What is eduroam?
eduroam (education roaming) is the secure, world-wide roaming access service developed for the international research and education community. eduroam allows researchers, students, and staff from participating institutions to obtain Internet connectivity across campus and when visiting other participating institutions by simply opening their WiFi device. It uses 802.1x* technology.
At Berkeley Lab, eduroam is available throughout many of the buildings on-site and off-site. Just look for "eduroam" as an option for a WiFi network. As of 6/7/16, eduroam's footprint is here.
What does eduroam do?
- For the traveler: eduroam provides per-user, per-session encrypted network access for visitors from participating institutions, without the need to gain guest credentials on arrival to an eduroam enabled location. The connectivity is instantaneous and the infrastructure is authenticated by the user. Researchers and students visiting other countries can join thousands of eduroam hotspots without any hassle or any data roaming charges.
In other words, if you travel to another location that participates in eduroam, you can use your Berkeley Lab account and the local wireless network to gain access to the web.
- For the institution: eduroam removes the administrative steps required to provision visitors from other educational institutions. Access between networks from R&E institutions is negotiated once during the federation process and for all members of participating institutions. The eduroam network addresses CALEA requirements for visitors from other schools.
Anyone visiting LBL from an institution that participates in eduroam can access the network with their own account through our wireless network without jeopardizing network security.
The eduroam SSID puts users on the "visitor" network as opposed to the "employee" network. Although it requires authentication, there are different access controls in place. For example, you can't access eBuy or Facilities Keyplans on eduroam since it's open to other eduroam-participating institutions.
How can I configure my device with eduroam?
You will need to have a working Berkeley Lab username and password before you start configuring eduroam.
The supported devices include:
- Apple OSX Lion (10.7) or newer
- iOS 7 or newer
- Android 4.3 or newer
- Chrome OS
- MS Windows 8, 8.1, 10 (LBL will support Win7 for a limited time)
- EAP config (general device)
Berkeley Lab employees on travel
Before you start your trip, make sure that your laptop and mobile devices have been set up to work with eduroam. Berkeley Lab-specific instructions to configure devices are here.
Note: if you change your enterprise directory (LDAP) password, you will have to change it on your device as well. Go here for help.
Visitors to Berkeley Lab, who have been set up to use eduroam at their home institution
The SSID for Berkeley Lab's implementation is eduroam.
Berkeley Lab wireless installations and any new increases in footprint are listed here.
Why can't I connect to eduroam?
If you recently changed your password, which Berkeley Lab requires every 6 months, you will need to delete the eduroam network from your device and re-install eduroam again. Attempting to log in with your new password into the existing eduroam will not work. Instructions are here.
What are other participating institutions?