Wireless Networking: Standards, Security, and Configuration

Wireless Networking: Standards, Security, and Configuration

Wireless local area networks (WLANs) let devices communicate without physical cables by transmitting radio frequency (RF) signals. Every Wi-Fi network you will configure or troubleshoot in your career is governed by an IEEE 802.11 standard. Knowing which standard is in use, what frequency band it occupies, and how its throughput compares is essential knowledge for CompTIA A+, Network+, and both Cisco CCST and CCNA exams.

The 802.11 Standard Family

The IEEE defines each generation of Wi-Fi with a letter suffix. The table below summarizes the six variants you must know.

| Standard | Frequency Band | Max Channel Width | Max Theoretical Throughput |

|---|---|---|---|

| 802.11a | 5 GHz | 20 MHz | 54 Mbps |

| 802.11b | 2.4 GHz | 22 MHz | 11 Mbps |

| 802.11g | 2.4 GHz | 20 MHz | 54 Mbps |

| 802.11n (Wi-Fi 4) | 2.4 GHz and 5 GHz | 40 MHz | 600 Mbps |

| 802.11ac (Wi-Fi 5) | 5 GHz only | 80/160 MHz | ~3.5 Gbps |

| 802.11ax (Wi-Fi 6/6E) | 2.4, 5, and 6 GHz | 160 MHz | ~9.6 Gbps |

These throughput figures are theoretical maximums. Real-world speeds are always lower because of distance, interference, protocol overhead, and the number of clients sharing the channel.

Frequency Bands and Interference

The 2.4 GHz band offers better range and wall penetration but has only three non-overlapping channels in the US (channels 1, 6, and 11). Microwave ovens, cordless phones, Bluetooth devices, and neighboring Wi-Fi networks all share this band, making interference common. When many access points use overlapping channels, adjacent-channel interference degrades performance significantly.

The 5 GHz band provides many more non-overlapping channels and far less interference but has shorter range and weaker penetration through solid objects. The 6 GHz band, introduced with Wi-Fi 6E, adds even more spectrum and is currently used almost exclusively by newer Wi-Fi 6E devices.

When planning channel assignments for multiple access points in the same building, select non-overlapping channels and keep signal levels low enough that neighboring APs do not interfere with each other — this is called proper channel planning.

Wireless Security Protocols

Security is the most critical configuration decision you make on any wireless network.

WEP (Wired Equivalent Privacy) — obsolete and broken; never use it. Cryptographic weaknesses allow attackers to crack WEP keys in minutes with freely available tools.

WPA (Wi-Fi Protected Access) — an interim improvement over WEP; also considered weak by current standards and should not be used.

WPA2 — uses AES-CCMP encryption and has been the industry standard for over a decade. WPA2-Personal uses a pre-shared key (passphrase). WPA2-Enterprise integrates with a RADIUS authentication server. WPA2 is the minimum acceptable security level for any network you configure.

WPA3 — the current recommended standard. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) instead of a simple pre-shared key handshake, which eliminates offline dictionary attacks. WPA3-Enterprise adds 192-bit cryptographic strength. Where hardware supports it, always choose WPA3.

Configuring a Wireless Access Point

Most consumer and small-business WAPs are managed through a browser-based administration interface. The general process is:

1. Connect a laptop to the WAP via Ethernet or the default SSID.

2. Open a browser and navigate to the WAP's management IP address (commonly 192.168.0.1 or 192.168.1.1 — check your device documentation).

3. Log in with the administrator credentials (change defaults immediately).

4. Set the SSID — the network name clients see.

5. Select the security mode: choose WPA3-Personal if supported, or WPA2-Personal as the minimum.

6. Set a strong passphrase: at least 12 characters mixing letters, numbers, and symbols.

7. Optionally disable SSID broadcast to hide the network name from casual scans. Note that this is a minor obscurity measure, not true security — tools like Wireshark reveal hidden SSIDs from probe responses.

8. Save settings and allow the WAP to reboot if required.

After saving, verify the configuration by returning to the admin page and confirming that the security mode displayed matches what you set.

Connecting a Client and Verifying Encryption

On a Windows laptop, open the Wi-Fi settings, select the SSID, and enter the passphrase. Once connected, click the network name in the system tray to view connection properties — the OS will show the security type (e.g., "WPA2-Personal" or "WPA3-Personal").

To verify at the packet level, open Wireshark and begin a capture on the wireless interface. Filter for 802.11 management frames. You will see Beacon frames from the AP advertising the SSID and RSN (Robust Security Network) information elements that list the supported cipher suites, confirming encryption is negotiated before data is exchanged.

Finally, ping the WAP's IP address to confirm full Layer 3 association. A successful ping-and-reply sequence confirms the client is properly associated and can reach the gateway.

Safety and Professional Practice

No high-voltage electrical hazards are present during typical WAP configuration, but follow your site's policies: do not plug into unknown network ports without authorization, and always obtain written permission before scanning or capturing traffic on any network you do not own. Unauthorized packet capture is a federal offense under the Computer Fraud and Abuse Act. In a lab environment, work only on the isolated lab network provided by your instructor.