Govroam

The Roaming solution for the public sector

User Tools

Site Tools


jisc:fourth_nrps

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
jisc:fourth_nrps [2018/05/17 08:43] adminjisc:fourth_nrps [2018/07/10 07:25] (current) – [Home (fully boarded) sites:] admin
Line 13: Line 13:
 **Note: Only RADIUS servers (RRPS if you're a Federations, ORPS is connecting individually) directly connected to Jisc are affected by this change.** **Note: Only RADIUS servers (RRPS if you're a Federations, ORPS is connecting individually) directly connected to Jisc are affected by this change.**
 ===Plan=== ===Plan===
-It is expected that the connected sites add th new configuration on, or before the Go-Live date. Depending on the site, their software and their policy each site will decide whether to configure the new NRPS in advance of the date or on the date i.e. if it's not feasible to add the configuration in such a way that it's resident but inactive then configuring on the day is the alternative.+It is expected that the connected sites add their new configuration on, or before the Go-Live date. Depending on the site, their software and their policy each site will decide whether to configure the new NRPS in advance of the date or on the date i.e. if it's not feasible to add the configuration in such a way that it's resident but inactive then configuring on the day is the alternative.
 ===Method==== ===Method====
 Jisc will communicate with each connected site (RFO or individually connected organisation) and supply them with the appropriate details (additional shared secrets and the address of the fourth NRPS) to be added to their RRPS or ORPS.  Jisc will communicate with each connected site (RFO or individually connected organisation) and supply them with the appropriate details (additional shared secrets and the address of the fourth NRPS) to be added to their RRPS or ORPS. 
Line 22: Line 22:
 b) to wait until the Go-Live date and time and do it then. b) to wait until the Go-Live date and time and do it then.
  
-The Fourth NRPS will be live for the duration so that sites can test their configuration, set up any monitoring etc. but, and this point can not be over-stressed, any live authentication requests to that NRPS before the Go-Live date are likely to return a Reject, rendering the user unable to connect. +The Fourth NRPS will be live for the duration so that sites can test their configuration, set up any monitoring etc. but, and this point can not be over-stressed, **any live authentication requests to that NRPS before the Go-Live date are likely to return a Reject**, rendering the user unable to connect. 
  
 +Testing of your local accounts can be done through [[https://utilities.govroam.uk/cgi-bin/radius_test.pl|RADIUS EAP Tester]]
 ==== Visited Only sites:==== ==== Visited Only sites:====
  
 Because Visited Only sites are only sending authentication requests to the NRPS you should wait until after the Go-Live date, when all the receiving (Home) sites are live, before applying your new configuration.  Because Visited Only sites are only sending authentication requests to the NRPS you should wait until after the Go-Live date, when all the receiving (Home) sites are live, before applying your new configuration. 
  
 +====Questions?====
  
 +Please contact <govroam@jisc.ac.uk> if you have any questions.
jisc/fourth_nrps.1526546589.txt.gz · Last modified: 2018/05/17 08:43 by admin