9 items to be checked after the wireless access point is installed, and 9 items to be connected wirelessly
Whether you are upgrading the device or creating a brand new Wi-Fi network, you can use the following check methods to ensure that everything is in order before connecting users. After completing all the work of on-site measurement of Wi-Fi, you may be eager to fill in radio waves by running the cables to critical locations and establishing access points connected to you, check for some issues. When it comes to wi-fi security and performance, you will never be too careful, but you cannot ignore it too much.
1. Verify that a single Wireless Access Point can run properly
This seems simple, but when many wireless access points are installed, it is easy to ignore the problem of individual devices. A connection or configuration error may occur to prevent the Wireless Access Point from working properly. The problems with these single wireless access points may not be obvious during network usage or even during fast network checks. However, they may attack you in the future and are difficult to diagnose.
To avoid this situation, after each wireless access point is inserted into the installation location, ensure that it is powered on, the status indicator is operating properly, and each wireless access point is installed to obtain network and Internet connections. Check the signal level of the wireless access point to ensure that it is connected to the correct wireless access point.
2. Check the VLAN of each SSID
If the network is configured with multiple virtual LAN and SSID, the configuration on the vro, vswitch, or wireless access point may be incorrectly configured. For example, even if each SSID is assigned to a single VLAN, the VLAN tag may be incorrectly configured to accidentally receive the unknown VLAN to a dedicated VLAN. Therefore, when you test each wireless access point to ensure its normal operation, consider further verifying that the VLAN is correctly configured.
After each wireless access point is installed, connect to each SSID and ensure that the end user device is assigned the IP address of the specific VLAN. To ensure that inter-VLAN routing settings are not accidentally enabled, or firewall rules are incorrectly configured, any of them allows users to access other VLANs, perform operations between end-user devices on one VLAN and end-user devices on the other VLAN.
3. Check the SSID carefully.
To enable Seamless Roaming Between devices connected to wireless access points, you may have the same SSID set on each wireless access point. If you use a wireless controller to centrally manage all access points, the SSID and other settings may be consistent. However, if you want to manually configure each AP separately, errors may easily occur. In this case, we strongly recommend that you perform a dual check on the SSID after inserting it into each access point. The SSID is case sensitive and must be named exactly the same.
4. Verify wireless coverage
Even if you have completed the Wi-Fi site check before installing the AP, you should also verify that the Wi-Fi coverage after installation is everywhere. As long as you move around with your phone or laptop, you can view the wireless reading of your device in different locations.
For more accurate reading, you can use a free or cheap Wi-Fi Analysis Application to view the signal level in the negative dBm value, use a professional map-based ing tool to complete the on-site survey after installation, so that you can see the hotspot map or other visual coverage, while collecting other important data, such as signal-to-noise ratio.
5. carefully check the channel allocation
Wi-Fi channel allocation is tricky, and it has three available channels, especially in the crowded GHz band. In some cases, for example, when your neighbor's home or office uses Wi-Fi to interfere with your network, the automatic channel function becomes the first choice. Although you want to enable the automatic channel function of the Access Point, I recommend that you perform a dual check on the automatic channel.
Whether or not you use an automatic channel, make sure that the wireless access point is set to the best channel. In the GHz band, you should stick to channels and 11 because they are the only non-overlapping channels. You do not want the access point to be set to the same or overlapping channel as another access point, whether it is from your network or from a neighbor. The 5 GHz band may also have overlapping channels, but more channels are available. You can use free or cheap apps on Android devices or laptops to check the use of Wi-Fi channels.
6. Physical Security of wireless access points and networks
Security is not just a password. You can use the world's longest and most complex password on your Wi-Fi, but someone can bypass it in seconds through a physical access network. For example, they only need to insert a pen tip in the reset button to restore the default factory value, or they can insert their own AP with another password on the open network wall or switch port.
Ensure that wireless access points, lines, and all other network components are away from the public. If your building has a false ceiling, consider placing the Wireless Access Point on it instead of installing the wireless access point on the ceiling or wall. Make sure that other network components such as routers, switches, and wireless controllers are stored in a locked closet or room. You can also consider using a lockable network rack or cabinet.
7. Run the speed test to evaluate the performance
When connecting to each Wireless Access Point and SSID, it is a good way to run some Internet speed tests on the download speed and upload speed between the End User device and the Internet. This can help you verify any bandwidth restrictions (such as guest SSID), or you may find that you accidentally impose restrictions on the private network. You also need to run a local speed test to verify the performance of the wireless network. We recommend that you run these local speed tests on each access point and each SSID.
8. Pay attention to the accurate location of the Wireless Access Point
After installing multiple wireless access points, be sure to paste the Access Point tag, write down their location or mark them on the floor plan, and save them with other network documents. You can take a photo of a location out of sight, such as a ceiling brick. This avoids the headache of tracking access points. If you are not around, it is very helpful for others. Remember to update the location of the Wireless Access Point at any time.
9. Ensure that the Administrator's access permission is protected
Although changing the administrator password is one of the first steps for initial configuration of a network device, it will be forgotten or ignored. You do not want a curious or unfriendly user to start the Web GUI and gain administrator access to your wireless access point by searching for the default password online. After powering each access point, check again whether the default password is invalid and you have imposed a strong password.
In addition to changing the default password, you also need to consider preventing Wi-Fi access to wireless access points and Web GUI of other network components after installation. Blocking management interfaces from wireless users can help prevent curious users from even attempting to access devices.
Some access points have special settings for controlling access to the management interface. For example, you can specify the IP addresses of devices that can access the Web GUI, this setting is usually in other management GUI management settings or VLAN settings, so you can enable administrator access permissions for each VLAN separately. For wireless access points that do not provide such settings, check the vro documentation to learn how to create firewall rules to prevent access to some subnets or VLAN management guis.