WIFI

Best Western Asia Wireless Guideline

Revision April 2019

Best Western Operations Asia

operationsasia@bestwestern.com
1 INTRODUCTION

This document is intended to set out the operational and technical requirements of a hotel’s Wireless
Network in Asia Pacific.

BW requires the Guest Network and the Hotel Admin Network to be physically separate to meet PCI
Compliance requirements. Therefore, it is currently not permitted for Guest Wireless Access Points to
connect to the Hotel Admin Network.

2 COVERAGE REQUIREMENTS

2.1 100% Wireless coverage of all guest accessible areas is required for all Brands:

2.1.1 Wireless coverage is defined as follows:

2.1.1.1 Average RSSI (signal) level from the client to the AP, and from the AP to
the client should be -65dBm or higher. When performing site surveys, ensure
measurements are also taken from the AP, not just from the client laptop or
mobile devices.

2.1.1.2 Average SNR of the client should be 20 or higher.

2.1.1.3 Survey must be performed using mobile devices. Recommended mobile

device for conducting a site survey is the iPhone (any model) or iPod Touch.

2.2 100% Wireless coverage of all back-of-house areas is RECOMMENDED for all Brands.

Note that wireless covering the back-of-house areas is to be connected to the Guest Network. Wireless access
points are not to be directly connected to the Hotel Admin Network

2.3 If there is a business requirement to implement wireless on the back of house network
(connected to the Hotel Admin Network) for wireless point-of-sales handhelds, please
contact your Regional IT Manager with your request.

1
3 HARDWARE REQUIREMENTS
3.1 Access Point requirements:

3.1.1 Auto-MDIX - automatically adjusts for straight-through or crossover cables on all

100/1000 ports

3.1.2 IEEE 802.3af or 802.3at Power over Ethernet support

3.1.3 Auto Channel Select - helps reduce radio co-channel interference by

automatically selecting an unoccupied radio channel

3.1.4 Single, dual and tri-radio IEEE 802.11n/ac/ax Access Points available

3.1.5 Per-radio software selectable configuration of frequency bands

3.1.6 Capable of self-healing, self-optimizing local mesh

3.1.7 Wi-Fi Alliance certified for interoperability with all 802.11 n/ac/ax devices

3.1.8 Support up to 8 SSIDs (VLANs), each with unique MAC addresses, configurable
SSID broadcasts

Note the SSID name refer to the HSIA standard guideline

3.1.9 Individual security and QoS profiles per SSID/VLAN

3.1.10 Configurable Delivery Traffic Indication message (DTIM) and minimum data rate
per SSID/VLAN

3.1.11 Each SSID mapped to separate IEEE 802.1q/a and VLANs

3.1.12 IEEE 802.1x authentication using EAP-SIM, EAP-FAST, EAP-TLS, EAP-TTLS, and
PEAP

3.1.13 MAC address authentication using local or RADIUS access lists

3.1.14 RADIUS AAA using EAP-MD5, PAP, CHAP, and MS-CHAPv2

3.1.15 RADIUS Client (RFC 2865 and 2866) with location-aware support

3.1.16 Layer 2 wireless client isolation

3.1.17 IEEE 802.1p prioritization - delivers data to devices based on the priority and
type of traffic

3.1.18 L2/L3/L4 classification: IEEE 802.1p VLAN priority, DiffServ, VTP/TCP, Post

3.1.19 Maximum VoIP call capacity: 30 active calls on IEEE 802.11 n/ac/ax

2
 3.1.20 SNMP v2c, SNMP v3, MIB-II with Traps, RADIUS Authentication Client MIB
(RFC2618)

3.1.21 Embedded HTML management tool with secure access (SSL and VPN)

3.1.22 Scheduled configuration and firmware upgrades from central server

3.1.23 Client event log records association, authentication, and DHCP events

3.1.24 Automatically selects channel on power-up and continuously improves channel

selection based on background interference scan

3.1.25 Configurable background rogue scanning

3.1.26 Automatically adjusts transmit power to reduce interference

3.1.27 Ability to add or replace AP out-of-the-box onto the network without pre-
configuring

3.2 Wireless Controller requirements

3.2.1 Layer 3 mobility/fast handover – Provides hand-offs in less than 50 milliseconds,

as required for time-sensitive services such as voice

3.2.2 Centrally configure and manage wireless access points

3.2.3 Integrated RADIUS server

3.2.4 Ability to use 3rd Party RADIUS server or Active Directory server

3.2.5 DHCP server/relay agent

3.2.6 Automatic software updates

3.2.7 Secure management tunnel to Aps

3.2.8 Access point inventory management – ability to view a list of associated APs and
the number of connected wireless clients

3.2.9 Ability to view all associated wireless clients, signal strength and signal to noise
ratio on all Access Points.

3.2.10 Centralized application of security policies

3.2.11 Automated configuration checking – option of alerting any device configuration

changes.