Version 1 21 26 2020 Customer Name Here Abstract This document describes the criteria for acceptance of a deployed wireless network Each item to be tested will be called out along with a detailed description of success AcceptanceAcceptanceAcceptance PlanPlanPlan Customer Name Here 2 Table of Contents CUSTOMER NAME HERE 1 Executive Summary 3 Test 1 Connectivity 5 Test 2 Employee Authentication 7 Test 3 Guest Authentication 9 Test 4 Data Privacy 11 Test 5 Application Support 13 Test 6 Roaming 15 Test 7 Management 17 Test 8 Monitoring 21 Test 9 Intrusion Detection 23 Test 10 Performance 25 Testing Sign off Sheet 28 Customer Name Here 3 Executive Summary OverviewThis section provides a brief overview of the acceptance criteria required for final acceptance of a deployed wireless network Requirements for success The following is a list of the minimum features that must be provided by the wireless network 1Connectivity by wireless clients 2Security of employee access authentication 3Security of guest access authentication 4Privacy of data encryption 5Application support 6Roaming support 7Wireless management network and devices 8Wireless monitoring network and devices 9Intrusion detection and protection Each of these items consists of a series of individual tests that must be completed before acceptance The rest of this document provides detailed descriptions of each requirement and the criteria for successful completion Customer Name Here 5 Test 1 Connectivity OverviewThis section describes the connectivity tests required for final acceptance of a deployed wireless network Connectivity criteriaConnectivity is the ability to provide wireless network dial tone on demand to any qualified client Connectivity allows a client to do the following 1Associate with an Access Point AP 2Acquire an IP address configuration 3Perform basic network operations as permitted by security mechanisms e g perform a ping or browse to a web page 1 1 AP associationThis test ensures the wireless device is capable of associated with an AP Prerequisites A wireless device that has been configured to connect to the wireless network Test Steps 1Power on wireless device 2Connect to the wireless network 3Confirm the device has associated using client tools 4Confirm the device has associated using the Aruba management interface Criteria for success To successfully complete this test the device must be able to connect on demand to the wireless network and associate 1 2 IP addressingThis test ensures the wireless device is able to acquire IP addressing information via DHCP from the network Prerequisites A wireless device that has been configured for DHCP Test Steps 1Connect device to the wireless network 2Examine network settings and determine if a valid network address has been acquired Customer Name Here 6 Test 1 Connectivity continued Criteria for success To successfully complete this test the device should acquire a valid IP address with the correct network configuration information 1 3 Network operations This test ensures the wireless device is able to function on the IP network is a basic fashion Prerequisites A wireless device that has acquired an IP address Test Steps 1Connect the device to the wireless network 2Test IP connectivity by attempting to communicate with the Aruba switch via the ping command 3Test IP connectivity to devices beyond the Aruba switch using the ping command Criteria for success To successfully complete this test the device should be able to communicate both with the Aruba switch and devices beyond the switch Customer Name Here 7 Test 2 Employee Authentication OverviewThis section describes the employee authentication tests required for final acceptance of a deployed wireless network Employee authentication criteria Authentication is the ability to identify a device and or a user prior to allowing less restricted access to the wireless network Employee authentication performs the following operations 1Require employee authentication prior to allowing full access to the employee network resources 2 1 Require authentication This test ensures no wireless user device is allowed to have anything more than restricted network access until an authentication has occurred Prerequisites A wireless device that has been configured to the VPN server Test Steps 1Connect the device to the wireless network 2Ensure there is no access to restricted employee only resources 3Launch the VPN client and successfully connect 4Ensure restricted resources are now available Criteria for success To successfully complete this test the device must be prevented from access restricted resources unless the user has successfully connected via the VPN client Customer Name Here 9 Test 3 Guest Authentication OverviewThis section describes the guest authentication tests required for final acceptance of a deployed wireless network Guest authentication criteria Authentication is the ability to identify a device and or a user prior to allowing less restricted access to the wireless network Guest authentication performs the following operations 1Require guest authentication prior to allowing restricted Internet access 2Prevent access to restricted internal network resources 3 1 Require authentication This test ensures no non approved wireless user device is allowed to have access without guest login Prerequisites A wireless device that has been configured to connect to the wireless network Test Steps 1Connect the device to the wireless network 2Ensure there is no access to any resources beyond the most basic network dial tone 3Launch a browser and ensure user is redirected to the Captive Portal web login 4Login as a guest 5Ensure that access to the Internet is now allowed Criteria for success To successfully complete this test the device must be prevented from access any restricted network resources at all times The device must also be allowed limited Internet access only after the user has successfully completed guest login via the Captive Portal 3 2 Prevent access to restricted resources This test ensures no guest wireless user device is allowed access to any network resources other than the Internet after guest login Prerequisites A wireless device that has been configured to connect to the wireless network Test Steps 1Connect the device to the wireless network 2Launch a browser and login as a guest via Captive Portal 3Ensure that access to restricted resources is disallowed Customer Name Here 10 Test 3 Guest Authentication continued Criteria for success To successfully complete this test the device must be prevented from access any restricted network resources at all times The device must also be allowed limited Internet access only after the user has successfully completed guest login via the Captive Portal Customer Name Here 11 Test 4 Data Privacy OverviewThis section describes the data privacy tests required for final acceptance of a deployed wireless network Data privacy criteriaData privacy is the ability of the network to protect transmitted data from unauthorized eavesdropping and recovery Data privacy can take several forms and can performs the following operations 1Ensure all data transmitted over the wireless network is encrypted 2Ensure WEP keys are secure 4 1 Data encryptionThis test ensures no wireless is able to connect to the network and transmit data in the clear unencrypted Prerequisites A wireless device that has been configured to connect to the wireless network Test Steps 1Connect the device to the wireless network 2Launch a wireless packet capture and ensure all packets transmitted are encrypted Criteria for success To successfully complete this test the all data sent by the device should at a minimum be WEP encrypted Thus when examined by a packet capture program no data should be available 4 2 WEP securityThis test ensures the WEP key used for encryption of data is not weak and susceptible to weak IV frame attacks Prerequisites A wireless device that has been configured to connect to the wireless network Test Steps 1Connect the device to the wireless network 2Launch a WEP crack tool and attempt to crack the key Criteria for success To successfully complete this test a WEP IV frame attack should not be successful even after a large amount of data 5 million packets has been collected Customer Name Here 13 Test 5 Application Support OverviewThis section describes the application support tests required for final acceptance of a deployed wireless network Application support criteria Application support is the ability of the network to support required applications Application support includes the following operations 1Ensure all required applications work correctly over the wireless network 5 1 Application testing This test ensures any applications that need to run over the wireless network can do so without degradation Prerequisites A wireless device that has been configured to connect to the wireless network Installation of the required applications on the wireless device Test Steps 1Connect the device to the wireless network 2Authenticate as required 3Launch VPN if required 4Launch each application one at a time 5Ensure application works correctly Criteria for success To successfully complete this test each application should startup and behaves correctly on the wireless network without any performance or behavior degradation Customer Name Here 15 Test 6 Roaming OverviewThis section describes the wireless roaming tests required for final acceptance of a deployed wireless network Roaming criteriaWireless roaming is the ability of a wireless user device to move from AP to AP switch to switch without impacting network connectivity or application execution Wireless roaming support includes the following operations 1Seamless AP to AP roaming where the APs are on the same switch 2Seamless AP to AP roaming where the APs are connected to different switches 3Seamless Layer 3 roaming 6 1 Same switch AP to AP roaming This test ensures wireless devices users may move between APs attached to the same switch without impacting the user or applications Prerequisites A wireless device that has been configured to connect to the wireless network Installation of the required applications on the wireless device Test Steps 1Connect the device to the wireless network note the IP address 2Authenticate as required 3Launch an application browser mail etc 4Move the device such that it drops its initial association and connects to a different AP connected to the same switch 5Ensure IP address has not changed 6Ensure application is still functioning correctly Criteria for success To successfully complete this test each application should startup and behaves correctly on the wireless network without any performance or behavior degradation Customer Name Here 16 Test 6 Roaming continued 6 2 Different switch AP to AP roaming This test ensures wireless devices users may move between APs attached to different switches without impacting the user or applications Prerequisites A wireless device that has been configured to connect to the wireless network Installation of the required applications on the wireless device Test Steps 1Connect the device to the wireless network note the IP address 2Authenticate as required 3Launch an application browser mail etc 4Move the device such that it drops its initial association and connects to a different AP connected to a different switch 5Ensure IP address has not changed 6Ensure application is still functioning correctly Criteria for success To successfully complete this test each application should startup and behaves correctly on the wireless network without any performance or behavior degradation 6 3 Layer 3 roamingThis test ensures wireless devices users may move between APs connected to different subnets without losing their original IP address Prerequisites A wireless device that has been configured to connect to the wireless network Test Steps 1Connect the device to the wireless network note the IP address 2Move the device to a different AP and subnet 3Ensure the IP address has not changed Criteria for success To successfully complete this test each wireless device should keep the same original IP address regardless of where it roams within a network Customer Name Here 17 Test 7 Management OverviewThis section describes the wireless management tests required for final acceptance of a deployed wireless network Management criteriaWireless management is the ability to management devices connected to a wireless network this includes Access Points and switches Wireless management support includes the following operations 1RF management radio calibration AP self healing and load balancing a Radio calibration b AP self healing c AP load balancing 2Client management blacklisting 3Switch management master local switch 7 1 a RF management radio calibration This test ensures the wireless solution provides tools for calibration of the RF environment Prerequisites A device capable of connecting to the CLI or Web GUI on the Aruba switch Test Steps 1Connect to the Aruba management interface 2Initiate calibration of the AP radios 3Examine the results of the calibration 4Perform a walkthrough of the affected APs and monitor the results a Can wireless devices connect at any all points b Is there excessive radio interference Criteria for success To successfully complete this test the Aruba AP radios should be calibrated in such a way that there is not excessive radio interference or neighbor overlap while maximizing radio coverage Customer Name Here 18 Test 7 Management continued 7 1 b RF management self healing This test ensures the wireless solution provides a mechanism for self healing in the event of an AP failure Prerequisites A device capable of connecting to the CLI or Web GUI on the Aruba switch Test Steps 1Connect to the Aruba management interface 2Ensure self healing is enabled 3Disconnect or power off one or more APs sufficient to create a coverage hole 4Make sure neighboring APs compensate for failure and ensure coverage 5Examine results in management interface Criteria for success To successfully complete this test the failure of one or more APs should trigger the neighboring APs to increase their power settings to increase coverage in the area previously covered by the dead AP 7 1 c RF management load balancing This test ensures the wireless solution provides a mechanism for load balancing on heavily utilized APs Prerequisites A device capable of connecting to the CLI or Web GUI on the Aruba switch Test Steps 1Connect to the Aruba management interface 2Enable and configure load balancing for APs either by number of users or maximum utilization threshold 3Attempt to exceed this limit on an AP 4Observe results ensure limit is not exceeded and surplus users connect to nearby APs instead Criteria for success To successfully complete this test the Aruba AP should prevent over loading and send excessive users to nearby APs Customer Name Here 19 Test 7 Management continued 7 2 Client management blacklisting This test ensures the wireless solution provides tools to untrusted devices from connecting to the wireless network Prerequisites A device capable of connecting to wireless network Access to the Aruba management interface Test Steps 1Connect to the Aruba management interface 2Choose a wireless device and blacklist it 3Ensure device may not longer connect to the wireless network 4Whitelist the device and allow it to connect again Criteria for success To successfully complete this test an administrator should be able to ensure that a given device is prevented from connecting to the wireless network either forever or for a specified period of time 7 3 Multi switch management This test ensures the wireless solution provides tools for management of a multi switch environment Prerequisites A device capable of connecting to the CLI or Web GUI on the Aruba switch Test Steps 1Connect to the Aruba management interface 2Make a configuration change and observe change flow from master to local Criteria for success To successfully complete this test the management of a multi switch environment should be centralized Customer Name Here 21 Test 8 Monitoring OverviewThis section describes the wireless monitoring tests required for final acceptance of a deployed wireless network Monitoring criteriaWireless monitoring is the ability to monitor devices connected to a wireless network this includes access points clients and switches Wireless monitoring support includes the following operations 1Switch monitoring switch health 2AP monitoring reports 3Client monitoring tracking 8 1 Switch monitoring This test ensures the wireless solution provides tools for switch monitoring Prerequisites A device capable of connecting to the CLI or Web GUI on the Aruba switch Test Steps 1Connect to the Aruba management interface 2Ensure all switches are shown 3Ensure detailed information is available for each switch Criteria for success To successfully complete this test monitoring information should be easily available for all Aruba switches 8 2 AP monitoringThis test ensures the wireless solution provides tools for AP monitoring Prerequisites A device capable of connecting to the CLI or Web GUI on the Aruba switch Test Steps 1Connect to the Aruba management interface 2Ensure all access points and air monitors are shown 3Ensure detailed information on AP status configuration etc is available for each AP Criteria for success To successfully complete this test monitoring information should be easily available for all access points and air monitors Customer Name Here 22 Test 8 Monitoring continued 8 3 Client monitoring This test ensures the wireless solution provides tools for client monitoring Prerequisites A device capable of connecting to the CLI or Web GUI on the Aruba switch Test Steps 1Connect to the Aruba management interface 2Ensure all wireless client devices are shown 3Ensure detailed information is available fo