CWDP 305 Chapter 8 Design Validation

Validating a wireless network deployment is a critical step to ensure the WLAN was installed and configured correctly. Before performing surveys, engineers should verify that APs are placed in the correct locations, configurations and security settings are accurate, and supporting services such as DNS, DHCP, and captive portals function properly. A post-validation survey can then compare the live network against the original design to identify gaps and establish a performance baseline.

Passive surveys are useful for validating coverage, signal strength, and AP configurations, while active surveys provide deeper insight into throughput, roaming, and real client performance. Any issues discovered during validation should be documented to support future optimization and improve future WLAN designs.

Physical and Logical Configuration

Even if you already visited the site during the design phase, it is important to walk through the environment again after installation because deployments rarely go exactly as planned. AP placements can change due to unexpected obstacles or because installers choose easier mounting locations instead of following the design. I once revisited a site after completing my WLAN design and was shocked to see that the APs were mounted almost randomly simply because it was easier for the installers. Some APs with external antennas were also not aligned according to the design specifications, which can significantly impact coverage patterns and performance. Instead of following the design, convenience took priority. In the end, the installation had to be corrected so the APs were mounted according to the original design, while also documenting which MAC address was installed at each location.

A post-installation walkthrough helps confirm that APs and antennas are mounted correctly and functioning as expected. Taking photos, marking locations, and checking AP LED status can quickly verify whether devices are powered, connected, and ready for validation testing.

AP and WLAN misconfigurations are often simple but can significantly impact performance if overlooked. Issues such as incorrect labeling, APs not being fully configured, radios being disabled, or APs joining the wrong controller can all create unexpected problems. It is also important to verify SSID-to-VLAN mappings, device group assignments, enabled frequency bands, supported data rates, and PoE levels to ensure APs operate as intended. Channel and transmit power settings, whether statically configured or dynamically managed by RRM, should also be reviewed. Allowing RRM enough time to stabilize before performing validation surveys helps prevent misleading results and provides a more accurate representation of network performance.

Security Aspects of the Infrastructure

Security validation is an essential part of WLAN deployment, ensuring secure and reliable access for clients and infrastructure. This includes verifying required services such as DHCP, DNS, RADIUS, CAPWAP, and NTP, while also confirming that authentication methods, VPN connectivity, and NAT/PAT configurations function correctly and can support future growth.

Common EAP Methods Overview

EAP Method Characteristics (Carpenter et al., p429)

When troubleshooting performance issues, especially with 802.11n rates, ensure WPA2 with AES is enabled. Proper VPN routing and sufficient NAT/PAT capacity are also important to maintain secure and scalable wireless connectivity.

Physical and Logical Aspects of the Supporting Infrastructure

Even though wireless engineers are not expected to be wired experts, the wired infrastructure plays a major role in how well a WLAN performs. Things like correct VLAN configuration, sufficient PoE, and proper uplink speeds are essential to keep APs fully operational. Features such as QoS, routing, and redundancy must also be aligned across the network to avoid performance issues. In addition, core services like DHCP and DNS need to be correctly configured and sized to ensure reliable connectivity for both APs and clients.

Captive Portals

Captive portals should be tested to ensure they are secure, user-friendly, and compatible with different client devices. Misconfigurations such as missing ACLs or incorrect VRF settings can create security risks, so onboarding and internet access must be validated carefully.

These checks are typically performed during a validation survey after deployment. Validation surveys confirm WLAN coverage, roaming, connectivity, security, and application performance. Passive surveys are commonly used, but combining them with real client testing provides more accurate results. Modern tools such as Ekahau and AirMagnet simplify this process and help ensure reliable WLAN performance and user experience.

Passive and Active Surveys

Passive surveys validate WLAN coverage, signal strength, SNR, channel usage, and interference without connecting to the network. They are useful for confirming AP placement, detecting issues such as Adjacent Channel Interference (ACI) and Co-Channel Interference (CCI), and validating RRM behavior. Signal strength and SNR are key indicators of achievable performance, while proper channel and power planning help reduce interference and contention.

Active surveys focus on real network performance by measuring throughput, retransmissions, packet loss, jitter, roaming, and capacity. They provide insight into actual client experience and help identify performance bottlenecks caused by airtime contention or poor roaming behavior. Since client behavior varies, real-world testing with actual devices remains essential.

Both survey types are important for validating WLAN deployments and should be combined with practical testing to achieve the most accurate view of network health and performance. Site survey concepts and methodologies are covered in more detail in Chapter 4: Site Surveys.

Additional Forms of Validation Testing

Beyond site surveys, one of the most effective ways to validate a WLAN is by testing it under real-world conditions using the client’s target or least capable device. Practical testing provides realistic insight into network quality, especially for roaming, capacity, and overall user experience. Roaming performance is best evaluated through live scenarios such as voice or video calls, supported by device logs and analysis tools.

For throughput and performance validation, tools such as IPerf3 are commonly used to measure throughput, QoS, jitter, packet loss, and backhaul capacity. Many professional platforms, including NetScout AirCheck G2, Ekahau, and AirMagnet, integrate similar testing capabilities. Using controlled and repeatable internal tests instead of internet speed tests ensures results accurately reflect WLAN performance.

All‐in‐One Tools

Many tools are available for WLAN validation, from free open-source software to advanced professional solutions. Popular options include the NetScout AirCheck G2 for testing APs, roaming, interference, and throughput, and the low-cost WLAN Pi, which supports tools like Kismet and IPerf for traffic and performance analysis.

For macOS users, Wi-Fi Explorer Pro provides detailed WLAN visibility, spectrum analysis, and packet capture capabilities, while Windows users often use Acrylic Wi-Fi for scanning, heatmaps, and troubleshooting. Regardless of the tool used, proper validation and real-world client testing remain essential to confirm WLAN coverage, roaming, performance, and correct configuration.

Until next time, keep the signal strong!

Source(s):

Carpenter, T., et al. (2024). CWDP-305: Certified Wireless Design Professional Study Guide (1st ed.). Durham NC, USA: Certitrek Publishing