Test Case

Show / Hide direct link   <MAIN> 3194PA: LEAP Wireless Authentication Verification - PP-80413



Version 1.7
Created on 25/01/2006 18:53:56  by Muralidharan Seshadri
Summary
Preconditions
Status:   New
Priority:   Medium
BASIC INFORMATION
Section:S/W Test Require attachment:No
Team:Network Group:Basic Function
Lessons Learned:No Phase:FVT, SIV (BBFV), SIT
Locations:Inhouse: AWS and Cambridge, Inhouse: AWS, Inhouse: Cambridge, Compal, Flextronics, Quanta, Wistron Owned By:Eiji Ogata/LENOVO
Objective:To verify the LEAP authentication verification on ThinkPad using all supported WL adapters.
CRITERIA
Successful LEAP authentications
No system malfunction/performance degradation
EUT QUANTITY
Two systems
EQUIPMENT
PA Networking facilities.
Critical Attribute:[0] : WLS - Wireless

CONFIGURATION
REFERENCE PROCEDURE


LEAP Authentication Concept



Server Side
  1. Install Windows 2003 /Windows 2000 Server
  2. Install and Configure Active Directory Services. For Configuring Active Directory Service, refer Microsoft Help information.
  3. Install and Configure DHCP Server
  4. Install Cisco ACS Server . For Installation Guidence Refer Attached Cisco Documentation link
  5. Note :-
  6. The User Authentication will be done by Cisco ACS DB.

http://www.cisco.com/en/US/products/sw/secursw/ps2086/prod_technical_documentation.html

Access Point Side

Update Latest firmware in Cisco 350 AP / Cisco 1200 AP . Firmware can be downloaded from the following Cisco Link.

http://www.cisco.com/pcgi-bin/Software/WLAN/wlplanner.cgi

Configure the Wireless Accesspoint for LEAP Authentication as per Attached Cisco Documentation

Attachment "bkscgc8.pdf"can be seen at the bottom of the page.


STATISTIC INFO
Operating System Win81-64bit Win81-32bit Win7- 64bit Win7- 32bit Total
Test Points
Duration
Workload
# Step actions Win81-64bitWin81-32bitWin7- 64bitWin7- 32bit
1 LEAP Verification Authentication Matrix AAAA
2 Prompt for User Credentials Behavior for Access Connections AAAA
3 LEAP Verification with Access Connection AAAA
4 CCX-5 AAAA
5 LEAP Profile verification with Login Script AAAA
DETAILS
ATTENTION!! Please follow below information.
1. Please check Error and Warning message in Event Viewer before you start the test case and after you complete the test case, and report it to your team lead, then arrange to open defect, if needed.

2. Perform All Test in Battery Mode (Some of the test items need to perform in AC Mode, follow each Test Case).

3. All Test Activity should be performed with AMT Enabled as Default (applicable on vPro enabled systems).

4. Please check Usability / Cosmetic issues (correct sentence/appropriate display/etc.) and open defect, if needed.

LEAP Verification Authentication Matrix

Using Access Connections
Authentication
SSID
Authentication
Server
User Credential
Encryption
Intel
Realtek
Broadcom
LEAP
LEAPWEP
CISCO ACS
Windows Username & Password
WEP
A
A
A
Saved Username & Password
WEP
A
A
A
AutoPrompt Username & Password
WEP
A
A
A
ManualPrompt Username & Password
WEP
A
A
A
LEAPCKIP
CISCO ACS
Windows Username & Password
CKIP
A
A
A
Saved Username & Password
CKIP
A
A
A
AutoPrompt Username & Password
CKIP
A
A
A
ManualPrompt Username & Password
CKIP
A
A
A
LEAPTKIP
CISCO ACS
Windows Username & Password
TKIP
A
A
A
Saved Username & Password
TKIP
A
A
A
AutoPrompt Username & Password
TKIP
A
A
A
ManualPrompt Username & Password
TKIP
A
A
A
LEAPAES
CISCO ACS
Windows Username & Password
AES
A
A
A
Saved Username & Password
AES
A
A
A
AutoPrompt Username & Password
AES
A
A
A
ManualPrompt Username & Password
AES
A
A
A
LEAP-CCKM
LEAPWEPCCKM
CISCO ACS
Windows Username & Password
WEP
A
A
A
Saved Username & Password
WEP
A
A
A
AutoPrompt Username & Password
WEP
A
A
A
ManualPrompt Username & Password
WEP
A
A
A
LEAPCKIPCCKM
CISCO ACS
Windows Username & Password
CKIP
A
A
A
Saved Username & Password
CKIP
A
A
A
AutoPrompt Username & Password
CKIP
A
A
A
ManualPrompt Username & Password
CKIP
A
A
A
LEAPTKIPCCKM
CISCO ACS
Windows Username & Password
TKIP
A
A
A
Saved Username & Password
TKIP
A
A
A
AutoPrompt Username & Password
TKIP
A
A
A
ManualPrompt Username & Password
TKIP
A
A
A
LEAPAESCCKM
CISCO ACS
Windows Username & Password
AES
A
A
A
Saved Username & Password
AES
A
A
A
AutoPrompt Username & Password
AES
A
A
A
ManualPrompt Username & Password
AES
A
A
A


Using Zero Config
Test Item
Configuration
Intel
Realtek
Broadcom
128 bit WEP Verification
Standalone
A
A
A
TKIP Verification
Standalone
A
A
A
AES Verification
Standalone
A
A
A
CCKM Verification
Standalone
A
A
A


Prompt for User Credentials Behavior for Access Connections

GS - Global Settings option (Close all wireless network connections when user logs off.)
Yes - Prompt a Dialog Box
No - No Prompt


LEAP
Standby
Hibernate
Logon/Logoff
Restart
Disable (GS)
Automatic Prompt
No
No
No
Yes
Manual Prompt
No
No
No
Yes
Enable (GS)
Automatic Prompt
No
No
Yes
Yes
Manual Prompt
No
No
Yes
Yes


While providing the Username/Password/Domain Name during LEAP connectivity, make sure the maximum characters that can be input for each field matches the following table
Intel
Realtek
Broadcom
Auto Prompt
Username
Password
DomainName
LEAP Profiles
Manual Prompt
Username
Password
DomainName
Saved Username
Username
Password
DomainName

LEAP Verification with Access Connection

Check the below scenarios with WL client as Workgroup member and Domain member

Perform the below test scenarios in both Admin and User modes

Test Item
Configuration
Win7 [32/64]
Win8 [32/64]
LEAP with Saved username and Password

1. Install the Wireless Driver as per Build Letter and restart
2. Install Access Connection as per Build Letter and restart
3. Create a LEAP-WEP Profile using Access Connection as follows:
Select the Wireless Security Type "Use 802.1xEAP Cisco(LEAP)"
Set the Data Encryption type as "WEP"
Select "Use Saved username and password"
4. Save and apply the profile
5. Check LEAP Authentication is successfull
6. Check IP Address is assigned by DHCP Server
7. Ping Gateway IP address and ensure N/W Connectivty is available
8. Change the Encryption Type as "CKIP" in step 3 & confirm steps 4-7

[UR-02876AP]
Note:
CKIP is no longer part of CCX tests. The Cisco EAP plugins GUI have support only for AES,AES_MFP,TKIp & TKIP-MFP. Broadcom uses the Cisco pluggin which does not have this functionality.
ECR66015 VIS:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN
ECR66016 W7:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN


9. Change the Encryption Type as "TKIP" in step 3 & confirm steps 4-7
10. Change the Encryption Type as "AES" in step 3 & confirm steps 4-7
Standalone
LEAP with Manually Prompt username and Password

1. Create a LEAP-WEP Profile using Access Connection as follows:
Select the Wireless Security Type "Use 802.1xEAP Cisco(LEAP)"
Set the Data Encryption type as "WEP"
Select "Manually prompt for LEAP username and password"
2. Save and apply the profile
3. Check LEAP Authentication is successfull
4. Check IP Address is assigned by DHCP Server
5. Ping Gateway IP address and ensure N/W Connectivty is available
6. Change the Encryption Type as "CKIP" in step 1 & confirm steps 2-5
Note:
CKIP is no longer part of CCX tests. The Cisco EAP plugins GUI have support only for AES,AES_MFP,TKIp & TKIP-MFP. Broadcom uses the Cisco pluggin which does not have this functionality.
ECR66015 VIS:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN
ECR66016 W7:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN

7. Change the Encryption Type as "TKIP" in step 1 & confirm steps 2-5
8. Change the Encryption Type as "AES" in step 1 & confirm steps 2-5
Standalone
LEAP with Auto Prompt username and Password

1. Create a LEAP-WEP Profile using Access Connection as follows:
Select the Wireless Security Type "Use 802.1xEAP Cisco(LEAP)"
Set the Data Encryption type as "WEP"
Select "Automatically prompt for LEAP username and password"
2. Save and apply the profile
3. Check LEAP Authentication is successfull
4. Check IP Address is assigned by DHCP Server
5. Ping Gateway IP address and ensure N/W Connectivty is available
6. Change the Encryption Type as "CKIP" in step 1 & confirm steps 2-5
Note:
CKIP is no longer part of CCX tests. The Cisco EAP plugins GUI have support only for AES,AES_MFP,TKIp & TKIP-MFP. Broadcom uses the Cisco pluggin which does not have this functionality.
ECR66015 VIS:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN
ECR66016 W7:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN

7. Change the Encryption Type as "TKIP" in step 1 & confirm steps 2-5
8. Change the Encryption Type as "AES" in step 1 & confirm steps 2-5
Standalone
LEAP with SSO
(Make sure global setting option "Allow wireless connection at windows logon(requires system restart) is enabled"

1. Create a LEAP-WEP Profile using Access Connection as follows:
Select the Wireless Security Type "Use 802.1xEAP Cisco(LEAP)"
Set the Data Encryption type as "WEP"
Select "Use windows logon username and password"
2. Save and apply the profile
3. Check LEAP Authentication is successfull
4. Check IP Address is assigned by DHCP Server
5. Ping Gateway IP address and ensure N/W Connectivty is available
6. Change the Encryption Type as "CKIP" in step 1 & confirm steps 2-5
Note:
CKIP is no longer part of CCX tests. The Cisco EAP plugins GUI have support only for AES,AES_MFP,TKIp & TKIP-MFP. Broadcom uses the Cisco pluggin which does not have this functionality.
ECR66015 VIS:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN
ECR66016 W7:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN

7. Change the Encryption Type as "TKIP" in step 1 & confirm steps 2-5
8. Change the Encryption Type as "AES" in step 1 & confirm steps 2-5
Standalone
LEAP-CCKM with Saved username and Password

1. Install the Wireless Driver as per Build Letter and restart
2. Install Access Connection as per Build Letter and restart
3. Create a LEAP-WEP Profile using Access Connection as follows:
Select the Wireless Security Type "Use 802.1xEAP Cisco(LEAP)"
Set the Data Encryption type as "WEP"
Select "Use Saved username and password"
Enable the option "Allow Fast Roaming (CCKM)
4. Save and apply the profile
5. Check LEAP Authentication is successfull
6. Check IP Address is assigned by DHCP Server
7. Ping Gateway IP address and ensure N/W Connectivty is available
8. Confirm in Access Point Event Log that "Interface Dot11Radio0,
Station machine name MAC Address KEY_MGMT[CCKM]" appears
for the successful CCKM connection
9. Change the Encryption Type as "CKIP" in step 3 & confirm steps 4-8
Note:
CKIP is no longer part of CCX tests. The Cisco EAP plugins GUI have support only for AES,AES_MFP,TKIp & TKIP-MFP. Broadcom uses the Cisco pluggin which does not have this functionality.
ECR66015 VIS:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN
ECR66016 W7:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN

10.Change the Encryption Type as "TKIP" in step 3 & confirm steps 4-8
11.Change the Encryption Type as "AES" in step 3 & confirm steps 4-8

Limitation with Intel adapters
CMVC# 64185 XP/2K:LEAPCKIP-CCKM behaves differently in Intel & Atheros

1.Set the Access Point setting as LEAPWEP with CCKM option not selected.
2.Create a profile in client for LEAPWEP with CCKM option selected
3.The connection shall still be establised in the case of Intel adapters ==>Design with Intel adapters

CMVC#64236 CCKM:TKIP auth passes even with WEP configured client

1.Set the Access Point setting as LEAP-TKIP-CCKM
2.Create a profile in client as LEAP-WEP-CCKM and apply the profile
3.In the case of Intel adapters , connection should not be establised
Standalone
LEAP-CCKM with Manually Prompt username and Password

1. Create a LEAP-WEP Profile using Access Connection as follows
Select the Wireless Security Type "Use 802.1xEAP Cisco(LEAP)"
Set the Data Encryption type as "WEP"
Select "Manually prompt for LEAP username and password"
Enable the option "Allow Fast Roaming (CCKM)
2. Save and apply the profile
3. Check LEAP Authentication is successfull
4. Check IP Address is assigned by DHCP Server
5. Ping Gateway IP address and ensure N/W Connectivty is availabled
6. Confirm in Access Point Event Log that "Interface Dot11Radio0,
Station machine name MAC Address KEY_MGMT[CCKM]" appears
for the successful CCKM connection
7. Change the Encryption Type as "CKIP" in step 1 & confirm steps 2-6
Note:
CKIP is no longer part of CCX tests. The Cisco EAP plugins GUI have support only for AES,AES_MFP,TKIp & TKIP-MFP. Broadcom uses the Cisco pluggin which does not have this functionality.
ECR66015 VIS:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN
ECR66016 W7:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN

8. Change the Encryption Type as "TKIP" in step 1 & confirm steps 2-6
9. Change the Encryption Type as "AES" in step 1 & confirm steps 2-6
Standalone
LEAP-CCKM with Auto Prompt username and Password

1. Create a LEAP-WEP Profile using Access Connection as follows
Select the Wireless Security Type "Use 802.1xEAP Cisco(LEAP)"
Set the Data Encryption type as "WEP"
Select "Automatically prompt for LEAP username and password"
Enable the option "Allow Fast Roaming (CCKM)
2. Save and apply the profile
3. Check LEAP Authentication is successfull
4. Check IP Address is assigned by DHCP Server
5. Ping Gateway IP address and ensure N/W Connectivty is availabled
6. Confirm in Access Point Event Log that "Interface Dot11Radio0,
Station machine name MAC Address KEY_MGMT[CCKM]" appears
for the successful CCKM connection
7. Change the Encryption Type as "CKIP" in step 1 & confirm steps 2-6
Note:
CKIP is no longer part of CCX tests. The Cisco EAP plugins GUI have support only for AES,AES_MFP,TKIp & TKIP-MFP. Broadcom uses the Cisco pluggin which does not have this functionality.
ECR66015 VIS:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN
ECR66016 W7:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN

8. Change the Encryption Type as "TKIP" in step 1 & confirm steps 2-6
9. Change the Encryption Type as "AES" in step 1 & confirm steps 2-6
Standalone
LEAP-CCKM with SSO
(Make sure global setting option "Allow wireless connection at windows logon(requires system restart) is enabled"

1. Create a LEAP-WEP Profile using Access Connection as follows
Select the Wireless Security Type "Use 802.1xEAP Cisco(LEAP)"
Set the Data Encryption type as "WEP"
Select "Use windows logon username and password"
Enable the option "Allow Fast Roaming (CCKM)
2. Save and apply the profile
3. Check LEAP Authentication is successfull
4. Check IP Address is assigned by DHCP Server
5. Ping Gateway IP address and ensure N/W Connectivty is availabled
6. Confirm in Access Point Event Log that "Interface Dot11Radio0,
Station machine name MAC Address KEY_MGMT[CCKM]" appears
for the successful CCKM connection
7. Change the Encryption Type as "CKIP" in step 1 & confirm steps 2-6
Note:
CKIP is no longer part of CCX tests. The Cisco EAP plugins GUI have support only for AES,AES_MFP,TKIp & TKIP-MFP. Broadcom uses the Cisco pluggin which does not have this functionality.
ECR66015 VIS:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN
ECR66016 W7:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN

8. Change the Encryption Type as "TKIP" in step 1 & confirm steps 2-6
9. Change the Encryption Type as "AES" in step 1 & confirm steps 2-6
Standalone
CCKM Roaming Functionality Verification

Access Points Requirement
One WDS Access Point and Two LEAP CCKM Access Points

1. Configure one WDS AP &
two LEAP-CCKM AP with same SSID
2. Launch AC on the client system and create LEAP-CCKM
(with WEP Encryption) wireless profile.
3. Go to the command prompt and "ping" to the gateway with -t option.
(example if Gateway IP 192.168.40.1)
C:\>ping 192.168.40.1 -t
4. Switch off the associated AP. (e.g: LEAP-CCKM Access Point A -
assume that the client is associated to Access Point A)
5. Make sure that the connection should not drop more than a few
seconds by checking the ICMP reply messages from the Gateway at
the command prompt. (The client should roam to the second AP
within a few seconds and there should not be more than 2 Request
Timed Out)

Perform the above verification procedures (from Step 1 to 5) for other encryptions (TKIP/CKIP & AES).
Standalone
WL setting change from LEAP to NOWEP : [UR-1561DS]

1. Create a LEAP-WEP Profile using Access Connection as follows:
Select the Wireless Security Type "Use 802.1xEAP Cisco(LEAP)"
Set the Data Encryption type as "WEP or TKIP or CKIP or AES"
Note:
CKIP is no longer part of CCX tests. The Cisco EAP plugins GUI have support only for AES,AES_MFP,TKIp & TKIP-MFP. Broadcom uses the Cisco pluggin which does not have this functionality.
ECR66015 VIS:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN
ECR66016 W7:LEAP-CKIP profile cannot connect using Walton Broadcom WLAN

2. Save and apply the profile
3. Check LEAP Authentication is successfull.
4. Now edit the profile and change the Wireless security type to "None
(encryption is disabled)" and SSID as RODNEYand give OK ===>
key point.
5. Connect the profile from Main GUI.
6. Profile should connect successfully.
7. Confirm that there should not be any error message.
8. Confirm that there should not be any user credential popup.

Refer to CMVC # 83029 ==> XP/2K: Usr credential popup apprs w/change WL setting to NOWEP
Standalone
PM (Suspend) Related Test
1. Set the LEAP Profile as Active Profile
2. Run Ping command to gateway (example Ping 192.168.1.1 -t)
3. Close the Lid
4. System will Enter Suspend Mode
5. Resume the system after five Minutes
6. UnLock the System
7. Check N/W connection is restored
8. Repeat step 2~7 for 50 times

(UR-03037AP)
Note: For Intel Wireless Cards in Windows 7 and Vista, Wireless profile authentication does not prompt even if "remember my user credentials" option is unchecked. This is working as designed using Intel Wireless LAN cards. (Ref:ECR83575, ECR86357)
Standalone
PM (Hibernation) Related Test
1. Set the LEAP Profile as Active Profile
2. Run Ping command to gateway (example Ping 192.168.1.1 -t)
3. Press Fn+F12
4. System Enters to Hibernation Mode
5. Resume the system after five Minutes
6. UnLock the System
7. Check N/W connection is restored
8. Repeat step 2~7 for 50 times

Note: For Intel Wireless Cards in Windows 7 and Vista, Wireless profile authentication does not prompt even if "remember my user credentials" option is unchecked. This is working as designed using Intel Wireless LAN cards. (Ref:ECR83575, ECR86357)
Standalone
Power Management - LID Close - UR-2730

1. Set the LEAP Profile as Active Profile
2. After Successfull authentication and Network Connection is established close the lid to suspend the system
3. Resume the system by opening the lid after 1 minute.
4. Ensure Authentication is successfull and Network Connectivity is restored to the previously connected AP /Network.
5. Repeat Steps 1-3 for 10 times and verify the criteria

Note: For Intel Wireless Cards in Windows 7 and Vista, Wireless profile authentication does not prompt even if "remember my user credentials" option is unchecked. This is working as designed using Intel Wireless LAN cards. (Ref:ECR83575, ECR86357)
  • Authentication shall be successful after each PM
  • Network Connectivity shall be established after each PM
  • No Error Message occurs
Logoff/Login with Suspend/Resume
  1. After Successful authentication and Network Connection is established,logoff the system
  2. Now login to the system again
  3. Ensure Authentication is successful and Network Connectivity is restored to the previously connected AP /Network.
  4. Press Fn+F4 to suspend the system
  5. Resume after 1 minute.
  6. Ensure Authentication is successful and Network Connectivity is restored to the previously connected AP /Network.

Note: For Intel Wireless Cards in Windows 7 and Vista, Wireless profile authentication does not prompt even if "remember my user credentials" option is unchecked. This is working as designed using Intel Wireless LAN cards. (Ref:ECR83575, ECR86357)

  • Authentication shall be successful after each PM
  • Network Connectivity shall be established after each PM
  • No Error Message occurs
Logoff/Login with Hibernation/Resume
  1. After Successful authentication and Network Connection is established,logoff the system
  2. Now login to the system again
  3. Ensure Authentication is successful and Network Connectivity is restored to the previously connected AP /Network.
  4. Press Fn+F12 to hibernate the system
  5. Resume after 1 minute.
  6. Ensure Authentication is successful and Network Connectivity is restored to the previously connected AP /Network.

Note: For Intel Wireless Cards in Windows 7 and Vista, Wireless profile authentication does not prompt even if "remember my user credentials" option is unchecked. This is working as designed using Intel Wireless LAN cards. (Ref:ECR83575, ECR86357)

  • Authentication shall be successful after each PM
  • Network Connectivity shall be established after each PM
  • No Error Message occurs
PM after logoff/login1. Set the LEAP Profile as Active Profile
2. Logoff and Login to the system
3. LEAP profile should connect automatically
4. Press Fn+F4. System will Enter Suspend Mode
5. Resume the system after five Minutes
6. UnLock the System
7. Check N/W connection is restored

Note: For Intel Wireless Cards in Windows 7 and Vista, Wireless profile authentication does not prompt even if "remember my user credentials" option is unchecked. This is working as designed using Intel Wireless LAN cards. (Ref:ECR83575, ECR86357)
Standalone
Restart/Stress Test
1.Set the LEAP Profile as Active Profile
2. Press CTRL +ALT+ DEL
3. Restart the System
4. Login to the system
5. Perform whether Login is successfull
6. Check LEAP Authentication is sucess Full
7. Network Connectivty is established.
8. Repeat Step 2~7 for 50 Times
Standalone
Shutdown Test
1. Set the LEAP Profile as Active Profile
2. Shutdown the system
3. Power ON the system
4. Login to the system
5. Check whether Login is successfull
6. Check LEAP Authentication is sucessfull
7. Network Connectivty is established.
Standalone
Performance Test
1. Open the Shared Location in the server
2. Copy 600 MB File to the Server from the Client
3. Perform PM Related Testing as explained above
4. Repeat 1~2.
5. Verify File Copying is completed Successfully.
Standalone
User Scenario Verification
1. Change the LEAP Password
2. Apply Profile
3. Check Authentication Status.
Expected Operation Authentication shall fail.
4. Edit the Profile and Enter the correct password.
5. Apply Profile
6. Check Authention is established and N/W Connectivity is available
Standalone
Logon Options Verification
Check the LEAP profiles connectivity by checking the "Logon Options"
- Include Windows Logon domain with username
- Deny network connection unless user is logged on
(-Type Ping 192.168.1.51 -t or the IP Address assigned to the Test
system by the DHCP Server from Another System in the Same NW
- Perform Windows Log off in the Test System
- Check Whether Requst Timed out Message is appearing in the Host
where the Continous Ping Command is running)
Standalone
EventViewer confirmation [LL-01416PA]
1. Open Access Connections, and create a profile for CISCO-LEAP.
2. Turn the wireless radio switch off.
3. Shut down, and turn on the machine.
4. Check the Windows system event viewer.
5. Confirm that the event view does not have any error messages or too many information for the same ID messages (for ex. lot of event ID 5010 messages)


CCX-5
LEAP PROFILE
Win7 [32/64]
Win8 [32/64]
LEAP Used Windows Username and Password This profile shows no prompt and is cached based on the windows login data
For suspend resume scenario, user credential is cached
LEAP manual prompt profile with cached option checked This profile prompts one time only for successful connection
After the first successful connection, if user manually connects and disconnects, no prompt will be seen since authentication data is cached
For suspend resume scenario, user credential is cached
LEAP Manually Prompt for Username and Password A prompt is always shown everytime this profile tries to connect
For restart case user credential is not cached
For suspend resume scenario, user credential is not cached
LEAP Used Saved Username and Password No prompt is shown for this profile, even for log off and log on scenario as well as restart
For suspend resume scenario, user credential is cached
LEAP Auto prompt profile A prompt is always shown everytime this profile tries to connect
For restart case user credential is not cached
For suspend resume scenario, user credential is not cached
After the first successful connection, if user manually connects and disconnects, prompt will be seen since authentication data is not cached



LEAP Profile verification with Login Script: (LL-1051PA)

Domain logon fail to execute the logon script issue ,use the following document which explains how to setup a system for 0 cache Or you can just apply this security policy on the system. Also find the logon sample script.


Attachment "Configure Local Policies.doc"can be seen at the bottom of the page.

Attachment "setup security.inf"can be seen at the bottom of the page.

Attachment "logon.vbs"can be seen at the bottom of the page.


Test Item
Win7 [32/64]
Win8 [32/64]
-Windows 200x Domain Server with Active Directory and SP4
-Group Policy configured to run logon script when user logs on the Domain
-CISCO 1200 AP with build in Radius server.

1. AC Profile configured with all default setting - Dynamic DHCP, Dynamic DNS, etc
2. SSO enabled
3. Leap with Windows username and password
4. Under Global Settings the following are checked
-Allow all users of the system to switch to any existing location profile
-Allow wireless authentication using windows username and password (requires system restart)
-Close all network connection when user logs off.
-Show wireless status icon in task tray.
-Display the progress indicator window when a profile is being applied.
-Allow selection of location profile with Fn+F5 On Screen Display menu

Verify that the logon script works fine when AC is not installed on the system
Verify that logon scripts work fine when AC is installed and Ethernet cable is plugged in the system.
Confirm the Logon script when AC is installed and system restarted in wireless mode and connection to the domain is established.
A
A

OTHER DETAILS
EUT Quantity : Two systems 1. "Please check Error and Warning message in Event Viewer before you start the test case and after you complete the test case, and report it to your team lead."
2. "Perform All Test in Battery Mode (Some of the test items need to perform in AC Mode, follow each Test Case)"
(All Test Activity should be performed with AMT Enabled) Note :
1. Perform the test in User mode as well as Administrator mode
2. Please check the version of Access Connection to be used for each product. Access Connection may require specific version of device driver to be installed for the adapters to be tested.
3. Refer latest Access Connection Function specification for the feature support.

Perform Access Connection on Japanese OS for SIT for the final verification. Initial stages of testing can be performed on US version. While doing JP coverage, verify the japanese characters, error messages and help menu contents.

Access Connections applications may have other functions/GUI not mentioned in this test case. Please verify all the available functions and GUI that comes with the particular version of Access Connections. Any updation required to the test case, Please inform Lenovo Engineers.



Known Limitations/Restrictions/Information
Known Limitations
1. For Intel Wireless Cards in Windows 7 and Vista, Wireless profile authentication does not prompt even if "remember my user credentials" option is unchecked. This is working as designed using Intel Wireless LAN cards. (Ref:ECR83575, ECR86357)
Restriction
1. Even "Allow all users of this system to create and apply loation profiles" Global settings option check box is checked, limited user account can not modify or create the setting for TCP/IP settings or security settings of local driver share, firewall settings due to Widnows security protection. Such setting is used with Windows default settings. Default is not checked.
2. Global settings can be only modified by the user when the logon privilege is administrator privilege.
3. The global settings option "Disable Adhoc connection type option in wireless LAN profiles" is not applicable, if the user create the profile using WIndows wireless LAN property window.
4. Profile disconnects when user change wireless security type of 802.1x peap to LEAP or vice versa
(Reference: ECR112851, W7:Profile disconnect when change wireless security type of 802.1x)
Information
1. When "Allow all users of this system to create and apply loation profiles" check box is checked, it allows user to create the location profiles and enables location switching regardless of the windows logon privilege (administrator or limited users).
2. Wireless profiles will be listed in the upper part of the profile list and the Ethernet profiles will be displayed at the lower part of the location profile list on "Automatic switching profile priority window". Due to the faster speed, the Ethernet profiles have higher priority than the wireless profiles.
3. Static IP address wireless profile will be listed in automtic location switching, as per the new design. However, static IP address ethernet profile will not be listed in automatic location switching.
4. ThinkPad 11b/g/n Wireless LAN Mini-PCI Express Adapter II has 1x2 antennas - 1 antenna for transmitter (Tx) and 2 antennas for receiver (Rx), and the maximum theoretical speed is 150Mbps (Tx) / 300Mbps (Rx) in the 802.11n mode. However, the current Realtek driver displays Tx speed as design. So it displays 150Mbps in the 802.11n mode even though the Rx speed is 300Mbps.
Solution : Display the Rx speed, instead of the Tx speed in the Realtek WLAN driver.

Results Summary

Test Item
Configuration
Result
Result
Win 7 [32/64]
Win 8 [32/64]
LEAP- WEP/CKIP/TKIP/AES (Saved Username and Password)
Standalone
A
A
LEAP- WEP/CKIP/TKIP/AES (Use Windows log on username and password)
Standalone
A
A
LEAP- WEP/CKIP/TKIP/AES (Manually Prompt for EAPFAST username and password)
Standalone
A
A
LEAP- WEP/CKIP/TKIP/AES (Automatically Prompt for EAPFAST username and password)
Standalone
A
A
LEAP- WEP/CKIP/TKIP/AES-CCKM (Saved Username and Password)
Standalone
A
A
LEAP- WEP/CKIP/TKIP/AES-CCKM (Use Windows log on username and password)
Standalone
A
A
LEAP- WEP/CKIP/TKIP/AES-CCKM (Manually Prompt for EAPFAST username and password)
Standalone
A
A
LEAP- WEP/CKIP/TKIP/AES-CCKM (Automatically Prompt for EAPFAST username/password)
Standalone
A
A
CCKM Roaming Functionality Verification
Standalone
A
A
Network Reliability with Power Management
Standalone
A
A

TEMS Reviewer Log:
Review Logs
Keywords:   None
Requirements :   None
Attached files :
bkscgc8.pdf - bkscgc8.pdf (1190323 bytes, ) 07/03/2015
logon.vbs - logon.vbs (212 bytes, ) 07/03/2015
setup security.inf - setup security.inf (787692 bytes, ) 07/03/2015
Configure Local Policies.doc - Configure Local Policies.doc (282112 bytes, ) 07/03/2015

Update History:
This document is not yet modified.