Can you sign the acceptance check when the WiFi certification system is online, not see it."It's connected to WiFi."Many projects are delivered with only one successful certification scene, and then they go online and find high-time authentication, drifting out of network, logs that cannot be detected. The acceptance list covers four dimensions of authentication performance, functional integrity, security compliance, transportability, each with a specific test item and pass criteria, one signature per dimension, not by feeling."Sure."。
Authentication performance tests
The first is the delay in authentication, from user connection to WiFi to ejecting the certification page for no more than three seconds, and from entering the account password to authenticating successful release for less than two seconds. A second-second scale takes an average of 10 times. The second is simultaneous certification capability, simulated early peak scenes, 50 to 100 terminals simultaneously launch authentication with a success rate of not less than 99% and an average validation delay of no more than five seconds. V7 Portal certifies over 4,000 times per second, Radius certifies over 4,000 times per second, and normally does not have a firm size at this level, but it measures co-emission in the physical environment because AC and network bandwidth also affect performance. The third is the number of online users, with the system supporting 1.5 times the maximum number of online users of design capacity and leaving a residual.
Completeness test of authentication method
Each authentication method promised in the program is measured separately: account password authentication, text message certification, micro-letter authentication, LDAP/AD domain authentication, MAC unconscious, double factor authentication. Each authentication method measures success and failure scenarios such as code error, expired account number, valid code error, untied cell phone number. The failure scenario has a clear hint of error, not a blank page or timeout. It also measures compatibility of different terminals: Windows notebooks, macos, iOS, Andre, each system measuring at least two versions, which cannot be detected on the tester ' s own mobile phone.
Rover and Switch Test
The mobile phone is moving around the office area from one AP-cover to another, observing whether it breaks the network or needs recertification. The second level of travel with VLAN should be insensitive and not reaccredited. The three layers of cross VLAN are validated if the scheme is designed for reaccredited, confirming that the authentication process is normal. In high-security areas such as conference rooms, testing the pinging-pong effect of multiple AP switchings and the signal strength is stable when it is about -70dBm. The roaming test cannot only go through the corridor, but it must simulate real use: running a video link on the side to see if Carton break.
Account life cycle test
New staff members are on duty, how long do they get to authenticate the account number in the AD domain? It should be real time or five minutes. If you leave, and if an AD account is disabled, online sessions are forced down. Is unconnected equipment not certified? Staff move, and network privileges change synchronized after user group changes? Are there any early reminders?"Could authenticate"No account number is measured to disable and reassign staff members who leave the service before they can find their problems online.
Log and audit testing
The authentication logs are to record: user name, MAC address, IP address, online time, downtime, authentication method, authentication results, AP location. The online logbook is to record access times, source IP, destination IP, port, protocol. Two types of logs are to be linked for querying: a user name and time period to identify all the user ' s online records and corresponding Internet activity. Log retention periods are not less than six months, meeting the requirements of article 21 of the cybersecurity law. Log queries function: 1 million logs are searchable under conditions and with no response time of more than 20 seconds. Public security docking test: If the programme commits itself to a platform for matching order 32 of the public security, a test data confirmation form is actually sent.
Security compliance tests
Could not be, but only the authentication page and DNS. Visitors can access staff VLAN? Should not. The Internet is accessible to the object network terminal.
Failure recovery test
Authentication Gateway machine, does the backup equipment switch automatically? The switching time is no more than 30 seconds. Radius server"Support dual heater"Considers that it is okay. Double-heating transition times and data consistency must be measured.
Transport serviceability test
Could the administrator view the current online user list backstage? Can you force a user to go down? Can you export the authentication log for the specified time frame? Is there an alarm mechanism in the system (a surge in certification failure rate, over-server CPU, certificate about to expire)? Does ordinary employees have access to the password and access logs themselves? These functions are not required for daily operations."It works."It's only through.
The company WiFi certification system has a receiving and inspection list that is quantified, measured, and covered the whole landscape. Certification features, authentication integrity of authentication methods, roaming switch, account life cycle, Log Audit, security compliance, failure recovery, and transport serviceability eight dimensions with specific tests and pass standards."It's working."Four words replace the receiving and inspection list, which is the basis for accountability when a problem arises on line.