JANET eduroam

JANET Roaming Service

Eduroam LogoJANET Roaming enables the use of wireless networks at participating institutions, a full list is available on the JANET Roaming Website.

Contents

 

News

17/09/13

Automatic configuration tool for eduroam, download at:

https://cat.eduroam.org/?idp=289&profile=418

Windows 7, Windows 8, Mac OS (Lion and Mountain Lion) and iOS and Linux are all now supported by eduroam and setup guides are available on the right hand side of this page.

21/03/2013

Support for Kindle Fire now available, see link on right hand side menu or Click Here.

23/02/2012

New eduroam App for Apple mobile device available from Apple iTunes for free, search for eduroam Companion. Eduroam users can now more easily locate eduroam-enabled sites thanks to a new app for the iPhone and iPad. The app 'eduroam companion' helps users to locate their nearest eduroam point by visualising the central database of eduroam-enabled facilities on a map and provides information that the user will need in order to connect to the service. more...

Introduction

Eduroam is an international initiative that allows members of educational establishments to gain internet access at other member sites easily, using credentials from their home site in a secure manner. Authentication details (username/password) are configured into the user's computer and tested at the home site before departure. These details are used automatically at the destination site when the computer discovers the Eduroam network is available (usually via a wireless network SSID called 'eduroam'). The JANET Roaming Service (JRS) http://www.eduroam.org  is part of eduroam

Terms & Conditions

In order to use the service you will be required to agree to the Terms & Conditions set out in the Liverpool John Moores University Acceptable Use Policy and the JANET Roaming Policy

Availability

The JANET Roaming service can be accessed from the following locations. Directions to LJMU can be found on our website.

Janet Roaming Services (JRS) at Liverpool John Moores University

Planning and Information supports the folowing 'Janet Roaming' services' (JRS):

  • JRS 3 - eduroam - secure log-on for general browsing and access that requires security e.g. email.

Visitors to Liverpool John Moores University

The University Planning and Information offers Eduroam (JANET Roaming Service) at JRS 3, supporting WPA2 AES with public IP addresses and no IPv6 support . As per JANET Roaming Service we support the following outbound protocols through the university firewall:

  • IPv6 Tunnel Broker NAT traversal: UDP/3653 and TCP/3653
  • IPSec NAT traversal: UDP/4500
  • Cisco IPSec NAT traversal: TCP/10000
  • PPTP: IP protocol 47 (GRE); TCP/1723
  • OpenVPN: TCP/5000
  • SSH: TCP/22
  • HTTP: TCP/80
  • HTTPS: TCP/443
  • LDAP: TCP/389
  • LDAPS: TCP/636
  • IMSP: TCP/406
  • IMAP4: TCP/143
  • IMAP3: TCP/220
  • IMAPS: TCP/993
  • POP: TCP/110
  • POP3S: TCP/995
  • Passive (S)FTP: TCP/21
  • SMTPS: TCP/465
  • Message submission: TCP/587
  • RDP: TCP/3389
  • VNC: TCP/5900
  • Citrix: TCP/1494

All inbound ports are blocked.

Visitors need to make sure that they arrive with their wireless configuration set up (or that they can do so by contacting their home institution). Note that you are bound by your home organisation’s AUP (Acceptable Use Policy), the JANET AUP and ours, and that breach of the AUP could result in disciplinary procedures at your home site.

Liverpool John Moores University Users

Eduroam will provide you with wireless Internet access. When you are in LJMU you connect to  eduroam.

When you are away from LJMU, and at a site that also participates in eduroam, you will be able to connect to their eduroam service using your LJMU eduroam credentials. This means you will be able to access services via our Off Campus Applications Service.

Most sites participating in eduroam use the eduroam network name. If you go to a site that does not you should follow local instructions to connect to the correct service.

*** PLEASE NOTE - Some staff have reportedly had problems logging in from partner institutions, if you are having problems make sure you enter your LJMU Username followed by in the username field e.g. ITSJBLOG@ljmu.ac.uk followed by your current university password in the password field. ***

Note that when you use eduroam at another organisation you are bound by our AUP, the JANET AUP and the AUP of the organisation you are visiting. Breach of AUP could result in disciplinary procedures.

Before you leave LJMU

You can check whether the institution you are visiting participates in eduroam.

Make sure you have configured, and checked, your system. Configuration notes are currently available for a number of platforms.

JANET(UK) has signed up to a new TERENA contract for server certificates. This means that the Comodo AddTrust External CA Root certificate is currently needed for the eduroam service.

Janet Roaming Service documentation and configuration instructions

The main JRS site contains full documentation on the service.

Certificates

JANET(UK) has signed up to a new TERENA contract for server certificates. This means that the Comodo AddTrust External CA Root certificate is currently needed for the eduroam service. Some devices have this listed Comodo at the start of the root certificate name. The certificate is used as part of the authentication process.

 

The certificate can be downloaded from here

Windows 7 

For Windows 7 users you will need to install the above certificate and an intermediate certificate  UTNAddTrustServerCA

 

Click Download, Open, Install Certificate. The Certificate Import Wizard will popup.

Click Next > Next > then Finish - this assumes you are using a laptop which is going to connect to eduroam.

Mobile Devices

The root CA certificate needs to be converted for use on mobile devices, the following will guide you through the process.

Microsoft Windows (XP and later)

  1. Right-click on that file in Explorer, go to the submenu under Open With... and pick Crypto Shell Extensions. Agree to Open the file.
  2. You should get a dialog box appear with information about the Certificate. Select the Details tab.
  3. Press the Copy to File... button to open the Certificate Export Wizard. Press Next > to skip the first page.
  4. The default option should be DER encoded binary X.509 (.CER) - if not, select it. Press Next >
  5. Type in a filename to save the converted certificate - e.g. AddTrust_CA. The extension .cer will be added to the name you type. Press Next >.
  6. A summary of the options selected will appear - choose Finish to complete the export. You should now have a file called AddTrust.cer in the same folder as the downloaded .crt file.
  7. You need to get this file onto your mobile device. You cannot email it as .cer extensions are blocked for the security reasons. Bluetoothing it (just send the file to the device; don't specifically drop it into a folder), use Microsoft ActiveSync, putting it on a webpage or such like is fine.
  8. Once the file arrives on your mobile device, opening it should offer to add it to the list of trusted root certification authorities (CA). 
  9. This should give you the option of that certificate in the eduroam wireless configuration.

Mac OS X (using the Keychain Utility)

  1. Open Applications -> Utilities -> Keychain Utility. The Keychain Access window should appear, showing a list of certificates and saved passwords.
  2. In the Keychains box in the top left, select System Roots. In the Category box in the bottom right, select Certificates.
  3. From the main list on the right side, find AddTrust External CA Root and right-click (or hold down Control/Ctrl and click) then select Export "AddTrust External CA Root"... from the pop-up menu.
  4. In the dialog which appears, choose a location (probably the default in Documents is fine) and confirm the File Format is Certificate (.cer). Press Save to export the certificate.
  5. You need to get this file onto your mobile device.
  6. Once the file arrives on your mobile device, opening it should offer to add it to the list of trusted root certification authorities (CA).

Feedback & Support

Please give your feedback or ask for support from our computer support desk in the Learning Resource Centres.



Page last modified 08 October 2014.

Send feedback
 
LJMU Logo banner imageLJMU Logo banner image (print)