Complete Overview of WiFi

Table of Contents

1. What is WiFi?
2. WiFi Standards
3. WiFi Channels
4. WiFi Signal Metrics (dBm, RSSI, SNR)
5. WPA2 (Wi-Fi Protected Access 2)
6. WPA3 (Wi-Fi Protected Access 3)
7. WiFi vs Cellular (4G / 5G / 6G)
8. SSID (Service Set Identifier)
9. Hidden SSID
10. Guest WiFi
11. WiFi Network Topologies
12. WiFi Troubleshooting
13. WiFi & VPN
14. Secure WiFi
15. WiFi Glossary

1. What is WiFi?

WiFi (Wireless Fidelity) is a technology that allows electronic devices to connect to a wireless Local Area Network (WLAN). It uses radio waves to transmit data between devices and an access point (router), eliminating the need for physical Ethernet cables.

How WiFi Works (Simplified)

[Device] <---> Radio Waves (2.4 GHz / 5 GHz / 6 GHz) <---> [Router/Access Point] <---> [Internet]

• A router (access point) broadcasts a wireless signal.
• Client devices (phones, laptops, smart TVs) scan for and connect to that signal.
• Data is transmitted in packets over radio frequencies.
• Both the router and client must follow the same WiFi standard to communicate.

Key Characteristics

2. WiFi Standards

WiFi standards are defined by the IEEE 802.11 family of specifications. Over the years, they have evolved to deliver higher speeds, better range, and improved security.

Evolution of WiFi Standards

Naming Change: The WiFi Alliance introduced simplified naming (WiFi 4, WiFi 5, WiFi 6, etc.) to make standards easier for consumers to understand.

Technologies in Modern Standards

• MIMO (Multiple Input Multiple Output): Multiple antennas for simultaneous data streams.
• OFDMA (Orthogonal Frequency Division Multiple Access): Efficient channel sharing — introduced in WiFi 6.
• MU-MIMO (Multi-User MIMO): Serve multiple devices simultaneously (WiFi 5 / 6).
• Beamforming: Focuses the signal directionally toward connected devices.

3. WiFi Channels

WiFi channels divide the available frequency band into smaller segments, allowing multiple networks to operate without interference.

2.4 GHz Band

• Total channels: 14 (channels 12–14 are restricted in some countries).
• Non-overlapping channels: Only 1, 6, and 11 do not overlap in the 2.4 GHz band.
• Interference: Common from Bluetooth, microwaves, cordless phones.

Why channels 1, 6, 11? Each 2.4 GHz channel is 22 MHz wide, but channels are spaced only 5 MHz apart. Channels 1, 6, and 11 are the only set where the signals do not overlap.

5 GHz Band

• More channels (24+ non-overlapping channels).
• Less interference — fewer devices use 5 GHz.
• Shorter range but higher speeds.
• DFS (Dynamic Frequency Selection): Some channels share spectrum with radar and require DFS to avoid interference.

6 GHz Band (WiFi 6E / 7)

• Very wide spectrum (1200 MHz of additional space).
• 14 additional 80 MHz channels or 7 additional 160 MHz channels.
• No legacy interference (only WiFi 6E/7 devices).
• Requires WPA3 for security.

Channel Widths

Pro Tip: For minimal interference in crowded areas (apartments, offices), use 5 GHz or 6 GHz with 20–40 MHz channel width for stability.

4. WiFi Signal Metrics (dBm, RSSI, SNR)

Understanding WiFi signal strength is critical for troubleshooting, placing access points, and evaluating network performance.

Key Metrics

dBm Scale — What the Numbers Mean

Signal Strength (dBm)     Quality           What You Can Do
─────────────────────────────────────────────────────────────────
  -30 dBm                 Amazing           Right next to the AP
  -50 dBm                 Excellent         Ideal for streaming/gaming
  -60 dBm                 Good              Reliable for most tasks
  -67 dBm                 Fair             Minimum for VoIP/streaming
  -70 dBm                 Weak             Web browsing OK, video may buffer
  -80 dBm                 Very Weak        Frequent disconnections
  -90 dBm                 Unusable         No reliable connection

Rule of Thumb: Every 3 dBm increase = double the power. Every 10 dBm decrease = 90% signal loss.

SNR — Signal-to-Noise Ratio

How to Measure Signal Strength

5. WPA2 (Wi-Fi Protected Access 2)

WPA2 is a security protocol introduced in 2004 to replace the broken WEP (Wired Equivalent Privacy) and the transitional WPA. It remains the most widely supported WiFi security standard.

How WPA2 Works

Authentication (PSK or 802.1X)
         |
         v
4-Way Handshake (Generates encryption keys)
         |
         v
CCMP / AES Encryption (Data confidentiality & integrity)

Features

WPA2-Personal vs WPA2-Enterprise

Known Weaknesses

• KRACK Attack (2017): Key Reinstallation Attack — forces re-use of nonce, compromising confidentiality. Patched in most modern devices.
• Dictionary Attacks: Weak passwords can be brute-forced offline after capturing the 4-way handshake.
• PMKID Attack: Allows offline cracking without a full handshake capture.

Bottom Line: WPA2 is still secure when used with a strong, complex password (12+ random characters) and up-to-date firmware.

6. WPA3 (Wi-Fi Protected Access 3)

WPA3 is the next-generation WiFi security standard, introduced in 2018 to address WPA2's weaknesses. It became mandatory for new WiFi-certified devices from July 2020.

What WPA3 Improves

WPA3 Variants

Simultaneous Authentication of Equals (SAE)

• Uses Dragonfly Key Exchange (based on Diffie-Hellman).
• Provides perfect forward secrecy — if the long-term key is leaked, past session keys remain safe.
• Password-based authentication without exposing the password to offline brute-force.

WPA3 Transition Mode

• Allows a network to broadcast both WPA2 and WPA3 capability.
• Older devices connect via WPA2; newer ones use WPA3.
• Security only as strong as the weakest connected device.

Important: For maximum security, use WPA3-only mode if all your devices support it.

7. WiFi vs Cellular (4G / 5G / 6G)

WiFi and Cellular are complementary wireless technologies. Understanding their differences helps in choosing the right connectivity for each scenario.

Comparison Table

When to Use Which

┌────────────────────────────────────────────────────────────┐
│                     USE CASE                               │
├────────────────────┬───────────────────────────────────────┤
│  Home / Office     │  WiFi (speed, cost, control)          │
│  Walking / Driving │  Cellular (mobility, coverage)        │
│  Streaming Video   │  WiFi (no data cap)                   │
│  IoT Sensors       │  WiFi + LoRa / Cellular (NB-IoT)     │
│  Public Hotspots   │  WiFi (free) + VPN (security)         │
│  Emergency Calls   │  Cellular (carrier priority)          │
│  Gaming (competitive) │  WiFi 6/7 (low latency)            │
└────────────────────┴───────────────────────────────────────┘

Hotspot / Tethering

Modern phones can act as a bridge between cellular and WiFi:

[Internet] <--- 5G ---> [Phone Hotspot] <--- WiFi ---> [Laptop]

• Turns cellular data into a WiFi network for other devices.
• Consumes mobile data plan (watch your caps).
• Drains battery faster.
• Android supports WiFi 6 hotspot; iPhone supports up to WiFi 6.

5G Fixed Wireless Access (FWA)

• Replaces home broadband with 5G.
• No cable/DSL/fiber needed.
• Speeds comparable to cable internet (100 Mbps – 1 Gbps).
• Good for areas without wired broadband.

Takeaway: WiFi is for local, high-speed, low-cost connectivity. Cellular is for wide-area, mobile, always-on connectivity. They work best together.

8. SSID (Service Set Identifier)

The SSID is the name of a WiFi network. It is a human-readable string (up to 32 characters) that identifies a wireless network to clients.

How SSID Works

1. The router broadcasts its SSID in beacon frames (typically every 100 ms).
2. Client devices scan all channels for beacon frames.
3. The SSID appears in the device's list of available networks.
4. The user selects the SSID and enters the password (if secured).

SSID Best Practices

Multiple SSIDs (VLANs)

Many modern routers support broadcasting multiple SSIDs on the same access point, each mapped to a different VLAN:

[Router] -- SSID: "Home"      --> VLAN 1 (Trusted devices)
         -- SSID: "IoT"        --> VLAN 10 (Smart bulbs, sensors)
         -- SSID: "Guest"      --> VLAN 20 (Visitors, no LAN access)

This provides network segmentation without requiring separate hardware.

9. Hidden SSID

A Hidden SSID (also called "Closed Network" or "SSID Broadcast Disabled") is a network where the router stops including the SSID in beacon frames.

How Hidden SSID Works

• Normal: Beacon Frame = [SSID: "MyNetwork"] → visible to all.
• Hidden: Beacon Frame = [SSID: null] → network does not appear in scan lists.
• Clients must know the exact SSID and manually create a profile to connect.

Does Hiding Your SSID Improve Security?

Short answer: No — it provides NO real security.

Here's why:

The Real Problem with Hidden SSID

1. Client devices constantly probe for the hidden network, broadcasting its name.
2. Connection issues — some devices struggle to find or reconnect to hidden networks.
3. False sense of security — you may neglect real security measures (strong password, WPA3).

Security Advice: Do NOT rely on hiding your SSID. Use WPA3 encryption and a strong password instead.

10. Guest WiFi

A Guest WiFi network is a separate, isolated wireless network that provides internet access to visitors without granting access to your main private network.

How Guest WiFi Works

[Guest SSID] <---> Guest VLAN <---> Internet ONLY
[Main SSID]  <---> Main VLAN  <---> LAN + Internet

• Guest traffic is isolated from the main LAN.
• Guests cannot see your computers, printers, NAS, or smart home devices.
• Guest bandwidth can be limited/restricted independently.

Benefits of Guest WiFi

Recommended Guest WiFi Configuration

SSID: "Home-Guest"
Security: WPA2-PSK (or WPA3 if supported)
Password: Strong, unique password (change periodically)
Band: 2.4 GHz only (better range for guests)
Bandwidth Limit: 10–20 Mbps per device
Client Isolation: Enabled
LAN Access: Disabled
Schedule: Optional (e.g., disable overnight)

Important: Even on guest WiFi, use encryption (WPA2/WPA3). An open guest network puts your router and ISP liability at risk.

11. WiFi Network Topologies

Choosing the right network topology is essential for coverage, performance, and reliability — especially in larger homes or offices.

Topology Comparison

┌─────────────────────────────────────────────────────────────┐
│                    TOPOLOGY DECISION TREE                     │
├─────────────────────────────────────────────────────────────┤
│  Small home (<1000 sq ft)  ────── Single Router              │
│  Medium home (1000–2500)   ────── Mesh or Router + AP        │
│  Large home (>2500)        ────── Mesh (multi-node)          │
│  Office / Enterprise       ────── APs + Controller           │
│  Outdoor / Warehouse       ────── Outdoor APs + PtP links    │
└─────────────────────────────────────────────────────────────┘

1. Single Router (All-in-One)

[Modem] <──> [Router + Switch + AP] <──> Devices

2. Router + Access Point (AP)

[Modem] <──> [Router] <──Ethernet──> [AP (extended room)]
                                    Devices

• AP connects to the main router via Ethernet cable.
• Provides full-speed coverage in dead zones.
• Best performance option for extending WiFi.

3. WiFi Range Extender / Repeater

[Main Router] <──WiFi──> [Extender] <──WiFi──> [Devices]
            (half speed)            (half speed)

⚠️ Warning: WiFi extenders are often a poor solution. If possible, use an Access Point with Ethernet or Mesh instead.

4. Mesh WiFi System

[Modem] <──> [Main Node] <──WiFi──> [Satellite Node 1]
                                <──WiFi──> [Satellite Node 2]

• Multiple nodes form a single seamless network.
• One SSID across the whole house.
• Nodes communicate via a dedicated backhaul (wired or wireless).
• Devices roam seamlessly between nodes.

Popular Mesh Systems: Google Nest WiFi, TP-Link Deco, Eero, Netgear Orbi, Ubiquiti AmpliFi.

5. Enterprise WiFi (Controller-Based)

[Controller (software/hardware)]
         |
    +----+----+
    |    |    |
   AP1  AP2  AP3   (thin APs, managed centrally)

• Centralized management (VLANs, RADIUS, band steering, load balancing).
• Used in offices, campuses, hotels.
• Requires IT expertise to configure.

Quick Selection Guide

12. WiFi Troubleshooting

Practical solutions for the most common WiFi problems.

Problem-Solution Matrix

Step-by-Step Troubleshooting Flow

┌──────────────────────┐
│   WiFi not working   │
└──────────┬───────────┘
           ▼
┌──────────────────────┐
│  Is WiFi on? (device)│──No──→ Enable WiFi
└──────────┬───────────┘
           ▼ Yes
┌──────────────────────┐
│  Router powered on?  │──No──→ Check power / restart router
└──────────┬───────────┘
           ▼ Yes
┌──────────────────────┐
│  Can you see SSID?   │──No──→ Check SSID broadcast / move closer
└──────────┬───────────┘
           ▼ Yes
┌──────────────────────┐
│  Can you connect?    │──No──→ Check password / MAC filter
└──────────┬───────────┘
           ▼ Yes
┌──────────────────────┐
│  Internet working?   │──No──→ Ping 8.8.8.8 → restart modem
└──────────┬───────────┘
           ▼ Yes
┌──────────────────────┐
│  Speed as expected?  │──No──→ Run speed test → check channel
└──────────┬───────────┘
           ▼ Yes
       All good!

Essential Troubleshooting Commands

When to Restart vs Reset

Pro Tip: Schedule a weekly automatic router restart via the router's admin panel to clear memory leaks.

13. WiFi & VPN

A VPN (Virtual Private Network) adds a layer of encryption and privacy on top of any WiFi connection.

Why Use a VPN on WiFi?

Without VPN: [Device] <──WiFi──> [ISP] <──> [Website]
              Traffic visible to router owner, ISP, or attacker

With VPN:    [Device] <──WiFi──> [VPN Server] <──> [Website]
              Traffic encrypted; only sees encrypted tunnel

VPN Deployment Options on WiFi

Router-Level VPN Setup

[Internet] <──> [VPN Client on Router] <──> [Home Network]
                   All devices protected

• Every device on WiFi is automatically protected.
• No need to configure each phone/laptop.
• Some routers support built-in VPN clients (Asus, Synology, GL.iNet, pfSense).
• Performance impact: Expect 20–50% speed reduction (encryption overhead).

WiFi-Specific VPN Recommendations

Bottom Line: Use a VPN on any WiFi network you do not personally control. For home networks, it's optional but recommended for privacy-conscious users.

14. Secure WiFi

Building a Secure WiFi network involves multiple layers — encryption, authentication, network design, and ongoing maintenance. Below is a comprehensive guide.

The Layered Approach to WiFi Security

Layer 1: Encryption & Authentication
Layer 2: Network Segmentation
Layer 3: Device & Firmware Security
Layer 4: Monitoring & Maintenance

Layer 1: Encryption & Authentication

Layer 2: Network Segmentation

Separate your network into trust zones using VLANs or multiple SSIDs:

[Internet]
    |
[Router/Firewall]
    |
    +-- VLAN 1 (Trusted): Family computers, phones, laptops   (WPA3)
    +-- VLAN 10 (IoT):    Smart bulbs, thermostats, cameras   (WPA2, isolated)
    +-- VLAN 20 (Guest):  Visitors, temporary devices          (WPA2, limited BW)
    +-- VLAN 30 (DMZ):    Servers accessible from internet     (Strict firewall rules)

Layer 3: Device & Firmware Security

• Update router firmware regularly (enable auto-update if available).
• Change default admin credentials (never use admin/admin).
• Disable WPS (Wi-Fi Protected Setup) — vulnerable to brute-force PIN attacks.
• Disable remote management unless absolutely needed.
• Enable firewall on the router (usually enabled by default).

Layer 4: Monitoring & Maintenance

Common WiFi Security Threats

Quick Security Checklist

• Use WPA3 (or WPA2 if WPA3 not supported)
• Strong password — at least 16 characters
• Disable WPS
• Disable remote admin access
• Keep firmware updated
• Enable guest network for visitors
• Disable SSID broadcast hiding (counterproductive)
• Use a VPN when on public WiFi
• Enable client isolation on guest networks
• Turn off WiFi on devices when not in use

15. WiFi Glossary

Quick reference for common WiFi terms and acronyms.