Page tree
Skip to end of metadata
Go to start of metadata

On completion of this document please return to:

Also available as a PDF or Microsoft Office Word Document.


eduroam is available to all AARNet subscribers and is governed by the Australian eduroam Policy

Organisational Information

Organisation Name: 
Homepage URL 
eduroam URL: 
Authentication Type:EAP-TTLS, EAP-PEAP, EAP-TLS
Inner Authentication Method:MSCHAPv2, PAP, CHAP, Certificate

If you've implemented TLS please provide an authentication certificate as an attachment when submitting this application.

eduroam Policy Compliance

The Australian eduroam Policy details minimum requirements for joining the eduroam service. These are detailed in the following questions. Each question relates to a specific criteria item from the Policy which you can cross reference for further information.

2.3.1Are your users over 18 or have parental consent to use the network?eduroam access may not be filtered at visiting sites.
2.3.4Are your user aware that their activity may be logged? 
2.4.2Is user activity monitoring announced?Mentioned in an AUP or other documentation.
3.1IP address of Primary RADIUS Proxy Server  
 IP address of Secondary RADIUS Proxy Server Recommended by not required.
3.3What is the username of your eduroam Test Account?(Provide)e.g.
 Have you provided the password of this account via txt or phone to: 
3.5Is your network SSID eduroam?If 'Yes' then next question.
3.5.1Is your SSID eduroam-UNINAME? Provide the SSID used.
4.1Do you log RADIUS requests/responses? 
4.2Do you log DHCP requests related to eduroam usage? 
4.3Do you retain the above logs for a minimum of 3 months? 
5.3Does your eduroam webpage comply with the Policy? 
6.1Primary Technical Contact Name:  
 Primary Technical Contact Phone:  
 Primary Technical Contact Email:  
 Secondary Technical Contact Name:  
 Secondary Technical Contact Phone:  
 Secondary Technical Contact Email:  
6.2Security Contact Name: Can be the same as a technical contact.
 Security Contact Phone:  
 Security Contact Email:  
6.3Have your technical + security contacts subscribed to the mailing list 

Site Information

Please provide the site/campus name for the locations your organisation has/will have an eduroam presence on.

Site/Campus NameWireless Coverage Map URL

Inclusion of Wireless Coverage Map URLs is Optional.
If there are locations that your organisation doesn't have eduroam on - then this should be detailed on your eduroam information website.

Services Offered

No.QuestionYesNoMore Info
1a.Do you allow outbound connections to a PPTP VPN?Port 1723 and IP Protocol 47 (GRE)
1b.Do you allow outbound connections to a IPSec VPN?UDP Port 500 and IP Protocol 50
2.Do you allow outbound connections to HTTP & HTTPS sites?Port 80 & 443
2a.Do outbound HTTP/HTTPS connections require the use of a proxy?If 'No' go to 4.
2b.Is the proxy implemented as a transparent proxy?Go to 4.
2c.Is the proxy discovered via DHCP/DNS entry? 
2d.Is the proxy discovered via a PAC or WPAD entry? 
3.Is the network SSID "eduroam" and visibly broadcast?If 'Yes' go to 5.
4.Is Network Address Translation utilised? 
5.Do you allow outbound connection to IMAPS, POPS and Submission?Ports 993, 995 & 587
6.Do you rate limit inbound bandwidth to for eduroam Visitors? 
6a.Is this limited to less that 1024kbps shared between eduroam Visitors? 
7.Do you allow full egress network access? 

Your ease of use rating will be calculated from these responses.


Please detail the coverage of your wireless network.

CoverageDefinitionCoverage Provided (Please Tick)
Blanket wireless coverage of the site. 
Coverage in all meeting and common use areas. 
Coverage in most meeting and common use areas. 
Coverage is available in many buildings. 
Very limited wireless coverage. 
eduroam is not available. 

Submission of Application

It may take a working week to process and complete your request.

On the successful submission of your application - you'll receive an email containing the shared secret necessary for communicating with the eduroam National RADIUS Proxy Servers (NRPS).

You'll also receive communication of the AARNet eduroam Test Account so that you can test your RADIUS/eduroam connectivity to the rest of the federation.

If your organisation has not met the requirements of the Policy you will still be connected to eduroam. There is a 30 day grace period in which to become compliant. After that point your application needs to be revised and reviewed to continue connectivity to eduroam. No site will be disconnected until thorough review of progress toward policy compliance and a decision by AARNet and its Project Group members.

  • No labels