Wireless, Mobile and IoT Networking

Introduction and Context

Wireless networking transfers information through electromagnetic waves rather than a guided cable. It supports home and enterprise WLANs, mobile broadband, industrial sensors, medical devices, transport systems and smart buildings. The major engineering challenge is that radio communication uses a shared, variable and interference-prone medium. A useful design must therefore balance coverage, capacity, mobility, security, power consumption, cost and regulatory restrictions.

This chapter develops the foundations required to design and operate basic wireless LANs and to distinguish the requirements of Wi-Fi, Bluetooth, cellular, Zigbee and Internet of Things (IoT) systems.

Learning Objectives

After studying this chapter, a student should be able to:

• explain radio-frequency propagation, channels, bandwidth, modulation and interference;
• distinguish important Wi-Fi generations and deployment models;
• design a basic WLAN using access points, channels, addressing and security controls;
• explain the roles of wireless LAN controllers and roaming mechanisms;
• configure a WLAN using WPA-based security principles;
• compare Bluetooth, cellular, Zigbee and IoT networking requirements; and
• identify practical, regulatory, operational and ethical issues in wireless deployment.

1. Radio-Frequency Foundations

1.1 Frequency, wavelength and spectrum

Radio signals are electromagnetic waves. Frequency is the number of cycles per second, measured in hertz (Hz). Wavelength is the physical distance between corresponding points on successive cycles. Their relationship is:

where λ is wavelength in metres, c is the speed of light in free space, approximately 3 × 10⁸ m/s, and f is frequency in hertz. The equation assumes propagation in free space; materials can reduce propagation speed slightly. Higher frequency produces a shorter wavelength. Shorter wavelengths can support smaller antennas, but they are often more strongly absorbed or blocked by walls and objects.

Wireless systems operate in allocated frequency bands. Wi-Fi commonly uses 2.4 GHz, 5 GHz and, in newer deployments, 6 GHz bands. The exact permitted channels and power levels depend on national regulations. Licensed cellular spectrum is controlled by regulators and assigned to operators, whereas many Wi-Fi and short-range bands are licence-exempt but still subject to technical rules.

1.2 Power and decibels

Signal power is frequently expressed in dBm, referenced to 1 milliwatt:

For example, 100 mW equals 20 dBm because 10 log₁₀(100) = 20. Decibels are also used for gains and losses. A simplified link-budget relationship is:

Pᵣ is received power, Pₜ is transmitter power, Gₜ and Gᵣ are antenna gains, and L represents path and other losses. All terms are logarithmic quantities. This model is useful for planning but does not fully predict indoor performance because reflections, shadowing and human movement cause variation.

In ideal free space, path loss is:

when d is distance in kilometres and f is frequency in megahertz. The formula applies to unobstructed free-space propagation and should not be treated as an indoor coverage guarantee.

1.3 Propagation effects

Four effects are especially important:

• Reflection: radio energy bounces from large surfaces such as walls and metal structures.
• Absorption: materials such as concrete, water and the human body convert some energy into heat.
• Diffraction: signals bend around edges, allowing limited coverage behind obstacles.
• Multipath: reflected copies arrive at different times and may reinforce or cancel one another.

Modern Wi-Fi uses multiple antennas and spatial processing to exploit multipath. Nevertheless, a strong received signal does not always imply good throughput; noise, contention, retransmissions and interference also matter.

2. Channels, Modulation and Capacity

A channel is a defined frequency range used for communication. Channel width may be 20, 40, 80 or 160 MHz in suitable Wi-Fi systems. Wider channels can provide higher peak throughput but consume more spectrum and are more likely to overlap with other networks.

Wireless media are shared. Devices normally use carrier sense and collision avoidance: a station listens before transmitting, waits when the medium is busy, and uses random backoff to reduce simultaneous transmissions. This differs from switched Ethernet, where each full-duplex port can normally transmit independently.

Modulation maps digital data onto radio waves. More advanced modulation schemes transmit more bits per symbol but require a better signal-to-noise ratio. Coding adds controlled redundancy so that some errors can be corrected. Wi-Fi therefore adapts its modulation and coding rate according to channel conditions. A high nominal data rate may fall sharply at the edge of coverage.

The theoretical Shannon capacity of a noisy channel is:

C is channel capacity in bits per second, B is bandwidth in hertz, and S/N is the linear signal-to-noise power ratio. The relationship assumes an ideal channel and indicates an upper bound, not a guaranteed practical rate. Protocol overhead, contention, encryption, acknowledgements and retransmissions reduce user throughput.

Interference

Interference may be:

• Co-channel interference: networks use the same channel and compete for airtime.
• Adjacent-channel interference: overlapping channel bandwidths disturb one another.
• Non-Wi-Fi interference: devices such as microwave ovens, cordless equipment or industrial transmitters affect the band.
• Self-interference: poorly planned radios or excessive transmit power disrupt nearby cells.

A good design does not simply maximize transmitter power. Excessive power enlarges contention areas and can create asymmetric links in which a client hears an access point but the access point cannot reliably hear the client.

3. Wi-Fi Architecture and Standards

Wi-Fi is based on IEEE 802.11. A basic service set (BSS) consists of an access point (AP) and associated wireless stations. An independent BSS, commonly called ad hoc mode, allows stations to communicate without an AP. An infrastructure BSS uses an AP. Multiple infrastructure BSSs connected through a distribution system form an extended service set (ESS), allowing one network name to cover several APs.

An SSID is the name advertised by a WLAN. It is not a security credential. A BSSID identifies a particular radio interface, commonly by its MAC address. A station associates with an AP and obtains network service through mechanisms such as DHCP and IP routing.

Important Wi-Fi generations include:

Features should not be confused with guaranteed performance. A Wi-Fi 6 AP may serve older clients, and the slowest or most airtime-intensive clients can affect cell efficiency. Wi-Fi 7 capabilities require compatible clients, suitable spectrum and regulatory approval.

Access points and controllers

An AP provides radio connectivity and commonly bridges wireless frames to a wired Ethernet network. It may also implement authentication, encryption, VLAN mapping, quality-of-service rules and client management.

A wireless LAN controller (WLC) centrally manages multiple APs. Typical functions include configuration templates, firmware management, radio-resource coordination, monitoring, authentication integration, guest access and roaming support. Controller-based architecture improves consistency, but it introduces dependency on the controller, management network and vendor platform. Cloud-managed WLANs perform comparable control functions through a cloud service, creating additional availability, privacy and data-governance considerations.

4. Designing a Basic WLAN

WLAN design begins with requirements rather than equipment selection. The designer should document the building layout, wall materials, user density, applications, expected client count, mobility, security zones, Internet capacity, power availability and regulatory domain.

Coverage and capacity

Coverage planning asks whether a client can maintain a usable signal. Capacity planning asks whether enough airtime exists for all users. A lecture hall may have adequate signal strength but poor performance because hundreds of clients contend for the same airtime. Voice and video require predictable latency and packet loss, while sensor traffic may require only a few bytes every minute.

A practical design process is:

1. create a floor plan and identify obstacles;
2. define minimum received signal and signal-to-noise targets for each application;
3. estimate clients, traffic, concurrency and roaming requirements;
4. perform predictive planning and, where possible, a site survey;
5. place APs according to coverage, capacity, cabling and power constraints;
6. select channels and transmit power using the permitted regulatory domain;
7. map SSIDs to VLANs and firewall policies;
8. test authentication, roaming, throughput, latency and failure recovery; and
9. monitor the deployment and revise it as usage changes.

Too many SSIDs increase beacon overhead and management complexity. A typical design uses separate logical policies for staff, students, guests and IoT devices, but avoids creating an unnecessary SSID for every department.

Addressing and segmentation

An AP does not replace an IP network. The WLAN still requires switching, DHCP, DNS, routing and security controls. VLANs can separate user groups, but VLAN separation alone is not a complete security policy. Inter-VLAN firewall rules should restrict access to only the services required.

Guest networks should normally provide Internet access without access to internal systems. IoT networks should restrict outbound destinations and prevent devices from initiating arbitrary connections to administrative or user networks. Management interfaces should be reachable only from authorized administration networks.

Roaming

A mobile client can move between APs in the same ESS. The client usually decides when to roam, while the infrastructure provides assistance. 802.11k can provide neighbouring-AP information, 802.11v can assist with network-directed transitions, and 802.11r can reduce authentication delay through fast BSS transition where supported and correctly configured.

Roaming is not the same as seamless service. A voice call can still suffer interruption if the client delays roaming, authentication fails or the new AP has insufficient capacity. Consistent SSIDs, security settings, VLAN reachability and radio design are essential.

5. Wireless Security and WPA

Wireless traffic travels beyond physical walls, so an attacker may attempt to capture frames from a nearby location. Security must protect confidentiality, integrity, authentication and availability.

Older mechanisms such as WEP are cryptographically obsolete and must not be used. WPA and WPA2 improved security, while WPA3 provides stronger contemporary protection. Common modes include:

• Personal: a pre-shared password, suitable for homes and small environments.
• Enterprise: 802.1X authentication, normally using an authenticator (AP or controller), a RADIUS server and an identity database.

WPA2 commonly uses AES-based CCMP. WPA3-Personal uses Simultaneous Authentication of Equals (SAE), which improves resistance to offline password-guessing compared with traditional pre-shared-key exchange. WPA3-Enterprise supports stronger enterprise security profiles. Exact feature support depends on clients, APs and operating systems.

Best practices include using long unique credentials, preferring WPA3 where compatible, disabling obsolete protocols, validating the server certificate in enterprise authentication, separating guest and IoT traffic, updating firmware, protecting management interfaces with multifactor authentication where available, and monitoring authentication failures.

A shared password creates an accountability problem: when an employee leaves, every device may need reconfiguration. Enterprise authentication provides individual identity, centralized revocation and better auditability, although it requires more planning and reliable authentication services.

6. Bluetooth, Cellular and Zigbee

Bluetooth

Bluetooth is designed for short-range personal-area networking. Bluetooth Classic supports applications such as audio and serial-like connections. Bluetooth Low Energy (BLE) is optimized for intermittent, low-power communication and supports advertising, scanning, connections and profiles. BLE devices often use a central-peripheral relationship, although newer mesh applications support many-to-many relaying.

Bluetooth is appropriate for keyboards, headphones, wearables, beacons and short-range sensors. Its limitations include short range relative to cellular, constrained throughput for many profiles, pairing complexity and dependence on device capability. Secure pairing method, authenticated encryption and user confirmation should be selected according to device risk.

Cellular networking

Cellular systems divide geographical areas into cells served by base stations. The mobile core authenticates subscribers, manages mobility and connects users to external networks. Generations have evolved from voice-focused systems to packet-oriented 4G LTE and 5G systems.

Cellular is suitable for wide-area mobility, fleet tracking, public safety, remote monitoring and broadband access. It offers managed spectrum and broad coverage, but requires operator service, subscription cost, modem certification, antenna design and attention to coverage gaps. 5G can support enhanced mobile broadband, lower-latency services and large device populations, but these capabilities are deployment-dependent rather than automatic.

Zigbee

Zigbee is a low-power mesh-oriented technology commonly associated with IEEE 802.15.4 radios. It is used in lighting, building automation and sensors. End devices can sleep to conserve energy; routers relay traffic; and a coordinator or network-management function establishes the network. Mesh routing improves coverage and resilience but adds configuration and dependency on powered relay nodes.

Zigbee is not a replacement for Wi-Fi. Its lower data rate and low energy consumption suit small telemetry messages, whereas Wi-Fi suits high-throughput applications such as video.

7. IoT Networking Requirements

IoT is an application domain rather than one protocol. A complete IoT system includes devices, connectivity, gateways or edge processing, cloud or local services, data storage, management and security.

Requirements should be expressed explicitly:

• payload size and reporting interval;
• latency and reliability;
• battery life and maintenance access;
• range and indoor penetration;
• device density;
• bidirectional control needs;
• authentication, confidentiality and update mechanisms;
• regulatory and safety constraints; and
• lifecycle, interoperability and vendor-support expectations.

Application protocols include MQTT, which uses a broker and publish/subscribe topics, and CoAP, which provides a constrained web-like request model, often over UDP with suitable security. Neither protocol solves every security or connectivity problem. TLS is commonly used with TCP-based protocols such as MQTT, while DTLS or OSCORE may be used for constrained datagram-oriented designs, depending on the architecture.

Gateways can translate protocols, buffer messages during outages, filter data and perform local decisions. Edge processing reduces latency and bandwidth but creates another system that must be secured and maintained. Cloud processing provides scalability but raises availability, privacy, sovereignty and recurring-cost questions.

IoT security lifecycle

Security begins before installation. Devices should have unique identities rather than universal default passwords, secure boot where feasible, protected credentials, signed firmware updates, least-privilege services, encrypted communications, inventory records and a documented end-of-life process. A device that cannot receive security updates may become an unacceptable long-term risk even if its initial purchase price is low.

IoT data can reveal occupancy, health, work patterns or industrial processes. Organizations should collect only necessary data, define retention periods, restrict access, obtain required consent and comply with applicable privacy and critical-infrastructure regulations.

8. Applied Case: Illustrative Community Learning Centre WLAN and IoT Upgrade

Background

A two-storey learning centre has 80 staff members, 600 students, a public guest area, IP cameras, smart lighting and environmental sensors. Users report slow service in the library and intermittent disconnections while moving between classrooms.

Problem analysis

The existing network uses four APs with maximum transmit power and one shared SSID. A preliminary survey finds strong signal near APs but excessive co-channel contention in the library. The same network contains staff laptops, guests and IoT devices. The IoT lighting controller uses legacy credentials, and the APs are not centrally monitored.

Approach and solution

The design team first classifies traffic. Staff require protected access to institutional services; students require learning systems; guests require Internet-only access; cameras require restricted access to recording servers; and sensors require short telemetry exchanges.

A predictive survey followed by validation testing places additional APs in high-density areas rather than merely extending coverage. The 5 GHz band is preferred for capable clients, while 2.4 GHz is retained for selected IoT devices. Channel width is reduced in dense areas to improve channel reuse. A controller centrally manages radio settings and firmware.

Separate SSIDs map to separate VLANs and firewall policies: Staff, Learner, Guest and IoT. Staff authentication uses WPA2/WPA3-Enterprise with RADIUS. Guest access uses a captive portal and Internet-only policy. IoT devices use individual credentials or certificates where supported; legacy devices are isolated and scheduled for replacement. AP placement and power are tuned to encourage timely roaming, and compatible clients use 802.11k/v/r features after interoperability testing.

Outcome

The redesigned WLAN provides more usable airtime in the library, predictable separation between trust zones and improved visibility of failures. Roaming tests show that supported voice clients transition with brief interruption. The case also demonstrates that adding APs without channel, capacity and security planning could have worsened contention.

Learning points

A successful WLAN is an engineered system, not simply a collection of high-power APs. Requirements, survey evidence, channel reuse, identity-based security, segmentation, monitoring and lifecycle management must be considered together.

9. Challenges, Limitations and Professional Practice

Wireless performance changes with people, furniture, weather, neighbouring networks and software updates. Survey results are a snapshot, so monitoring and periodic reassessment are necessary. Manufacturer data rates are theoretical and should not be presented as guaranteed application throughput.

Regulatory domains determine legal channels, maximum effective isotropic radiated power, indoor/outdoor use and permitted devices. Engineers must use the correct country configuration and avoid unauthorized transmitters. In healthcare, education, transportation and industrial environments, electromagnetic compatibility and safety requirements may be especially important.

Automation and AI-assisted radio management can identify congestion, recommend channels and detect anomalies. Such tools should support—not replace—engineering judgment. Automated changes need approval boundaries, audit logs and rollback procedures. Machine-learning monitoring may also process personal or location data, requiring transparent governance.

Operational best practices include maintaining an asset inventory, standardizing configurations, backing up controller settings, testing firmware before broad deployment, measuring user experience rather than only signal strength, documenting exceptions, rehearsing controller and authentication failures, and planning replacement before security support ends.

Chapter Summary

Wireless networks use shared electromagnetic spectrum and are affected by frequency, wavelength, propagation, noise, interference and multipath. Wi-Fi infrastructure uses APs, SSIDs, BSSs, ESSs, switching, VLANs and often centralized controllers. Channel width, modulation, coding, client density and airtime contention determine practical capacity. A basic WLAN design requires requirements analysis, site surveying, channel and power planning, segmentation, authentication, testing and monitoring. WPA2 and WPA3 provide modern security options, with enterprise authentication offering stronger accountability than a shared password. Roaming depends on compatible clients, consistent infrastructure and appropriate 802.11 assistance features. Bluetooth suits personal-area connections, cellular suits managed wide-area mobility, Zigbee suits low-power mesh sensing, and IoT designs must match connectivity to power, range, data, reliability, security and lifecycle requirements.

Key Terms

Access point: Device that provides wireless station access to a wired or routed network.

BSS: Basic service set consisting of an AP and associated stations, or an independent group of stations.

Channel: Defined frequency range used for radio communication.

Co-channel interference: Competition caused by multiple systems using the same channel.

ESS: Extended service set formed from multiple infrastructure BSSs.

IoT: Networked physical devices that sense, communicate, compute or control.

MIMO: Multiple-input multiple-output antenna technique.

Multipath: Arrival of multiple reflected copies of a radio signal.

OFDMA: Technique allowing subcarriers to be assigned among users efficiently.

RADIUS: Protocol and service commonly used for centralized network authentication.

Roaming: Movement of a client association from one AP or cell to another.

RSSI: Received signal strength indicator reported by a radio system.

SAE: WPA3-Personal authentication method named Simultaneous Authentication of Equals.

SSID: Human-readable WLAN network name.

VLAN: Logical Layer 2 segmentation mechanism.

WLAN: Wireless local area network.

WPA: Wi-Fi security framework providing authentication and encryption.

WLC: Wireless LAN controller used to manage multiple APs.

Review Questions

Short Answer Questions

1. What is the relationship between frequency and wavelength?
2. Distinguish co-channel interference from adjacent-channel interference.
3. What are the principal functions of a wireless LAN controller?
4. Why is WPA3-Enterprise generally more accountable than a shared personal password?
5. Give one appropriate use for Bluetooth, cellular, Zigbee and Wi-Fi.

Long Answer Questions

1. Explain the process of designing a basic enterprise WLAN from requirements gathering through validation.
2. Describe how reflection, absorption, diffraction and multipath affect indoor wireless communication.
3. Compare WPA2-Personal, WPA2-Enterprise and WPA3-Personal in terms of authentication and operational suitability.
4. Explain how VLANs, firewall policies and separate SSIDs can protect staff, guest and IoT traffic.
5. Compare Wi-Fi, Bluetooth Low Energy, cellular and Zigbee with respect to range, throughput, power and applications.

Analytical / Application Questions

1. A library has adequate signal strength but poor performance during examinations. Analyze likely causes and propose a measurement-led redesign.
2. Design an IoT network for battery-powered environmental sensors in a large building. Justify the radio technology, application protocol, security controls and gateway strategy.
3. A company wants one shared password for staff, guests and smart lighting. Evaluate the security and operational risks and propose a better architecture.

Multiple Choice Questions with Answers

Question 1

Which factor most directly explains why a wider Wi-Fi channel can reduce channel reuse in a dense deployment?

A. It consumes more frequency spectrum

B. It always lowers transmit power

C. It prevents encryption

D. It removes the need for antennas

Correct Answer: A. It consumes more frequency spectrum

Question 2

In the free-space wavelength relationship λ = c/f, what happens to wavelength when frequency increases?

A. It increases proportionally

B. It decreases

C. It remains constant

D. It becomes zero for every frequency

Correct Answer: B. It decreases

Question 3

Which WLAN component centrally manages configuration and radio operation for multiple access points?

A. DHCP relay

B. Wireless LAN controller

C. Bluetooth peripheral

D. Coaxial splitter

Correct Answer: B. Wireless LAN controller

Question 4

Which security mode normally provides individual user authentication through 802.1X and RADIUS?

A. WPA-Personal

B. Open authentication

C. WPA-Enterprise

D. WEP shared key

Correct Answer: C. WPA-Enterprise

Question 5

Which technology is most appropriate for a low-power mesh of building-lighting sensors?

A. Zigbee

B. 5G enhanced mobile broadband only

C. Bluetooth audio streaming

D. Gigabit Ethernet over fiber

Correct Answer: A. Zigbee

Question 6

What is the main purpose of a guest WLAN firewall policy?

A. To provide guests unrestricted access to internal servers

B. To isolate guest traffic from protected internal networks

C. To increase antenna gain

D. To convert radio waves into sound

Correct Answer: B. To isolate guest traffic from protected internal networks

Question 7

Which statement best describes roaming?

A. Changing an IP address without changing wireless association

B. Moving a client association between APs or cells

C. Increasing a channel's frequency width

D. Encrypting a stored database

Correct Answer: B. Moving a client association between APs or cells

Question 8

A received-power calculation uses Pᵣ = Pₜ + Gₜ + Gᵣ − L. If Pₜ = 20 dBm, antenna gains total 4 dB and losses are 10 dB, what is Pᵣ?

A. 6 dBm

B. 14 dBm

C. 34 dBm

D. −14 dBm

Correct Answer: B. 14 dBm

Question 9

Which IoT characteristic most strongly favors edge processing?

A. The need for local decisions during cloud disconnection

B. The desire to eliminate all device identities

C. The requirement that every device use video

D. The absence of any latency requirement

Correct Answer: A. The need for local decisions during cloud disconnection

Question 10

Why is maximum access-point transmit power not always the best WLAN design choice?

A. It can enlarge contention areas and create asymmetric links

B. It guarantees adjacent-channel interference disappears

C. It disables all client authentication

D. It prevents all multipath effects

Correct Answer: A. It can enlarge contention areas and create asymmetric links