Connection of the institution to the eduroam infrastructure

This bachelor thesis is focused on the connection of the University of New York in Prague, s.r.o. (UNYP) to the international roaming WiFi infrastructure called eduroam. The main goal is to establish communication between both institutional and the national RADIUS servers using IPsec protocol. This will allow the educational institution to connect to the eduroam network, which is shared between the participating institutions worldwide. In the theoretical part of this thesis, the reader will learn basic information about the eduroam network, its coverage, RADIUS server hierarchy, mechanisms for authenticating users based on 802.1X protocol and secure EAP types. Furthermore, the RADIUS communication between the client and the server is introduced to the reader, followed by the types of RADIUS server solutions and the connection using secure protocols, which are commonly used to connect to the eduroam network. In the practical part, the author first performs the analysis and steps necessary before configuration. Subsequently, he then describes the connection with the solution via Microsoft Windows Server 2022 in detail, for which it is necessary to implement rules in Windows Firewall and set up NPS. In the next part of the thesis, he describes the security standards of wireless networks and the choice between them for the new eduroam network. The last part is focused on identifying the error in the procedure and its solution.