.uk>​.+The {{ :public:​20180815_full_boarding_v3.0_gov011.docx |full boarding form}}  ​needs filling out completely. It asks for contact information,​ information about your RADIUS servers and various other pieces of information. The form refers to a {{ :​public:​federationregistry.xls |Registry}} document - if you're joining as a Federation, please fill that in too. Send them to <​govroam@jisc.ac.uk>​.
  
 Once we have properly completed forms then we'll sort out the appropriate payments, shared secrets for RADIUS servers, access to the CAT, the Govroam App, subscribe you to the support mailing lists and add your support details to our Support Matrix. Once we have properly completed forms then we'll sort out the appropriate payments, shared secrets for RADIUS servers, access to the CAT, the Govroam App, subscribe you to the support mailing lists and add your support details to our Support Matrix.
Line 63: Line 63:
 ===Q: What's the relationship between Govroam and eduroam? Do I need one to have the other or do I have to have both?=== ===Q: What's the relationship between Govroam and eduroam? Do I need one to have the other or do I have to have both?===
  
-A: They'​re very closely related but they aren't the same and there are no dependencies either way. eduroam has been around for years in the academic sector and is mature. Govroam uses exactly the same idea and technology but is aimed at NHS, Local Government and other public sectors. JISC runs the top level RADIUS servers for both services but they are completely separate.+A: They'​re very closely related but they aren't the same and there are no dependencies either way. eduroam has been around for years in the academic sector and is mature. Govroam uses exactly the same idea and technology but is aimed at NHS, Local Government and other public sectors. JISC runs the top level RADIUS servers for both services but they are completely separate ​services.
  
 Thus it's possible to have neither, either or both.  Thus it's possible to have neither, either or both. 
  
-If you already run eduroam (i.e. a University) then adding Govroam is easy (and free). Essentially you need to duplicate your wireless and RADIUS configurations and request the shared secret details from JISC. +If you already run eduroam (i.e. a University) then adding Govroam is easy (and free). Essentially you need to duplicate your wireless and RADIUS configurations and request the shared secret details from JISC. This may require separate infrastructure (normally different RADIUS server VMs) or could be done on shared systems.  
 + 
 +It's not possible for people with eduroam accounts to authenticate using Govroam, or vice versa. We encourage sites with eduroam to run Govroam Visited Only and Govroam sites to to eduroam Visited Only, for maximum coverage.
  
 ===Q: Which should I have?=== ===Q: Which should I have?===
Line 106: Line 108:
 A: Following on from the above question: between zero and a lot. If you have a spare piece of hardware, or can create a VM at no cost then installing a linux variant and FreeRADIUS would cost nothing. As would adding the ORPS capability to an existing RADIUS configuration. If you have to buy hardware then £500-1000 should cover the cost of a suitable Dell server. If you want to purchase RADIUS software such as Clearpass then you'll have to talk to a reseller as the licences can be complex. Even a reasonably sized hospital ought to be able have something for under £5,000 though. The final costs with depend on a number of factors which are site specific. ​ A: Following on from the above question: between zero and a lot. If you have a spare piece of hardware, or can create a VM at no cost then installing a linux variant and FreeRADIUS would cost nothing. As would adding the ORPS capability to an existing RADIUS configuration. If you have to buy hardware then £500-1000 should cover the cost of a suitable Dell server. If you want to purchase RADIUS software such as Clearpass then you'll have to talk to a reseller as the licences can be complex. Even a reasonably sized hospital ought to be able have something for under £5,000 though. The final costs with depend on a number of factors which are site specific. ​
  
-==Q: What do I do with users once they'​re authenticated?​===+===Q: What do I do with users once they'​re authenticated?​===
  
 A: You can make this as simple or as complex as you wish. There is a minimum service level associated with govroam but it's not particularly restrictive. At the simplest level govroam Visitors to your site need a network segment separate from other users, a basic set of open ports (such as web and VPN) and some bandwidth. ​ A: You can make this as simple or as complex as you wish. There is a minimum service level associated with govroam but it's not particularly restrictive. At the simplest level govroam Visitors to your site need a network segment separate from other users, a basic set of open ports (such as web and VPN) and some bandwidth. ​