Figure 1: Posible links betwen eduroam RADIUS proxy servers.
visited organization | CZ NREN | TOP level | DE NREN | home organization | |||||
1. | orgA.cz (send Access-Request) | -> | r1.cz | -> | r1 | -> | r1.de | -> | r1.orgB.de |
2. | orgA.cz | <- | r1.cz | <- | r1 | <- | r1.de | <- | r1.orgB.de (send Access-Chalenge) |
3. | orgA.cz (send Access-Request) | -> | r2.cz | -> | r1 | -> | r2.de | -> | r1.orgB.de |
4. | orgA.cz | <- | r2.cz | <- | r1 | <- | r2.de | <- | r1.orgB.de (send Access-Chalenge) |
5. | orgA.cz (send Access-Request) | -> | r1.cz | -> | r2 | -> | r1.de | -> | r2.orgB.de (???) |
6a. | r1.de | -> | r1.orgB.de | ||||||
... | <- | r1.orgB.de (send Access-Chalenge) | |||||||
6b. | r2 | -> | r2.de | -> | r2.orgB.de (???) | ||||
6c. | r1.cz | -> | r1 | -> | r1.de | -> | r2.orgB.de (???) | ||
6d. | orgA.cz (re-send Access-Request) | -> | r2.cz | -> | r2 | -> | r1.de | -> | r1.orgB.de (???) |
Table 1: Flow of one EAP session in eduroam infrastructure