eduroam is an international project to promote mobility and roaming in national research and education (NREN) networks. In the Czech Republic, this project is under the umbrella of CESNET. Our school joined the project in August 2019. This was another step towards improving the quality of study and the prestige of the institution.
A registered subscriber can use this wireless network (wherever available) with a single user account. The account is administered by the home (founding) organization.
Using roaming is simple, a properly configured subscriber device connects automatically as soon as the eduroam network is available. Similarly to roaming connections to international networks of mobile operators. Hence the acronym: education roaming.
The service is free for all participants.
Set up user devices to connect to eduroam
For a secure connection to eduroam, it is not enough just to enter a username and password. You must also set up a certificate check, the easiest way to do this is with eduroam CAT, see the documentation at eduroam.org.
For manual setup, you’ll need the following information:
- network Name (SSID): eduroam
- connection protocol: 802.1x
- security and Encryption: WPA2 / AES
- authentication: PEAP (alternatively TTLS)
- internal authentication protocol: MS-CHAPv2
- name of RADIUS server: radius.www.teleinformatika.eu
- own certification authority TELELEINFORMATIKA-CA1, the root certificate can be downloaded here: TELELEINFORMATIKA-CA1
- the IP address is assigned automatically via DHCP
Covered spaces
eduroam is broadcast throughout the school, except the school canteen and gym. The youth home is also not covered by the eduroam network.
Filtering traffic
The operation of school pupils is filtered in accordance with the laws of the Czech Republic.
SMTP traffic is not allowed from the eduroam network, TCP/25 port is blocked. You get private IPv4 and Internet access from a DHCP server. There is no interference with visitors‘ traffic. The use of our computer network is logged and any security incidents will be handled directly with a specific user.
Support
Users of our school can contact helpdesk@teleinformatika.eu.
Visitors with an eduroam account should be encouraged to look primarily for their home institution, that is. who gave them an account.
eduroam – visits to the Secondary School of Teleinformatics, Ostrava, p.o.
If your organization is involved in the international eduroam project (EDUcation ROAMing), then you can simply log in to the eduroam network with the same credentials as at your home institution and at other universities (also involved in the eduroam project).
A map of available eduroam sites in Ostrava, but also in the Czech Republic, can be found at http://www.eduroam.cz/doku.php.
More information about the eduroam project is available at http://www.eduroam.org/. Czech eduroam website can be found at http://www.eduroam.cz/.
How to connect
The visible SSID eduroam is available on the wireless access points of the Secondary School of Teleinformatics, Ostrava, p.o .. WPA2 + AES encryption is used.
Access rules and restrictions
SMTP traffic is not allowed from the eduroam network, TCP / 25 port is blocked. You will obtain an IPv4 address with Internet access from the DHCP server. The use of our computer network is logged and possible security incidents will be handled directly with a specific user, respectively. with his home organization.
We reserve the right to block terminal equipment or users on our computer network. In particular, where:
- your device is infected with malware
- trying to attack other devices on our network or the Internet
- copyright is infringed from this device
Users must adhere to the roaming policy defined by CESNET.
What to do in case of problems
Since the operation and provision of eduroam services is quite complicated (there are always several institutions and administrators in the chain), you should first contact your administrator in your parent institution with your problems. If you have already completed this step, you cannot do this for some reason, please contact our administrator.