Authentication, Authorization and Accounting (AAA): ● IEEE 802.1X ● RFC 2548 Microsoft RADIUS Attributes ● RFC 2716 PPP EAP-TLS ● RFC 2865 RADIUS Authentication ● RFC 2866 RADIUS Accounting ● RFC 2867 RADIUS Tunnel Accounting ● RFC 2869 RADIUS Extensions ● RFC 3576 Dynamic Authorization Extensions to RADIUS ● RFC 3579 RADIUS Support for EAP ● RFC 3580 IEEE 802.1X RADIUS Guidelines ● RFC 3748 Extensible Authentication Protocol ● Web-based authentication ● TACACS support for management users Management: SNMP v1, v2c, v3 ● RFC 854 Telnet ● RFC 1155 Management Information for TCP/IP-Based Internets ● RFC 1156 MIB ● RFC 1157 SNMP ● RFC 1213 SNMP MIB II ● RFC 1350 TFTP ● RFC 1643 Ethernet MIB ● RFC 2030 SNTP ● RFC 2616 HTTP ● RFC 2665 Ethernet-Like Interface types MIB ● RFC 2674 Definitions of Managed Objects for Bridges with Traffic Classes, Multicast Filtering, and Virtual Extensions ● RFC 2819 RMON MIB ● RFC 2863 Interfaces Group MIB ● RFC 3164 Syslog ● RFC 3414 User-Based Security Model (USM) for SNMPv3 ● RFC 3418 MIB for SNMP ● RFC 3636 Definitions of Managed Objects for IEEE 802.3 MAUs Primary requirement of authentication will be from Domain Active Directory however proposed solution must also support authentication from third party RADIUS Server
check that your AD is there click on it --> Add mapping here you find the AD groups from where the users authenticated. WLAN Enabled SIP MAC Authentication. Browse the WLC the security tab --> MAC Authentication Alarm detail and Summary From the Controller Summary Security Standards: WAP, WAP2, WEP, TKIP, AES and AAA (802.1X). Browse the ACS Global Authentication Management: SNMP V1, V2c, V3 Browse the WLC management --> SNMP Check the Clean Air technology is working. Browse WCS Wireless -->802.11b/g/n -->CleanAir Check the Remote AP is connected and broadcast the SSID and users are Associates with it. Browse the WLC wireless tab. Allows access points to dynamically establish wireless connections without the need for a physical connection to the wired network.Mesh is working Browse WLC Wireless --> Mesh Dynamic Channel Assignment Browse the WLC wireless --> 802.11b/g/n --> DCA Support RF Visibility and Protection Browse WCS MAP Separate Browse the WLC WLAN Clients Load balancing Browse the WLC wireless --> Advance Balancing
Latest Software Version Support 200 APs and 3000 clients Real communication b/w AP, WLC and WCS Browse the WLC Monitor --> Summary Here you find the running communication b/w AP Auth. Server. Or From WCS Larger mobility domain for more simultaneous client associations, Faster RRM updates for uninterrupted network access when roaming, Intelligent RF control plane for self-configuration, and selfoptimization, Efficient roaming to improve application performance such as toll quality, voice, and consistent streaming video and data backup Browse the WLC Wireless -->802.11b/g/n --> RRM --> Roaming CAPWAP AP to control encryption. Browse the WLC wireless --> All AP select the Remote AP and check that Encryption is Enable. WIPS Browse the WLC wireless --> All AP Select one of the AP and set AP Sub Mode RF Management Browse the WLC Wireless -->802.11b/g/n --> RRM
Check that MSE is working. Check that MSE is integrated with WCS. Browse WCS --> services --> Synchronization History Check the license of MSE. Browse WCS --> Administration --> License Center --> MSE WIPS profile includes Denial of Service Attack DOS Attack Against AP DOS Attack Against infrastructure DOS Attack Against Station WIPS Security Penetration Browse WCS --> Configure --> WIPS Profile Show data under clients -> Clients detected by MSE Verify That MSE has latest software version Verify that WIPs has latest signatures Verify that WIPs update signature from internet All Licenses must on name of Datasheet and Complete Documentation
and RF attacks ● Automated alarms for rapid responses to mitigate risks ●Supports multiple unique service set identifiers (SSIDs) with customizable security and enforcement parameters ● Management frame protection to monitor the authentication of 802.11 management frames ● Access point wired port authentication with 802.1X to validate all access point credentials ● Tuning of access points on or off at scheduled intervals. ● Unified wired and wireless security by integration with Self-Defending Network and Network Admission Control (NAC) Rack mounted Computer System, Operating system and all other required software for installation of Wireless Control and Monitoring System Software must be latest version Provided System must have compatible and licensed operating system Check the license of WCS. Browse WCS --> Administration --> License Center --> WCS All APs are Present in WCS Browse WCS --> Configure --> Access Points Check that how many Clients were Authenticated by using EAP or OPEN Browse WCS Client Check that MSE is detecting threats/Attacks Browse WCS Security Plan, Deploy, Monitor and Reports on indoor and outdoor wireless networks Browse WCS Plan and Monitor and Report Tabs Support WIPS MSE