skip to content

eduroam/JANET Roaming Service

Executive Summary

Use the eduroam wireless network name (SSID).

All CMS wired laptop network sockets now support eduroam based authentication. The configuration for wired eduroam is slightly different than for wireless.

Quickstart: Configuring eduroam on your wireless device

Cambridge users, first time:

  1. get your identifier and token
  2. follow the relevant instructions
  3. read the further details


  1. you will need authentication credentials (often an identifier and password) from your home institution
  2. read the further details


eduroam is an international initiative that allows members of educational establishments to gain internet access at other member sites easily, using credentials from their home site in a secure manner.

Authentication details (username/password) are configured into the user's computer and tested at the home site before departure. These details are used automatically at the destination site when the computer discovers the eduroam network is available. Janet is the UK provider of eduroam.

At the CMS we started offering the eduroam service on 11th October 2010 intending it to (eventually) replace the old unencrypted wireless networks which impose many more restrictions on what can be done. In the first four weeks we saw over 32000 eduroam authentications though this actually only represents use by about 260 unique Cambridge users and about 35 from further away. The number of eduroam users continues to rise as more people configure their devices.

During February 2012 we finished updates to support eduroam based authentication on all our laptop network wired sockets. All the laptop network sockets now support IEEE 802.1x based authentication using eduroam credentials - but will fall back to our existing web-based captive-portal for devices which do not support 802.1x, or have not yet been configured.

Details for Visitors

The CMS implementation of eduroam (JANET Roaming Service) complies with the JRS Tier 2, supporting WPA-TKIP and WPA2-AES with private IP addresses (which are NAT'd) and no IPv6 support.

Outbound ports blocked are essentially the same as our existing service on wired sockets.

Please configure eduroam on your device before leaving your home institution and it should Just Work during your visit. Please also read the Acceptable Use Policies for the University network.

Details for Cambridge users

Please read the University of Cambridge Computing Service guide for using eduroam:

Note that when connected to a wired Lapnet socket you can access the UCS Tokens service without needing to use our web authenticator first.


While using eduroam in the CMS all Cambridge users and visitors have access to our printers via the usual CUPS or Windows print mechanisms. Note that we do log all print requests with sufficient detail that we could track you down if there appears to be abuse.