Information Technology

Study Guide
Semester 2 2013


6EWS

Enterprise Wireless Security

Incorporating
ICANWK607A Design and implement wireless network security
Copyright 2012 Government of South Australia

Document ID: 6EWS_StudyGuide_130072900.docx



Information Technology
Studies
TAFESA South
Adelaide: 8207 8350
Noarlunga: 82073947
Document1 Page 2 of 11

TABLE OF CONTENTS

Welcome ................................................................................................................. 3
Subject Details: ....................................................................................................... 3
Study Assistance .................................................................................................... 3
Modes of Delivery ................................................................................................... 4
Prerequisites ........................................................................................................... 4
Resources Required ............................................................................................... 4
Online moodle resources ..................................................................................... 4
Hardware ............................................................................................................. 4
Software .............................................................................................................. 4
Textbook .............................................................................................................. 5
Competencies ......................................................................................................... 6
ICANWK607A Design and implement wireless network security (BAAGR) ......... 6
Employability Skills.................................................................................................. 8
Content Overview ................................................................................................... 9
Assessment ...........................................................................................................10
Assessment Tasks .............................................................................................10
Assessment Strategy..........................................................................................10
Assessment Matrix .............................................................................................11
References .............................................................................................................11

Document1 Page 3 of 11
Welcome

Welcome to studying Enterprise Wireless Security.

This subject will introduce students to the skills and knowledge required to mitigate
security threats to a wireless local area network (WLAN) by implementing security
standards and policies.

The study guide details the schedule to follow to successfully complete this subject
including important information about pre-requisite knowledge expected, resources
required and most importantly how you will be assessed.

Subject Details:
Use the following to summarise the details for your subject -

Lecturer: ..................................................................................
Email: ......................................................................................
Telephone: ...............................................................................
Class Time: ..............................................................................
Room: ......................................................................................

Study Assistance
At times during your study you might need to ask for help with a problem for
example, you might want more practice exercises, or you might want some advice
about elective or career options. Dont hesitate to speak to your lecturer about any of
these matters. They can help you plan your study and give you advice.

If youre having difficulty with a particular learning component, speak to someone
about it. Ask for more help and further explanations. Try to sort the problem out
sooner rather than later - dont leave it until your final assessment! Work with other
learners. Pool your knowledge and work through problems together in small groups.
Discuss issues, share research, review each others work and give one another
feedback. However, in most cases, each student must submit their own individual
work for assessment.

There are various IT drop-in tutorials available for extra assistance. Please check
your email and/or the notice boards outside the IT studies office for more details
regarding times and location.

It is important that you feel you have the ability to cope with your study load. If you
are having problems please contact us as there are many support services which
may be of help to you. The TAFESA website www.tafesa.edu.au
should be referred to for the following policies and responsibilities:
Access and Equity
Support Services
Assessment
Health and Safety
Document1 Page 4 of 11
Plagiarism and cheating
Internet User Agreement
Modes of Delivery
This subject is delivered using a blended approach; a mixture of online information
and classroom delivery.

Resources are available on the TAFESA moodle site:
moodle.tafesa.edu.au/

Prerequisites
Subjects may have required prior knowledge. A prerequisite subject must be
completed before starting this subject. Occasionally there will be a co-requisite
subject; this means that the subject must either be done before or at the same time
as this subject. The following table summarises the pre or co requisites for this
subject:

Prerequisites
5CDD, 4WNI
Co-requisites



Resources Required
Online moodle resources
Refer to moodle.tafesa.edu.au/
For the learning activities for each session

Hardware
1 x WLAN Controller (WLAN Switch)
2 x Lightweight APs 802.11 a/b/g/n, PoE capable (optional)
2 each WPA2-certified 802.11 a/b/g/n client devices (USB2)
2 x Autonomous AP (Linksys, Cisco, Netgear etc)
1 x Laptop not continuous use used only for site survey stage and other
relevant topics.
Minimum 1.4 GHz x86-64 system capable of running Hyper-V (Intel VT or
AMD-V enabled)
Minimum memory 1GB, recommended enough memory to run the host
operating system, plus the memory required for each guest operating system
and for applications on the host and guest.
15 GB of free disk space

Software
Microsoft Windows Server 2008R2
VMware Workstation 8 or later.
Microsoft Windows 7


Document1 Page 5 of 11
Textbook
Aruba Mobility Academy Student Handbook
Tafe SA Moodle
Document1 Page 6 of 11
Competencies
This subject will cover the competencies listed below from the National Information
Technology Training Package (ICA11):

ICANWK607A Design and implement wireless network security (BAAGR)
ELEMENT PERFORMANCE CRITERIA
1. Plan to
implement
wireless
network
security
1.1 Research and evaluate organisational and
regulatory security policies that have been used to
benchmark acceptable network security standards
1.2 Assess customer requirements and needs against
regulatory security compliance and OHS
considerations
1.3 Produce a plan with security-solution documentation
for future growth and security needs
2. Design,
implement
and test
guest access
services
2.1 Analyse and select the appropriate architecture for
guest access services
2.2 Produce a map and set up guest access accounts
2.3 Configure WLAN controller authorisation
2.4 Configure the anchor and internal controllers
2.5 Troubleshoot guest access issues
3. Design,
implement
and test the
security of
wireless
client
devices
3.1 Design and configure authentication of clients and
management frame protection on clients and
controllers
3.2 Configure access control servers for integration with
wireless network
3.3 Configure client and server-side digital certificate
services
3.4 Troubleshoot secure wireless connectivity services
4. Design,
implement
and test the
integration of
wireless
network with
organisation
al network
admission
control
systems
4.1 Analyse network admission control architectures to
assess the feasibility of network integration
4.2 Analyse the high-level authentication process flow to
ensure compatible integration
4.3 Configure and test the wireless controller for
admission control
4.4 Troubleshoot integration issues of network with
access control
5. Evaluate and
plan secure
wireless
connectivity
services
5.1 Configure the intrusion detection system (IDS) to
monitor the network activities for malicious activities
or policy violations
5.2 Analyse the report produced by the IDS to review
threat-mitigation strategies
5.3 Update security solution plan to mitigate wireless
vulnerabilities to ensure network integrity
Document1 Page 7 of 11
6. Manage the
requirements
to integrate
the WLAN
with
advanced
security
platforms
6.1 Evaluate end-to-end security solutions and assess
how they integrate with the planned wireless
solutions
6.2 Analyse the firewall configuration requirements of
WLANs to ensure compliance with organisational
policies
6.3 Configure and test the WLAN controllers for wired
and wireless intrusion prevention and detection
system (IPDS) security protection

Document1 Page 8 of 11
Employability Skills
The ICA11 Information and Communications Training Package seeks to ensure that
industry-endorsed employability skills are explicitly embedded in units of competency.
The application of each skill and the level of detail included in each part of the unit
will vary according to industry requirements and the nature of the unit of competency.

Employability skills are both explicit and embedded within units of competency. This
means that employability skills are:

embedded in units of competency as part of the other performance
requirements that make up the competency as a whole
explicitly described within units of competency to enable Training Package
users to identify accurately the performance requirements of each unit with
regards to employability skills.

ICA11 Information and Communications Technology Training Package also seeks to
ensure that employability skills are well-defined and written into units of competency
so that they are apparent, clear and can be delivered and assessed as an essential
component of unit work outcomes.

We shall be incorporating these in our learning and assessment.

For more information on employability skills visit

http://employabilityskills.training.com.au/


Document1 Page 9 of 11
Content Overview

Session Topics Competency
1. 1-WLAN Architecture (up to Aruba Products
Review)
ICANWK607A
2. Hands-on labs ICANWK607A
3. Hands-on labs ICANWK607A
4. Microsoft NPS Server ICANWK607A
5. Microsoft NPS Server (continued) ICANWK607A
6. 1-WLAN Architecture (from Aruba Products Review) ICANWK607A
7. 2-Initial Setup ICANWK607A
8. 3-WLAN Configuration ICANWK607A
9. 4-AP Provision ICANWK607A
10. 16-WIPS ICANWK607A
11. Assignment work/ Labs ICANWK607A
12. 6EWS Theory Test ICANWK607A
13. 6EWS Theory Test - Resit ICANWK607A
14. Assignment Due ICANWK607A
Competencies:
ICANWK607A Design and implement wireless network security (BAAGR)

Refer to moodle site for Learning Activities for each session
moodle.tafesa.edu.au/

Document1 Page 10 of 11
Assessment
Assessment Tasks
In order to pass this subject (i.e. gain competency), you need to complete the
following:
Practical Activities
Theory Test
Written Report

Assessment Strategy
In each assessment you will have the opportunity to resit or resubmit once if it is not
successfully completed on the first attempt. If there are merit sections the opportunity
to gain merit towards a Credit or Distinction is only available on the first attempt of an
assessment. That is, merit cannot be gained on a resit or resubmission. All
assessments must be successfully completed before being considered as competent
in this subject. Ensure that you have read the Plagiarism and cheating policy on the
TAFESA website.

Assessment tasks submitted after the due date without an agreed extension will be
considered as a resubmission and will not attract any available merit.

This subject is graded as Distinction, Credit, Pass or Fail. There will be merit
components within the assessment instruments which will allow you to obtain merit
points.

It will be possible to gain a maximum of six merit points.
You will receive a grade of D (Distinction) for a merit point score of 5 or greater.
You will receive a grade of C (Credit) for a merit point score of 3 to 4.
You will receive a grade of P (Pass) for a merit point score of less than 3.

Merit points can be gained as follows :
Test has 2 merit components
Practical Activities has 2 merit components
Written report has 2 merit components


The merit components will be clearly identified in each assessment and will cover the
competencies listed earlier but will also allow you to demonstrate:
A high degree of precision will still meeting deadlines
Originality and independence of thought
Ability to apply knowledge and skills in a variety of contexts


Document1 Page 11 of 11
Assessment Matrix

ICANWK607A Design and implement wireless network security (BAAGR)
Element Performance
Criteria
Test Practical
Activities
Written
Report
1. Plan to implement wireless
network security
1.1
1.2
1.3












2. Design, implement and
test guest access services
2.1
2.2
2.3
2.4
2.5















3. Design, implement and
test the security of wireless
client devices
3.1
3.2
3.3
3.4















4. Design, implement and
test the integration of wireless
network with organisational
network admission control
systems
4.1
4.2
4.3
4.4















5. Evaluate and plan secure
wireless connectivity services
5.1
5.2
5.3









6. Manage the requirements
to integrate the WLAN with
advanced security platforms
6.1
6.2
6.3










References

#SUBJECT_REFERENCES#