Belnet Networking Conference 2012
FREE INTERNET ACCESS: DO’S AND DONT’S
Francis Devriendt, City of Kortrijk
History •
Wifi is an acquired right
• Most people are willing to use it but not willing to pay it • We need to be online, always and everywhere
How we filled it in •
Techniques
• Network of the city (+60 buildings) • Different ways to connect • Wireless bridges • Dark fiber • IPVPN (commercial) • One transparent network • VLAN technique on top
•
Gradually rollout
• Everywhere we have a network, we have hotspots • Centrally managed system on top of existing network • Today 150 access points in all buildings
Techniques •
Different SSID’s
• • • • • •
Stad Kortrijk hotspot Bezoekers Stad Kortrijk hotspot Personeel BB Stad Kortrijk Smartcities Digital signage …
Stad Kortrijk Hotspot Bezoekers •
Visitors
• Connect to an open network • Have to type in a user name and a password on a “captive” portal • Information is displayed on digital signage network • Logging in is a conscious act • Technical reason: limit dead connections
Stad Kortrijk Hotspot bezoekers
Stad Kortrijk Hotspot Bezoekers • •
Worked for several years Meets its boundaries now:
Stad Kortrijk Hotspot Bezoekers • • • • • •
How one should log in: Start smartphone Open browser session Login Open app ? No multitasking
Open network, no authentication? •
Result
• Infected machines on the network • Downloaders • Other illegal content
• External IP blacklisted • No more outgoing mails to mailservers that work with blacklists
Some legal stuff •
Obligations of an internet access provider
• Know your customer • Logging (6 months) • In case of abuse: cooperation with Justice
•
Solutions?
• Not completely open, need authentication and terms of use • Free basic (limited speed) • Encryption (user name and password) on the wireless connection itself • Unique login and password for every user? • How ??
EDUROAM Education Roaming eduroam (education roaming) is the secure, world-wide roaming access service developed for the international research and education community. eduroam allows students, researchers and staff from participating institutions to obtain Internet connectivity across campus and when visiting other participating institutions by simply opening their laptop. www.eduroam.org
Eduroam
• • • •
For students and staff Offers internet access Worldwide organisation Includes authentication
• Solution for our 10.000 students?
Andorra, Armenia, Australia, Austria, Azerbaijan, Belarus, Belgium, Brazil, Bulgaria, Canada, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hong Kong, Hungary, Iceland, Ireland, Israel, Italy, Japan, Kenya, Korea, Kyrgyzstan, Latvia, Lithuania, Luxembourg, Macau, Macedonia, Malta, Moldova, Montenegro, Morocco, The Netherlands, New Zealand, Norway, Peru, Poland, Portugal, Romania, Russia, Serbia, Slovenia, Slovakia, South Africa, Spain, Sweden, Switzerland, Republic of China, Thailand, Turkey, United Kingdom, United States of America
Eduroam •
Authentication system: radius
Eduroam •
Radius
Eduroam in Kortrijk • • •
1 out of tree institutions used it Now 3 of 3 institutions use it The city rolled it out
Eduroam in Kortrijk • • •
One network 3 campusses 150 access points in the city
•
Do students use it?
NO, They don’t
Eduroam •
Why not?
• Every institution has its own system next to Eduroam • Not promoted untill now • We provided no advantage for the typical Flemish student • Difficult to start:
De configuratie in Howest is als volgt: SSID: eduroam (wordt gebroadcast) Beveiligingstype: WPA2 Versleutelingstype: AES Om dmv van je Howest-login gebruik te maken van eduroam wordt gebruik gemaakt van volgende authentificatiemethode: Authentificatietype: PEAP Authentificatieprotocol: MS-CHAP-v2 Voor Windows Vista, Windows 7, Mac OS X 10.6 en iphone moet er geen extra software geïnstalleerd worden. Je kiest het netwerk ‘eduroam’ en vult vervolgens je gebruikersnaam en wachtwoord in wanneer je het loginvenster te zien krijgt. Als je een melding krijgt ivm het certificaat, klik je gewoon door. Bovendien heeft de Stad Kortrijk zijn hotspotnetwerk uitgebreid met Eduroam-toegang. In Kortrijk maak je gratis gebruik van het internet op hun hotspotnetwerk (vb. het Magdalenapark, de Grote Markt, de bib, de Lange Munte…).
Lessons learned •
Do:
• • • • •
Make it easy for your customer Know your customer Know your network Start gradually and take time to grow Limit speed per user
Lessons learned •
Do not:
• • • •
Implement big networks Start without a user case Give access without restriction Give access wich seems anonymous
Conclusion •
Eduroam is a mature technique But even mature techniques need a user case…
•
[email protected] • @fdevriendt
