【经典】软件系统项目验收报告模板 英文版Acceptance Plan.doc

Acceptance PlanCustomer Name HereAbstractThis document describes the criteria for acceptance of a deployed wireless network. Each item to be tested will be called out, along with a detailed description of success.Table of ContentsCUSTOMER NAME HERE1Executive Summary3Test 1: Connectivity5Test 2: Employee Authentication7Test 3: Guest Authentication9Test 4: Data Privacy11Test 5: Application Support13Test 6: Roaming15Test 7: Management17Test 8: Monitoring21Test 9: Intrusion Detection23Test 10: Performance25Testing Sign-off Sheet28Executive SummaryOverviewThis section provides a brief overview of the acceptance criteria required for final acceptance of a deployed wireless network.Requirements for successThe following is a list of the minimum features that must be provided by the wireless network:1 Connectivity by wireless clients 2 Security of employee access (authentication)3 Security of guest access (authentication)4 Privacy of data (encryption)5 Application support6 Roaming support7 Wireless management (network and devices)8 Wireless monitoring (network and devices)9 Intrusion detection and protectionEach of these items consists of a series of individual tests that must be completed before acceptance. The rest of this document provides detailed descriptions of each requirement and the criteria for successful completion.Test 1: ConnectivityOverviewThis section describes the connectivity tests required for final acceptance of a deployed wireless network.Connectivity criteriaConnectivity is the ability to provide wireless network “dial tone” on demand, to any qualified client. Connectivity allows a client to do the following:1 Associate with an Access Point (AP)2 Acquire an IP address/configuration3 Perform basic network operations (as permitted by security mechanisms) e.g. perform a ping or browse to a web page1.1 AP associationThis test ensures the wireless device is capable of associated with an AP.Prerequisites¨ A wireless device that has been configured to connect to the wireless networkTest Steps1 Power on wireless device2 Connect to the wireless network3 Confirm the device has associated using client tools4 Confirm the device has associated using the Aruba management interfaceCriteria for successTo successfully complete this test, the device must be able to connect, on demand, to the wireless network and associate.1.2 IP addressingThis test ensures the wireless device is able to acquire IP addressing information via DHCP from the network.Prerequisites¨ A wireless device that has been configured for DHCPTest Steps1 Connect device to the wireless network2 Examine network settings and determine if a valid network address has been acquiredTest 1: Connectivity continuedCriteria for successTo successfully complete this test, the device should acquire a valid IP address with the correct network configuration information.1.3 Network operationsThis test ensures the wireless device is able to function on the IP network is a basic fashion. Prerequisites¨ A wireless device that has acquired an IP addressTest Steps1 Connect the device to the wireless network2 Test IP connectivity by attempting to communicate with the Aruba switch via the ping command3 Test IP connectivity to devices beyond the Aruba switch using the ping commandCriteria for successTo successfully complete this test, the device should be able to communicate both with the Aruba switch and devices beyond the switch.Test 2: Employee AuthenticationOverviewThis section describes the employee authentication tests required for final acceptance of a deployed wireless network.Employee authentication criteriaAuthentication is the ability to identify a device and/or a user prior to allowing less restricted access to the wireless network. Employee authentication performs the following operations:1 Require employee authentication prior to allowing full access to the employee network resources2.1 Require authenticationThis test ensures no wireless user/device is allowed to have anything more than restricted network access until an authentication has occurred.Prerequisites¨ A wireless device that has been configured to the VPN serverTest Steps1 Connect the device to the wireless network2 Ensure there is no access to restricted, employee-only resources3 Launch the VPN client and successfully connect4 Ensure restricted resources are now availableCriteria for successTo successfully complete this test, the device must be prevented from access restricted resources unless the user has successfully connected via the VPN client.Test 3: Guest AuthenticationOverviewThis section describes the guest authentication tests required for final acceptance of a deployed wireless network.Guest authentication criteriaAuthentication is the ability to identify a device and/or a user prior to allowing less restricted access to the wireless network. Guest authentication performs the following operations:1 Require guest authentication prior to allowing restricted Internet access2 Prevent access to restricted internal network resources3.1 Require authenticationThis test ensures no non-approved wireless user/device is allowed to have access without guest login.Prerequisites¨ A wireless device that has been configured to connect to the wireless networkTest Steps1 Connect the device to the wireless network2 Ensure there is no access to any resources beyond the most basic network dial-tone3 Launch a browser and ensure user is redirected to the Captive Portal web login4 Login as a guest5 Ensure that access to the Internet is now allowedCriteria for successTo successfully complete this test, the device must be prevented from access any restricted network resources at all times. The device must also be allowed limited Internet access only after the user has successfully completed guest login via the Captive Portal.3.2 Prevent access to restricted resourcesThis test ensures no guest wireless user/device is allowed access to any network resources other than the Internet after guest login.Prerequisites¨ A wireless device that has been configured to connect to the wireless networkTest Steps1 Connect the device to the wireless network2 Launch a browser and login as a guest via Captive Portal3 Ensure that access to restricted resources is disallowedTest 3: Guest Authentication continuedCriteria for successTo successfully complete this test, the device must be prevented from access any restricted network resources at all times. The device must also be allowed limited Internet access only after the user has successfully completed guest login via the Captive Portal.Test 4: Data PrivacyOverviewThis section describes the data privacy tests required for final acceptance of a deployed wireless network.Data privacy criteriaData privacy is the ability of the network to protect transmitted data from unauthorized eavesdropping and recovery. Data privacy can take several forms and can performs the following operations:1 Ensure all data transmitted over the wireless network is encrypted2 Ensure WEP keys are secure4.1 Data encryptionThis test ensures no wireless is able to connect to the network and transmit data in the clear (unencrypted). Prerequisites¨ A wireless device that has been configured to connect to the wireless networkTest Steps1 Connect the device to the wireless network2 Launch a wireless packet capture and ensure all packets transmitted are encryptedCriteria for successTo successfully complete this test, the all data sent by the device should, at a minimum, be WEP encrypted. Thus, when examined by a packet capture program, no data should be available.4.2 WEP securityThis test ensures the WEP key used for encryption of data is not weak and susceptible to weak IV frame attacks.Prerequisites¨ A wireless device that has been configured to connect to the wireless networkTest Steps1 Connect the device to the wireless network2 Launch a WEP crack tool and attempt to crack the keyCriteria for successTo successfully complete this test, a WEP IV frame attack should not be successful, even after a large amount of data (5 million+ packets) has been collected.Test 5: Application SupportOverviewThis section describes the application support tests required for final acceptance of a deployed wireless network.Application support criteriaApplication support is the ability of the network to support required applications. Application support includes the following operations:1 Ensure all required applications work correctly over the wireless network5.1 Application testingThis test ensures any applications that need to run over the wireless network can do so without degradation. Prerequisites¨ A wireless device that has been configured to connect to the wireless network¨ Installation of the required applications on the wireless deviceTest Steps1 Connect the device to the wireless network2 Authenticate as required 3 Launch VPN if required4 Launch each application one at a time5 Ensure application works correctlyCriteria for successTo successfully complete this test, each application should startup and behaves correctly on the wireless network without any performance or behavior degradation.Test 6: RoamingOverviewThis section describes the wireless roaming tests required for final acceptance of a deployed wireless network.Roaming criteriaWireless roaming is the ability of a wireless user/device to move from AP to AP, switch to switch, without impacting network connectivity or application execution. Wireless roaming support includes the following operations:1 Seamless AP to AP roaming, where the APs are on the same switch2 Seamless AP to AP roaming, where the APs are connected to different switches3 Seamless Layer 3 roaming6.1 Same switch, AP to AP roamingThis test ensures wireless devices/users may move between APs attached to the same switch without impacting the user or applications. Prerequisites¨ A wireless device that has been configured to connect to the wireless network¨ Installation of the required applications on the wireless deviceTest Steps1 Connect the device to the wireless network note the IP address2 Authenticate as required3 Launch an application (browser, mail, etc.)4 Move the device such that it drops its initial association and connects to a different AP connected to the same switch5 Ensure IP address has not changed6 Ensure application is still functioning correctlyCriteria for successTo successfully complete this test, each application should startup and behaves correctly on the wireless network without any performance or behavior degradation.Test 6: Roaming continued6.2 Different switch, AP to AP roamingThis test ensures wireless devices/users may move between APs attached to different switches without impacting the user or applications. Prerequisites¨ A wireless device that has been configured to connect to the wireless network¨ Installation of the required applications on the wireless deviceTest Steps1 Connect the device to the wireless network note the IP address2 Authenticate as required3 Launch an application (browser, mail, etc.)4 Move the device such that it drops its initial association and connects to a different AP connected to a different switch5 Ensure IP address has not changed6 Ensure application is still functioning correctlyCriteria for successTo successfully complete this test, each application should startup and behaves correctly on the wireless network without any performance or behavior degradation.6.3 Layer 3 roamingThis test ensures wireless devices/users may move between APs connected to different subnets without losing their original IP address. Prerequisites¨ A wireless device that has been configured to connect to the wireless networkTest Steps1 Connect the device to the wireless network note the IP address2 Move the device to a different AP and subnet3 Ensure the IP address has not changedCriteria for successTo successfully complete this test, each wireless device should keep the same original IP address regardless of where it roams within a network.Test 7: ManagementOverviewThis section describes the wireless management tests required for final acceptance of a deployed wireless network.Management criteriaWireless management is the ability to management devices connected to a wireless network this includes Access Points and switches. Wireless management support includes the following operations:1 RF management radio calibration, AP self-healing and load-balancinga. Radio calibrationb. AP self-healingc. AP load-balancing2 Client management - blacklisting3 Switch management - master/local switch7.1.a RF management: radio calibrationThis test ensures the wireless solution provides tools for calibration of the RF environment. Prerequisites¨ A device capable of connecting to the CLI or Web GUI on the Aruba switchTest Steps1 Connect to the Aruba management interface2 Initiate calibration of the AP radios 3 Examine the results of the calibration4 Perform a walkthrough of the affected APs and monitor the results:a. Can wireless devices connect at any/all points?b. Is there excessive radio interference?Criteria for successTo successfully complete this test, the Aruba AP radios should be calibrated in such a way that there is not excessive radio interference or neighbor overlap, while maximizing radio coverage.Test 7: Management continued7.1.b RF management: self-healingThis test ensures the wireless solution provides a mechanism for self-healing in the event of an AP failure.Prerequisites¨ A device capable of connecting to the CLI or Web GUI on the Aruba switchTest Steps1 Connect to the Aruba management interface2 Ensure self-healing is enabled3 Disconnect or power off one or more APs sufficient to create a coverage hole4 Make sure neighboring APs compensate for failure and ensure coverage 5 Examine results in management interfaceCriteria for successTo successfully complete this test, the failure of one or more APs should trigger the neighboring APs to increase their power settings to increase coverage in the area previously covere