WiFi 7 Deployment Procedures
Overview
This document defines the standard procedures for deploying WiFi 7 (IEEE 802.11be) wireless networks in municipal facilities. All deployments follow BICSI best practices and require documented site surveys, design approvals, and validation testing before handoff.
WiFi 7 Mandatory: All new wireless deployments must use WiFi 7 (802.11be) access points per Access Point Specifications.
Standards References
| Standard |
Title |
Date |
Scope |
| BICSI TDMM 15th Ed. |
Telecommunications Distribution Methods Manual |
2024 |
Deployment best practices |
| TIA-569-E |
Telecommunications Pathways and Spaces |
June 2019 |
Physical installation |
| TIA-606-D |
Administration Standard |
February 2017 |
Labeling and documentation |
| IEEE 802.11-2024 |
Wireless LAN Standard |
December 2020 |
Technical requirements |
| NIST SP 800-153 |
Guidelines for Securing WLANs |
February 2012 |
Security validation |
Deployment Workflow
flowchart TD
A[Deployment Request] --> B[1. Site Survey]
B --> C[2. Design & Planning]
C --> D{Design Approved?}
D -->|No| C
D -->|Yes| E[3. Installation]
E --> F[4. Configuration]
F --> G[5. Validation Testing]
G --> H{Tests Pass?}
H -->|No| I[Remediation]
I --> G
H -->|Yes| J[6. Documentation]
J --> K[7. Handoff]
K --> L[30-Day Review]
Phase 1: Site Survey
Pre-Survey Requirements
flowchart LR
subgraph GATHER["Information Gathering"]
A[Floor plans<br/>CAD or PDF]
B[Coverage requirements<br/>Users and density]
C[Facility contact<br/>Schedule access]
D[Existing infrastructure<br/>Ethernet and ceiling]
end
GATHER --> READY[Ready for Survey]
| Requirement |
Description |
Responsible |
| Floor plans |
Current CAD or PDF drawings |
Facility manager |
| User density |
Expected concurrent users per area |
Project manager |
| Coverage areas |
Rooms requiring WiFi |
Project manager |
| Existing drops |
Available Ethernet locations |
Network Engineering Team |
| Ceiling access |
Type and accessibility |
Facility manager |
| Site contact |
Person to escort surveyor |
Facility manager |
Survey Types
Predictive Survey (New Construction/Renovation)
| Step |
Activity |
Deliverable |
| 1 |
Import floor plans to survey software |
Calibrated floor plan |
| 2 |
Define wall materials and attenuation |
Material database |
| 3 |
Place virtual APs based on requirements |
AP placement map |
| 4 |
Generate coverage predictions |
Heat maps |
| 5 |
Create channel plan |
Channel assignments |
Active Survey (Existing Buildings)
| Step |
Activity |
Deliverable |
| 1 |
Walk facility with survey equipment |
RF measurements |
| 2 |
Measure existing WiFi and interference |
Interference report |
| 3 |
Identify RF challenges |
Problem area list |
| 4 |
Document mounting locations |
Photo documentation |
| 5 |
Verify cable paths |
Pathway assessment |
Survey Deliverables Checklist
| Deliverable |
Required |
Format |
| Coverage heat maps (2.4 GHz) |
✅ |
PDF/PNG |
| Coverage heat maps (5 GHz) |
✅ |
PDF/PNG |
| Coverage heat maps (6 GHz) |
✅ Required for WiFi 7 |
PDF/PNG |
| AP placement map with coordinates |
✅ |
PDF + coordinates |
| Channel plan (including 320 MHz) |
✅ |
Spreadsheet |
| Interference report (all bands) |
✅ |
PDF |
| Bill of materials |
✅ |
Spreadsheet |
| Mounting details per AP |
✅ |
Photo + notes |
| Power requirements (802.3bt) |
✅ |
PoE budget calc (60W/AP planning figure) |
| Multi-gig port requirements |
✅ |
Switch port mapping |
Phase 2: Design and Planning
Cross-Reference: Design submission requirements, review timelines, and approval criteria are defined in WiFi Design Standards. This section covers the deployment workflow after design approval.
Design Review Checklist
flowchart TD
subgraph REVIEW["Design Review Gate"]
A[AP count meets requirements]
B[Ethernet available for each AP]
C[PoE budget verified]
D[Channel plan avoids interference]
E[SSID design per standards]
F[Security requirements met]
end
REVIEW --> DECISION{All Checks Pass?}
DECISION -->|Yes| APPROVE[Approved for Installation]
DECISION -->|No| REVISE[Revise Design]
REVISE --> REVIEW
| Check |
Criteria |
Standard Reference |
| Coverage |
≥-67 dBm secondary coverage (all bands) |
Design Standards |
| Capacity |
AP count supports user density |
Site survey |
| Cabling |
Cat6A to each AP location |
TIA-568.2-E |
| Switch ports |
All ports 2.5G+ minimum (1 GbE-only switches prohibited) |
IEEE 802.3bz |
| PoE |
802.3bt budget ≥ total AP power (30-50W/AP; use 60W conservative planning figure for UPS sizing per Backup Power Standards) |
IEEE 802.3bt-2018 |
| Channels |
No co-channel interference (including 6 GHz) |
IEEE 802.11be |
| SSIDs |
Per SSID Standards |
Internal |
| SSID count |
≤4 SSIDs per AP (hard limit) |
SSID Count Limits |
| Backup power |
UPS sized for AP count and facility tier |
Backup Power Standards |
| Security |
WPA3, 802.1X configured |
NIST SP 800-153 |
Approval Process
| Step |
Action |
Responsible |
Timeline |
| 1 |
Submit design package |
Contractor/Vendor |
— |
| 2 |
Technical review |
Network Engineering Team |
15 days (standard) / 20 days (complex) |
| 3 |
Address feedback |
Contractor/Vendor |
As needed |
| 4 |
Written approval |
Network Engineering Team |
2 business days |
| 5 |
Schedule installation |
Project manager |
Coordinate with facility |
Phase 3: Installation
Pre-Installation Checklist
| Item |
Verification |
Status |
| All equipment received |
Inventory check (WiFi 7 APs) |
☐ |
| Serial numbers documented |
Asset tracking |
☐ |
| Network ports active |
Port test |
☐ |
| Multi-gig negotiation |
Verify 2.5G/5G/10G link speed |
☐ |
| PoE 802.3bt verified |
Power delivery test (60W+ available) |
☐ |
| UPS capacity verified |
UPS VA rating meets calculated load per Backup Power Standards |
☐ |
| Ceiling/wall access confirmed |
Physical inspection |
☐ |
| Installation window scheduled |
Calendar confirmed |
☐ |
| Facility contact available |
Contact verified |
☐ |
WiFi 7 Infrastructure Prerequisites
| Requirement |
Verification |
Fail Action |
| Switch supports 802.3bt |
Check switch model/specs |
Replace switch or add injector |
| Switch has multi-gig ports |
Verify 2.5G/5G capability on ALL ports |
Reject switch — 1 GbE-only switches prohibited |
| Cat6A cabling |
Verify cable category |
Re-cable if Cat5e/Cat6 |
| PoE budget sufficient |
Calculate total AP power draw |
Add PoE budget or split across switches |
| UPS backup power |
Online double-conversion UPS sized per facility tier |
Install or upgrade UPS per Backup Power Standards |
Mounting Standards
Per TIA-569-E pathway requirements:
graph TD
subgraph MOUNT_TYPES["Mounting Options"]
TBAR["T-Bar Mount<br/>Drop ceiling<br/>9-12 ft height"]
ABOVE["Above-Tile Mount<br/>Concealed install<br/>Plenum-rated cable"]
WALL["Wall Mount<br/>Hard ceiling areas<br/>8-10 ft height"]
DIRECT["Direct Ceiling<br/>Hard ceiling<br/>Junction box required"]
OUTDOOR["Outdoor Mount<br/>Pole or wall<br/>Weather-sealed"]
end
| Location |
Mount Type |
Height |
Cable Requirement |
| Drop ceiling (standard) |
T-bar clip |
9-12 ft |
Plenum (CMP) if above ceiling |
| Drop ceiling (concealed) |
Above-tile mount |
9-12 ft |
Plenum (CMP) required |
| Hard ceiling |
Direct mount/junction box |
9-12 ft |
Standard or plenum per code |
| Wall (indoor) |
Wall bracket |
8-10 ft |
Per local code |
| Outdoor (pole) |
Pole mount, tamper-resistant |
12-20 ft |
Outdoor-rated, UV-resistant |
| Outdoor (wall) |
Wall bracket, sealed |
10-15 ft |
Outdoor-rated |
Cabling Requirements
| Requirement |
Standard |
Notes |
| Cable category |
Cat6A required |
Supports multi-gig (2.5G/5G/10G) for WiFi 7 backhaul |
| Plenum rating |
CMP if above drop ceiling |
Per local fire code |
| Cable length |
≤100 meters total |
TIA-568.2-E |
| Service loop |
3-5 feet at AP location |
For future maintenance |
| Labeling |
Both ends per TIA-606-D |
AP-[Building]-[Location] |
| Cable management |
Velcro ties, J-hooks |
No zip ties on Cat6A |
Note: Cat6 cabling limits multi-gig speeds to 55m maximum. All new AP drops must use Cat6A to support full WiFi 7 backhaul requirements.
Installation Quality Checklist
| Item |
Requirement |
Verified |
| AP mounted at correct location |
Per design map |
☐ |
| AP oriented correctly |
Antennas facing coverage area |
☐ |
| Mounting hardware secure |
No movement when touched |
☐ |
| Cable properly routed |
Bend radius maintained |
☐ |
| Cable properly terminated |
Tested and labeled |
☐ |
| Service loop present |
3-5 feet minimum |
☐ |
| AP powered on |
LED indicates normal |
☐ |
| AP visible in management |
Shows online status |
☐ |
| Photo documentation |
Before and after |
☐ |
Phase 4: Configuration
Controller/Cloud Management Setup
flowchart LR
A[AP Installed] --> B[Add to Management Platform]
B --> C[Assign to Site/Building/Floor]
C --> D[Apply Configuration Profile]
D --> E[Verify Settings]
E --> F[Configuration Complete]
| Step |
Action |
Verification |
| 1 |
Add AP to management platform |
AP appears in inventory |
| 2 |
Assign to correct site/building/floor |
Location accurate |
| 3 |
Apply SSID profile |
SSIDs per SSID Standards |
| 4 |
Apply RF profile |
Channels and power per design |
| 5 |
Apply security profile |
WPA3, 802.1X configured |
| 6 |
Enable features |
Fast roaming, band steering |
Per-AP Configuration Checklist
| Setting |
Requirement |
Verified |
| AP name |
AP-[Building]-[Location] |
☐ |
| Location |
Correct site/building/floor |
☐ |
| SSIDs |
All required SSIDs assigned |
☐ |
| Channel (6 GHz) |
Per channel plan (160/320 MHz) |
☐ |
| Channel (5 GHz) |
Per channel plan |
☐ |
| Channel (2.4 GHz) |
Per channel plan (1, 6, or 11) |
☐ |
| Multi-Link Operation |
Enabled |
☐ |
| Transmit power |
Per design or auto |
☐ |
| VLAN tagging |
Native + tagged correct |
☐ |
| 802.1X |
RADIUS servers configured |
☐ |
| Management IP |
Assigned and reachable |
☐ |
| Uplink speed |
Verified 2.5G+ negotiation |
☐ |
| PoE class |
Verified 802.3bt allocation |
☐ |
Phase 5: Validation Testing
Coverage Validation
flowchart TD
A[Post-Installation Survey] --> B{RSSI ≥ -67 dBm<br/>secondary coverage?}
B -->|Yes| C{SNR ≥ 25 dB?}
B -->|No| D[Adjust AP placement<br/>or add APs]
C -->|Yes| E{No dead zones?}
C -->|No| F[Check interference<br/>and channel plan]
E -->|Yes| G[Coverage Validated ✅]
E -->|No| D
D --> A
F --> A
| Test |
Target |
Tool |
Pass Criteria |
| Secondary coverage |
≥-67 dBm from 2nd AP |
Survey tool |
All occupied spaces |
| SNR |
≥25 dB |
Survey tool |
All occupied spaces |
| Dead zones |
None |
Walk test |
Continuous coverage |
| Channel interference |
Minimal |
Spectrum analyzer |
Co-channel ≤-85 dBm |
| Test |
Target |
Method |
Pass Criteria |
| Throughput (6 GHz) |
≥500 Mbps |
iPerf3 to wired server |
WiFi 7 client, 160 MHz |
| Throughput (5 GHz) |
≥200 Mbps |
iPerf3 to wired server |
90% of tests pass |
| Throughput (2.4 GHz) |
≥50 Mbps |
iPerf3 to wired server |
Legacy device baseline |
| Latency |
≤15 ms |
Ping to gateway |
Average ≤15 ms |
| Jitter |
≤10 ms |
Continuous ping |
95th percentile |
| Roaming |
≤100 ms |
Roaming test app |
Seamless handoff with MLO |
| MLO failover |
Seamless |
Band disconnect test |
No session interruption |
| Client capacity |
Per design |
Load test |
No degradation at target |
SSID Configuration Validation
| Test |
Requirement |
Method |
Pass Criteria |
| SSID count |
≤4 SSIDs per AP |
Management platform audit |
No AP exceeds 4 SSIDs |
| SSID names |
Match approved standards |
Management platform |
Only MUNI-CORP, MUNI-GUEST, MUNI-IOT, MUNI-SECURE |
| SSID-to-VLAN mapping |
Correct VLAN per SSID |
Configuration review |
Per SSID Standards |
SSID Count Audit Procedure:
- Export AP configuration from management platform
- Count SSIDs configured per physical AP
- Reject deployment if any AP exceeds 4 SSIDs
- Document SSID inventory in validation report
Security Testing
| Test |
Requirement |
Method |
Pass Criteria |
| SSID verification |
Only approved SSIDs |
Survey scan |
No rogue SSIDs |
| 802.1X auth |
Successful authentication |
Test client |
Correct VLAN assigned |
| OWE encryption (guest) |
Guest SSID uses OWE |
Test client + capture |
Encrypted traffic (not readable) |
| Guest portal |
Portal redirect works |
Test client |
Terms required |
| Client isolation |
Clients cannot reach each other |
Ping test |
No response |
| PMF |
Management frames protected |
Capture analysis |
Encrypted (all SSIDs) |
| Rogue AP detection |
System detects rogues |
Test with rogue |
Alert generated |
OWE Validation (Mandatory): Guest network validation must confirm OWE encryption is active. Connect with an OWE-capable device (iOS 13+, Android 10+, Windows 10+) and verify traffic is encrypted via packet capture. See OWE Enhanced Open Standards.
Validation Report Template
| Section |
Contents |
| Executive summary |
Pass/fail status, key findings |
| Coverage results |
Heat maps with RSSI values |
| Performance results |
Throughput, latency, roaming data |
| Security results |
Authentication and isolation tests |
| Issues found |
List with severity |
| Remediation |
Actions taken or required |
| Sign-off |
Tester name, date, signature |
Phase 6: Documentation
Required Documentation Package
flowchart LR
subgraph DOCS["Documentation Package"]
A[As-built drawings]
B[AP inventory]
C[Configuration backup]
D[Survey report]
E[Test results]
F[Acceptance sign-off]
end
DOCS --> ARCHIVE[Project Archive]
DOCS --> HANDOFF[Facility Handoff]
| Document |
Format |
Retention |
| As-built drawings |
PDF + CAD |
Permanent |
| AP inventory (serial, MAC, location) |
Spreadsheet |
Permanent |
| Configuration backup |
Platform export |
7 years |
| Post-installation survey |
PDF |
7 years |
| Validation test results |
PDF |
7 years |
| Photos |
JPEG/PNG |
7 years |
| Acceptance sign-off |
PDF (signed) |
Permanent |
AP Inventory Template
| Field |
Example |
Required |
| AP Name |
AP-MC-LOBBY-01 |
✅ |
| Serial Number |
ABC123456789 |
✅ |
| MAC Address |
AA:BB:CC:DD:EE:FF |
✅ |
| Model |
[Model identifier] |
✅ |
| Location (Building) |
Main Campus |
✅ |
| Location (Floor) |
1 |
✅ |
| Location (Area) |
Main Lobby |
✅ |
| Coordinates |
X: 125, Y: 340 |
✅ |
| Mount Type |
T-bar ceiling |
✅ |
| Switch/Port |
MC-IDF1-SW1/Gi1/0/24 |
✅ |
| Installation Date |
2026-02-15 |
✅ |
| Installer |
[Name] |
✅ |
Phase 7: Handoff and Support
Handoff Checklist
| Item |
Action |
Verified |
| Documentation complete |
All items in package |
☐ |
| Management access |
Credentials transferred |
☐ |
| Facility contact trained |
Basic troubleshooting |
☐ |
| Escalation path |
Support contacts documented |
☐ |
| Warranty info |
Registration confirmed |
☐ |
| 30-day review |
Scheduled |
☐ |
Post-Deployment Support
| Period |
Support Level |
Activities |
| 0-30 days |
Full project support |
Address any issues |
| 30-day review |
Scheduled meeting |
Review metrics, optimize |
| 31-90 days |
Priority support |
Quick response to issues |
| 90+ days |
Standard support |
Normal SLA |
30-Day Review Agenda
| Topic |
Discussion Points |
| User feedback |
Any complaints or issues reported |
| Performance metrics |
Throughput, latency, client counts |
| Coverage issues |
Dead zones or weak areas identified |
| Authentication issues |
802.1X or portal problems |
| RF optimization |
Channel or power adjustments needed |
| Documentation updates |
Any as-built changes |
| Project closure |
Sign-off on completion |
Troubleshooting Quick Reference
flowchart TD
A[Issue Reported] --> B{Issue Type?}
B -->|No connectivity| C[Check AP power<br/>Check uplink port<br/>Verify VLAN]
B -->|Slow speeds| D[Check channel utilization<br/>Check interference<br/>Check client count]
B -->|Auth failure| E[Verify RADIUS<br/>Check certificates<br/>Review logs]
B -->|Roaming issues| F[Check channel overlap<br/>Verify 802.11r<br/>Check controller sync]
B -->|Coverage gaps| G[Verify AP placement<br/>Check power settings<br/>Survey area]
| Symptom |
First Steps |
Escalation |
| No connectivity |
Verify AP power and LED, check switch port, verify VLAN |
Network team |
| Slow speeds |
Check channel utilization, client count, interference |
Wireless specialist |
| Auth failure |
Verify RADIUS server, check user/device in AD, review logs |
Security team |
| Roaming problems |
Verify channel plan, check 802.11r/k/v, controller sync |
Wireless specialist |
| Poor coverage |
Compare to survey, check power settings, rescan area |
Site survey |
| Intermittent issues |
Check for interference, review client logs, spectrum analysis |
Wireless specialist |
Industry Adoption Data
Deployment Best Practices Adoption
| Practice |
Adoption Rate |
Source |
Year |
| Pre-deployment site survey |
78% |
BICSI Survey |
2024 |
| Post-deployment validation |
72% |
BICSI Survey |
2024 |
| Centralized management |
94% |
Gartner Wireless Report |
2024 |
| Documentation package required |
85% |
Municipal IT Survey |
2024 |
Infrastructure Readiness Pass/Fail Checklist
Use this checklist to verify contractor qualifications before approving a WiFi deployment engagement. Every Required item must pass. If any Required item fails, the contractor is not approved for deployment.
Deployment Contractor Qualification Checklist
| # |
Requirement |
Required |
Pass |
Fail |
| 1 |
Demonstrated WiFi 7 (802.11be) deployment experience |
Yes |
☐ |
☐ |
| 2 |
Professional RF survey equipment available |
Yes |
☐ |
☐ |
| 3 |
Capable of producing 6 GHz band heat maps |
Yes |
☐ |
☐ |
| 4 |
Cat6A cabling installation and certification capability |
Yes |
☐ |
☐ |
| 5 |
802.3bt (Type 3) PoE verification tools and procedures |
Yes |
☐ |
☐ |
| 6 |
Multi-gig (2.5 GbE+) link negotiation verification capability |
Yes |
☐ |
☐ |
| 7 |
Complete documentation package delivery (as-builts, test results) |
Yes |
☐ |
☐ |
| 8 |
Post-install validation survey methodology |
Yes |
☐ |
☐ |
Results
| Outcome |
Action |
| All Required items pass |
Approved for deployment engagement |
| Any Required item fails |
Not approved — resolve before proceeding |
| Questions about a specific requirement |
Contact Network Engineering |
How to Verify Requirements
| Checklist Item |
Where to Find |
| WiFi 7 experience |
Past project references, case studies, certifications |
| RF survey equipment |
Equipment list, calibration records |
| 6 GHz heat maps |
Sample deliverables, software capabilities |
| Cat6A certification |
Installer certifications, test equipment (Level IV) |
| 802.3bt PoE verification |
Test procedures, PoE analyzer availability |
| Multi-gig verification |
Test procedures, link negotiation documentation |
| Documentation package |
Sample deliverables, documentation templates |
| Post-install validation |
Validation methodology, sample survey reports |
References
- BICSI TDMM, 15th Edition, “Telecommunications Distribution Methods Manual,” BICSI, 2024.
- TIA-569-E, “Telecommunications Pathways and Spaces,” TIA, June 2019.
- TIA-606-D, “Administration Standard for Telecommunications Infrastructure,” TIA, February 2017.
- IEEE 802.11-2024, “Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications,” IEEE, December 2020.
- NIST SP 800-153, “Guidelines for Securing Wireless Local Area Networks (WLANs),” NIST, February 2012.
Cross-References
For questions about these procedures, open an issue or contact the Network Engineering team.