ESnet Radius Authentication Fabric (RAF) Testbed

The RADIUS authentication fabric (RAF) testbed provides a secure infrastructure for routing authentication traffic using the RADIUS protocol. The RAF has been used to demonstrate "single token sign-on" for DOE one-time password deployments in distributed computing applications. The RAF may also support other trust federations, including VPN and firewall access applications, and solutions for the "roaming scholar" problem (distributed wireless access).

To learn more about RAF, please see the documents below.

OTP Federation White Paper and Work Summary

Radius Authentication Fabric White Paper (html, pdf, doc)

ESnet RAF Progress Report Apr 2004 - Apr 2005 (pdf, doc)

OTP Federation Draft (pdf, doc)

NOPS OTP Requirements [Apr 2004] (pdf) [Courtesy of NERSC]

Project Proposals

ESnet RAF LDRD FY06 [Apr 2005] (doc)

Grid Integrated Radius Authentication Fabric [May 2004] (pdf, doc)

Presentations

LDRD 2006 Review Slides [Jun 2005] (pdf, ppt)

HEP Workshop Slides [ Mar 2005]

ESnetRAF-HEP (ppt)

HEP-FWNA (ppt)

ESnet RAF Report at ESSC [Jan 2005] (ppt)

ESnet RAF Presentation at GGF [Jun 2004] (ppt).

Radius and SecurId presentation [May 2004] (html, pdf)

ESnet One Time Password Support at ESSC [Apr 2004] (pdf, ppt)

One Time Passwords in DOE Computing Environments [Apr 2004] (html, pdf) [Courtesy of NERSC]

Other RADIUS Hierarchies and Related Work

EduRoam

EduRoam was developed out of the TERENA Mobility TF to solve the "roaming scholar" problem in the community covered by European NRENs.

Internet2 FWNA

The Federated Wireless NetAuth (FWNA) Working Group is a spin-off of the SALSA NetAuth Working Group. NetAuth is developing authenticated access technology for higher education networks in the US; FWNA is focused on the many technical issues related to the wireless part of this problem.

EduRoam Global Working Group

OTP Federation Test Bed Members

Last update: