In an era where seamless connectivity is essential for academic success, the LEARN Campus WiFi and Eduroam Workshop, held from July 29 to August 1, 2023, at the University of Peradeniya, marked a significant stride forward. Led by experienced trainers from LEARN, including Network/Systems Manager – Senevi Herath, Senior Network/Systems Engineer – Dhammika Lalantha, Senior Network /and Systems (TAC) Engineer – Deepthi Gunasekara, Network / Systems & Applications Engineer – Tuwan Jaleel, , and Associate Engineer – Gayan Bandara, the workshop aimed to empower IT professionals managing campus networks with cutting-edge tools and knowledge to enhance campus-wide wireless infrastructure. Through hands-on sessions and expert-led discussions, participants delved into identity management, wireless security, and the implementation of Eduroam, setting the stage for a more connected academic future in Sri Lanka.
For the unfamiliar, Eduroam is an example of international cooperation in the academic world, offering secure, worldwide roaming access across campus networks. This service simplifies the process for researchers and students to stay connected wherever they go and enhances their ability to collaborate seamlessly across borders. Given the popularity of services like Eduroam, robust campus WiFi is no longer just a convenience—it is a crucial part of the educational infrastructure. The workshop’s focus on these technologies underscores their pivotal role in research and higher education, aligning with LEARN’s vision to foster digital equity through enhanced digital infrastructure.
Day 1: Foundations of Identity Management and Eduroam
The first day of the LEARN Campus WiFi and Eduroam Workshop laid the groundwork for understanding critical components of modern campus network infrastructure. The day began with an Introduction to Identity Management (IAM) and Eduroam, where participants were introduced to the fundamental concepts of Identity Access Management and the significance of Eduroam in enabling secure, global WiFi access for academic institutions. Following this, the workshop delved into exploring LDAP (Lightweight Directory Access Protocol).
This second session of the day provided a comprehensive overview of LDAP’s role in centralizing user credentials and maintaining directory services, which are vital for managing campus identities effectively. Participants learned about the directory structure, operations, and schema that form the backbone of LDAP, highlighting its role in ensuring secure and efficient network operations. The day concluded with Lab Sessions on LDAP, where participants engaged in hands-on exercises to set up and manage LDAP servers. These practical sessions were designed to reinforce the theoretical knowledge gained earlier, allowing attendees to apply LDAP configurations in real-time scenarios.
Day 2: Building the Backbone of Campus Networks
Day 2 of the LEARN Campus WiFi and Eduroam Workshop was a deep dive into the practical aspects of setting up and managing network infrastructure, with a strong emphasis on hands-on learning. The day kicked off with a session on Installing phpLDAPadmin, an essential tool that simplifies the management of LDAP directories through a web-based interface. Afterwards, participants learned how to set up web applications that allow users to change their passwords and administrators to browse, view, and update account statuses within an LDAP directory.
Following this, the focus shifted to Wireless Networking, covering key topics such as Wireless LAN controllers, Wireless Security, and Wireless Mesh Networking. This session was crucial in helping participants understand how to create and maintain secure and scalable wireless networks on their campuses. The discussion highlighted the importance of wireless security protocols and the strategic use of wireless mesh networking to extend network coverage efficiently. The day culminated in an interactive Lab Session where participants were divided into nine groups. Each group was tasked with setting up and configuring enterprise-grade access points, giving them hands-on experience deploying robust wireless networks.
Day 3: Strengthening Network Security and Governance
The third day of the LEARN Campus WiFi and Eduroam Workshop was pivotal in advancing participants’ understanding of network security and governance. The day began with an engaging lab session and presentation focused on setting up Identity Routing Services (IRS) and an Introduction to RADIUS and Eduroam. This session offered a detailed walkthrough of the RADIUS protocol and its integral role in the Eduroam infrastructure. Building on this foundation, participants moved on to a lab session on practically implementing IRS, ensuring that their networks could securely authenticate users across different campuses and countries.
The day concluded with a focus on Eduroam Governance and Tools for Administration. This session covered the various governance aspects of Eduroam, including policies, compliance requirements, and best practices for maintaining a secure and reliable Eduroam service. Participants were also introduced to tools designed to simplify Eduroam management, such as metrics monitoring, the Eduroam Configuration Assistant Tool (CAT), and the Eduroam companion app, which aids in user onboarding. These tools are essential for administrators to ensure that Eduroam services are both secure and user-friendly, supporting the broader goal of seamless global connectivity in the academic world.
Day 4: Wrapping Up with Advanced Administration and Services
The final day of the LEARN Campus WiFi and Eduroam Workshop centred on advanced administration and integrating LEARN’s identity management services. The day opened with a session on the Admin Portal for Eduroam, where participants were guided through the functionalities and tools available for managing Eduroam services at their institutions. The next session delved into Eduroam Monitoring, where participants explored the various tools and techniques for monitoring performance and security. Thereby ensuring that networks remain robust, secure, and reliable for all users.
The workshop concluded with a session on LEARN’s Identity Access Management Infrastructure as a Service (IaMIaaS). This session introduced participants to the comprehensive services offered by LEARN, including Shibboleth IDP, OpenLDAP identity databases, and Eduroam RADIUS configurations. LEARN’s IaMIaaS allows institutions to host their identity management systems within LEARN’s data centre, providing a browser-based interface for managing identities. This session highlighted the value of leveraging LEARN’s infrastructure to enhance the efficiency and security of campus identity management systems.
Beyond the Workshop: Enabling Digital Equity in Academia
The LEARN Campus WiFi and Eduroam workshop concluded with the distribution of certificates to the participants, recognizing their commitment to enhancing their technical skills. Ultimately, such workshops are integral to LEARN’s vision of enabling digital equity in Sri Lankan academia. By equipping network professionals with the knowledge to implement and manage robust digital infrastructure, LEARN is ensuring that all educational institutions, regardless of location, have the tools necessary to provide seamless and secure access to global resources. This commitment to capacity-building is key to fostering a more inclusive and connected academic environment in Sri Lanka.