Campus Network-as-a-Service (CNaaS) is a project within SUNET with the goal of providing a fully managed service for LAN/WLAN networks at university campuses.

Blog Posts

CNaaS Documentation

There are three parts to the documentation of CNaaS at SUNET:

  1. Product documentation - Documents the different products we use. For NMS and NAC documentation, see below. (Public access)
  2. Service documentation - Documents the SUNET specific processes. (Mixed public/private access)
  3. Customer documentation - Documents specific details of one customer implementation (Private access)


As part of this project a network management system called CNaaS-NMS is being developed to automate the management of the campus networks, the software is open source and can be used by anyone outside of SUNET as well.

Blog can be found here: Campus Networking Automation - Introduction

Source code available at Github



Dev / test environment setup

Lab Setup


Software Architecture (Google docs)

Code coverage status (

CNaas - NAC (Network Access Control)

In order to provide end users with an authentication mechanism CNaaS NAC was invented. It relies on freeradius ( for user authentication using 802.1X with MAB as fallback for clients not being able to use 802.1X.

Source code is available on GitHub:

Freeradius can either be integrated towards the existing user database (LDAP, Active Directory etc) or use Postgres to store credentials. CNaaS NAC provides both an API and a web interface to handle users if Postgres is chosen for storing credentials.

CNaaS NAC API reference.

CNaaS NAC Web interface


FW CNaaS and IP-VPN Service
01.07.2022 12:21 CEST Rikard Johansson
01.07.2022 12:14 CEST Rikard Johansson
01.07.2022 11:16 CEST Rikard Johansson
CNaaS Brandvägg
01.07.2022 11:14 CEST Rikard Johansson
Adding and removing SSO users
30.06.2022 14:20 CEST Ernst Widerberg
CNaaS NAC - API Howto
29.06.2022 23:25 CEST Magnus Höglund
FW CNaaS IPsec
14.06.2022 11:45 CEST Mikael Ottosson
FW CNaaS Access and User accounts
14.06.2022 11:40 CEST Mikael Ottosson
FW CNaaS System settings
14.06.2022 11:39 CEST Mikael Ottosson
  • No labels