Wireless LANs and Personal-Area Networks

Introduction and Context

Wireless local-area networks (WLANs) connect stations over radio rather than copper or fiber. The dominant WLAN family is IEEE 802.11, marketed primarily as Wi‑Fi. Personal-area networks (PANs) connect devices over shorter distances, usually with lower power consumption and smaller data volumes. Important PAN technologies include Bluetooth, Zigbee, and near-field communication (NFC).

These technologies are not interchangeable. Wi‑Fi is designed for relatively high throughput and general IP connectivity; Bluetooth is optimized for personal peripherals, audio, and low-power device links; Zigbee supports low-data-rate sensing and control; and NFC supports very short-range interaction, identification, and secure transactions. A network engineer must therefore select technology according to range, throughput, energy, mobility, interference, security, and cost requirements.

Learning Objectives

After studying this chapter, the learner should be able to:

1. Explain the architecture and operation of IEEE 802.11 WLANs.
2. Compare major Wi‑Fi generations and their principal improvements.
3. Describe scanning, authentication, association, medium access, and roaming.
4. Analyse WLAN capacity, interference, channel use, and deployment constraints.
5. Compare Wi‑Fi, Bluetooth, Zigbee, and NFC for practical applications.
6. Apply security, regulatory, and professional best practices to WLAN design.

1. IEEE 802.11 Architecture

An IEEE 802.11 network contains stations (STAs), access points (APs), and distribution-system components. A station is any device with an 802.11 interface. An AP is a station that provides wireless access to a distribution system, commonly an Ethernet switching network.

A basic service set (BSS) is the fundamental coverage unit. In an infrastructure BSS, stations communicate through an AP. The AP periodically transmits beacon frames containing network information such as the service set identifier (SSID), supported rates, timing information, and security capabilities. An extended service set (ESS) consists of multiple BSSs connected through a distribution system and configured to present a common WLAN service.

An independent BSS (IBSS), often called an ad hoc network, allows stations to communicate without an AP. IBSS operation is less common in enterprise deployments because it provides weaker centralized control and limited mobility management.

The SSID is a human-readable network name. It is not itself a security mechanism; hiding an SSID does not prevent discovery by a capable observer. The basic service set identifier (BSSID) usually identifies a particular BSS and is commonly the AP radio's MAC address.

2. The 802.11 Layered Model

The 802.11 standard defines physical-layer and MAC-layer behavior. The physical layer specifies frequency bands, modulation, coding, channel widths, transmit characteristics, and receiver requirements. The MAC layer defines frame formats, addressing, coordination, retransmission, association, authentication, and access to the shared medium.

Unlike switched Ethernet, a WLAN is a shared broadcast medium. A transmission may be received by several devices, and a station cannot reliably transmit and listen simultaneously on the same channel. Consequently, Wi‑Fi uses carrier-sense multiple access with collision avoidance (CSMA/CA), rather than Ethernet's historical collision-detection method.

Important 802.11 frame categories are:

802.11 frames include up to four MAC-address fields in some distribution-system situations. These fields may identify transmitter, receiver, source, and destination. This flexibility supports wireless bridging and distribution-system forwarding.

3. Wi‑Fi Generations and Physical Techniques

Wi‑Fi generations are commonly identified by IEEE amendments and by Wi‑Fi Alliance generation labels. Theoretical maximum rates are not equivalent to application throughput. They depend on channel width, modulation and coding scheme, number of spatial streams, guard interval, protocol overhead, contention, signal quality, and client capability.

Orthogonal frequency-division multiplexing (OFDM) divides a channel into orthogonal subcarriers. Each subcarrier carries a lower-rate stream, reducing sensitivity to frequency-selective multipath. Orthogonality means that, ideally, subcarriers can overlap in frequency without interfering because their correlation over the symbol interval is zero.

Multiple-input multiple-output (MIMO) uses multiple antennas to exploit spatial diversity or transmit independent spatial streams. If a link supports N spatial streams, the physical-layer rate can increase approximately with N under suitable channel conditions, but the streams require adequate signal quality and independent spatial paths.

OFDMA divides a channel into resource units assigned to different users. This is especially useful for many short packets, such as sensor reports or interactive traffic. It reduces the need for every station to contend separately for the entire channel.

BSS coloring allows a station to distinguish transmissions from its own BSS and overlapping BSSs. Under controlled conditions, a station may tolerate a stronger level of foreign-BSS energy than same-BSS energy, improving spatial reuse. Poorly configured thresholds, however, can increase collisions.

Target wake time (TWT) allows a station and AP to negotiate periods during which the station is awake. It can reduce energy consumption, particularly for battery-powered devices, although the benefit depends on traffic patterns and implementation quality.

4. Medium Access and Capacity

Before transmitting, a station performs physical carrier sensing and, where applicable, virtual carrier sensing using the network allocation vector (NAV). If the channel is idle for the required interframe space, the station may transmit. If it is busy, the station selects a random backoff counter within a contention window. The counter decreases during idle time and freezes when the channel becomes busy. Transmission begins when the counter reaches zero.

The receiving station normally sends an acknowledgment (ACK). If an ACK is not received, the sender assumes loss, increases its contention window within protocol limits, and retransmits. Loss may result from collision, interference, fading, hidden nodes, or a receiver leaving coverage.

Request-to-send/clear-to-send (RTS/CTS) can reduce hidden-node collisions by reserving the medium before a long data transmission. It introduces overhead, so it is most useful when collision costs are high or frames are large.

A simple engineering estimate of application throughput is:

Here, T_app is application throughput in bit/s; R_phy is the negotiated physical rate in bit/s; η_protocol represents MAC, interframe, acknowledgment, and encapsulation efficiency; η_contention represents time lost to contention and competing stations; and η_retransmission represents the fraction of time remaining after retransmissions. Each efficiency factor lies between 0 and 1. This is an estimate, not a standards equation, and it applies only when the factors are defined consistently for the same observation interval.

For example, if R_phy = 600 Mbit/s, protocol efficiency is 0.70, contention efficiency is 0.60, and retransmission efficiency is 0.90, then:

The result is an approximate aggregate application rate under the stated assumptions. Individual users may receive much less because the medium is shared.

Airtime is often a more useful planning resource than nominal bit rate. A slow station transmitting a large amount of data can consume a disproportionate fraction of airtime. Modern WLAN design therefore considers client rates, packet sizes, traffic direction, retries, and channel occupancy rather than relying only on advertised speed.

5. Discovery, Authentication, and Association

A client normally discovers WLANs through passive scanning, active scanning, or both. During passive scanning, it listens for beacon frames. During active scanning, it transmits probe requests and receives probe responses. Active scanning can accelerate discovery but creates additional management traffic.

The general infrastructure connection sequence is:

1. The client selects a candidate BSS based on policy, signal conditions, security capabilities, and network identity.
2. It completes 802.11 authentication, which in modern networks is usually an open-system exchange rather than proof of user identity.
3. It sends an association request containing capabilities and supported parameters.
4. The AP returns an association response.
5. If protected enterprise or personal security is used, a security handshake establishes or confirms encryption keys.
6. The client obtains network-layer configuration, commonly through DHCP or IPv6 autoconfiguration.

The distinction between 802.11 authentication and security authentication is important. Open-system authentication permits the management exchange but does not by itself provide confidentiality. WPA2 and WPA3 use stronger security mechanisms. WPA2 commonly uses AES-CCMP; WPA3-Personal uses Simultaneous Authentication of Equals (SAE); WPA3-Enterprise commonly uses 802.1X with an Extensible Authentication Protocol (EAP) method.

In enterprise networks, a RADIUS server may authenticate users or devices. Certificate-based EAP methods can provide strong mutual authentication, but certificate validation must be correctly implemented. Users should not be trained to accept arbitrary certificate warnings.

6. Roaming and Mobility

Roaming occurs when a client changes its serving AP while maintaining network service. In a well-designed ESS, APs share an SSID, security policy, and compatible network configuration. The client usually makes the roaming decision, although controllers and standards-based assistance can provide guidance.

A client may roam because received signal strength falls, packet loss rises, another AP offers better service, or the current AP is congested. Signal strength alone is insufficient: a strong but overloaded AP may be worse than a moderately strong, lightly loaded AP.

802.11k can provide neighbor reports; 802.11v supports network-assisted transition recommendations; and 802.11r can reduce the time required for key establishment during a fast transition. These features improve roaming latency when supported consistently by clients, APs, and controllers. They cannot eliminate all delay, and poorly interoperable implementations may cause connection problems.

Layer-2 roaming does not guarantee uninterrupted end-to-end communication. If the client changes IP subnet, higher-layer sessions may be disrupted unless mobility mechanisms or application resilience compensate. Voice and industrial control applications require explicit latency, jitter, packet-loss, and handoff testing.

7. WLAN Deployment Engineering

A practical WLAN deployment begins with requirements rather than AP placement. Requirements should specify user density, applications, expected throughput, mobility, coverage boundaries, security zones, availability, and regulatory constraints.

Spectrum and channel planning

The 2.4 GHz band often provides good propagation but has fewer practical non-overlapping channels and more interference from Bluetooth, microwave ovens, and legacy devices. The 5 GHz band usually offers more capacity and channels but has shorter propagation and may be subject to dynamic frequency selection requirements. The 6 GHz band can provide additional clean spectrum where national regulations and client support permit it.

Wider channels can increase peak rate but consume more spectrum and reduce the number of independent channels. In dense environments, narrower channels often provide greater aggregate capacity. Channel reuse must account for adjacent-channel leakage, co-channel contention, building materials, and client transmit power.

Coverage and capacity

Coverage planning asks whether a usable signal exists; capacity planning asks whether the network can serve the required number of clients and traffic load. A basic free-space estimate illustrates distance loss:

This form assumes d is distance in kilometres and f is frequency in megahertz. It models ideal free-space propagation and does not include walls, foliage, polarization mismatch, antenna gains, cable loss, fading, or implementation margins. It should therefore not replace a site survey.

For example, at 0.01 km and 2,400 MHz:

A link budget can then be expressed as:

All quantities are in dB or dBm as appropriate. P_rx is received power, P_tx is transmit power, G_tx and G_rx are antenna gains, and L_path and L_other are propagation and other losses. The result must be compared with receiver sensitivity plus a design margin. The equation is a bookkeeping identity under a consistent reference convention; it does not predict fading variability.

Site surveys may be predictive, passive, or active. Measurements should include signal strength, noise, channel occupancy, retry rate, data rate, roaming behavior, and application performance. A heat map showing only signal strength is not a complete WLAN assessment.

Power and physical installation

APs should be positioned to support predictable cell boundaries, adequate overlap for roaming, and acceptable interference. Excessive transmit power can enlarge cells without improving uplink performance, because mobile clients often transmit at lower power. APs should be connected to suitable Ethernet infrastructure and power-over-Ethernet budgets should be verified.

8. Bluetooth, Zigbee, and NFC

Bluetooth

Bluetooth operates in the 2.4 GHz ISM band and uses frequency hopping to reduce the effect of narrowband interference. Bluetooth Classic supports profiles such as hands-free audio and human-interface devices. Bluetooth Low Energy (BLE) uses advertising and connection mechanisms suited to sensors, beacons, wearables, and low-power control.

Bluetooth profiles define interoperable application behavior. A radio link alone does not guarantee that two devices support the same service. Security depends on pairing mode, authentication, key strength, device behavior, and user interaction. Legacy or unauthenticated pairing can expose devices to interception or impersonation.

Zigbee

Zigbee is designed for low-power, low-data-rate monitoring and control. It commonly uses IEEE 802.15.4 physical and MAC layers, with higher-layer networking and application specifications defining device roles and services. Zigbee networks may use star, tree, or mesh arrangements. Routers can forward traffic, while sleepy end devices conserve energy by communicating through a parent device.

Zigbee mesh networking improves coverage and resilience but introduces routing overhead, dependence on powered routers, and possible latency. Channel selection must consider Wi‑Fi interference in the 2.4 GHz band. Zigbee is appropriate for lighting, environmental sensing, and building automation, but generally not for high-bandwidth multimedia.

NFC

NFC operates over a very short distance, typically a few centimetres in intended use. It supports reader/writer interactions, card emulation, and peer-related functions. The short range assists deliberate tap interactions but is not a complete security guarantee. Relay, eavesdropping, malicious tags, and insecure application protocols remain possible.

NFC is widely used for contactless payment, access badges, transit tickets, device pairing, and product identification. Secure deployment requires cryptographic authentication, protected backend systems, transaction controls, and careful handling of lost devices or cards.

9. Security, Governance, and Ethics

WLAN security must address confidentiality, integrity, authentication, availability, and privacy. Recommended practices include WPA3 where feasible, strong enterprise authentication for organizational networks, separate guest and internal services, protected management interfaces, regular firmware updates, network segmentation, logging, and tested backup configurations.

Guest networks should be isolated from internal resources and should receive controlled Internet access. IoT devices should be placed in dedicated segments with only the traffic they require. Disabling unused services and changing default credentials are basic but essential controls.

Management-frame protection helps resist some spoofing and disruption attacks. It does not prevent all denial-of-service attacks, and wireless intrusion detection may be needed in sensitive environments. Rogue AP detection should be conducted in accordance with law, organizational policy, and privacy requirements.

Organizations should collect only necessary client information, protect logs, define retention periods, and inform users about monitoring. Location and association records can reveal movement patterns and therefore require governance. Regulatory requirements vary by jurisdiction and include permitted bands, transmit-power limits, indoor/outdoor restrictions, and dynamic-frequency procedures.

10. Illustrative Case: WLAN for a University Engineering Building

Background

A four-floor engineering building has lecture rooms, laboratories, offices, and a student collaboration area. The existing WLAN provides acceptable coverage in corridors but suffers from slow service during examinations and unreliable voice calls while users move between floors.

Problem

The original design used high transmit power and a small number of APs. Measurements showed strong signals near APs but high channel occupancy, excessive contention, and poor uplink balance. Several laboratories also contained metal equipment that caused multipath and shadowing.

Analysis

The design team collected client counts, application traffic, retry rates, channel utilization, and roaming events. They found that a few APs served too many clients, 2.4 GHz was congested, and neighboring APs used overlapping wide channels. Voice clients delayed roaming because they remained attached to a distant AP with a weak effective data rate.

Approach and solution

The team installed more APs at lower, better-balanced power levels; used narrower channels in dense areas; prioritized 5 GHz and 6 GHz-capable clients; and retained 2.4 GHz primarily for devices that required it. A dedicated secure SSID was created for staff and students using enterprise authentication, while laboratory IoT devices were placed in a restricted segment. Neighbor reports and fast-transition features were enabled after interoperability testing. The team also improved wired uplinks and verified power budgets.

Outcome

Follow-up tests showed lower channel utilization per AP, fewer retries, faster handoffs, and improved voice continuity. The result was not simply a higher peak data rate; it was better airtime distribution and more predictable application performance.

Learning points

1. Coverage maps do not replace capacity analysis.
2. More transmit power can worsen reuse and does not solve client uplink limitations.
3. Roaming requires client, AP, security, and network-layer cooperation.
4. IoT segmentation should be designed from the beginning.
5. Performance claims must be validated with real traffic and representative clients.

11. Contemporary Developments and Professional Practice

Wi‑Fi 6 and Wi‑Fi 7 increasingly emphasize efficiency in dense environments rather than only peak speed. Multi-link operation can use more than one band or channel for resilience and throughput, but benefits depend on client and AP support, spectrum availability, and implementation maturity. Cloud-managed WLANs simplify centralized configuration and analytics, while increasing dependence on vendor platforms, Internet connectivity, licensing, and data governance.

Machine-learning features are appearing in WLAN monitoring, anomaly detection, channel recommendations, and client experience scoring. These tools can identify patterns, but they do not replace engineering judgment. Training data may be incomplete, recommendations may be opaque, and automated changes can create outages. Human approval, rollback procedures, and measurable acceptance criteria remain important.

A professional deployment should maintain a requirements document, radio-frequency plan, logical security design, equipment inventory, configuration baseline, test plan, change records, and incident-response procedure. Acceptance tests should include coverage, capacity, roaming, authentication, failure recovery, and security—not merely a speed test beside an AP.

Chapter Summary

IEEE 802.11 WLANs use stations, access points, BSSs, ESSs, and distribution systems to provide wireless connectivity. Their shared radio medium requires CSMA/CA, contention management, acknowledgments, retransmissions, and careful airtime planning. Wi‑Fi generations have improved efficiency through MIMO, wider channels, OFDMA, multi-user operation, BSS coloring, and multi-link techniques, but advertised physical rates are not equivalent to application throughput.

Discovery, authentication, association, security handshakes, IP configuration, and roaming are distinct processes. Enterprise security should use modern WPA mechanisms, strong authentication, segmentation, protected management, and appropriate monitoring. WLAN design must address both coverage and capacity, including spectrum reuse, interference, client behavior, building materials, and regulatory requirements.

Bluetooth and BLE serve personal peripherals and low-power devices; Zigbee supports low-rate sensing and control, often using mesh networking; and NFC supports deliberate, very short-range interactions. Technology choice should follow application requirements rather than popularity. Effective deployment combines measurement, security governance, interoperability testing, operational documentation, and realistic application-level validation.

Key Terms

Station (STA): An IEEE 802.11 device capable of wireless communication.

Access point (AP): A station that provides wireless access to a distribution system.

Basic service set (BSS): The fundamental IEEE 802.11 wireless coverage and service unit.

Extended service set (ESS): A set of interconnected BSSs providing a common WLAN service.

SSID: The human-readable identifier of a WLAN.

BSSID: The identifier of a particular basic service set.

CSMA/CA: A medium-access method using carrier sensing and collision avoidance.

NAV: A virtual carrier-sensing timer indicating reserved medium time.

MIMO: Use of multiple antennas for spatial diversity or multiple spatial streams.

OFDMA: Division of an OFDM channel into resource units for multiple users.

BSS coloring: A mechanism for distinguishing transmissions from overlapping BSSs.

Roaming: Changing the serving AP while maintaining network service.

WPA3: A contemporary Wi‑Fi security framework with personal and enterprise modes.

802.1X: Port-based access control commonly used with enterprise WLAN authentication.

Bluetooth Low Energy: A Bluetooth technology optimized for low-power communication.

Zigbee: A low-power networking technology commonly used for sensing and control.

NFC: Very short-range wireless communication used for tap-based interactions.

Airtime: The fraction of channel time occupied by transmissions and related overhead.

Link budget: An accounting of transmit power, gains, and losses in a radio link.

Site survey: A measurement or modelling process used to evaluate WLAN deployment conditions.

Review Questions

Short Answer Questions

1. What is the difference between a BSS and an ESS?
2. Why does 802.11 use collision avoidance rather than collision detection?
3. Distinguish passive scanning from active scanning.
4. What problem does OFDMA address in a dense WLAN?
5. Why is SSID hiding not a security mechanism?

Long Answer Questions

1. Explain the stages involved when a client discovers, authenticates to, and associates with an infrastructure WLAN.
2. Compare Wi‑Fi 4, Wi‑Fi 5, Wi‑Fi 6, and Wi‑Fi 7 in terms of their principal technical improvements.
3. Discuss the causes of poor WLAN performance even when received signal strength is high.
4. Explain enterprise WLAN security architecture, including WPA3, 802.1X, RADIUS, segmentation, and management protection.
5. Compare Wi‑Fi, Bluetooth, Zigbee, and NFC for range, energy use, network organization, and application suitability.

Analytical / Application Questions

1. A building has strong 2.4 GHz coverage but high channel occupancy and frequent retries. Propose a measurement and redesign plan, explaining how channel width, AP density, client distribution, and transmit power should be considered.
2. An industrial monitoring system requires battery operation, periodic sensor reports, mesh coverage, and low data rates. Evaluate whether Zigbee, BLE, or Wi‑Fi is most appropriate and justify the choice.
3. A university wants uninterrupted voice service while users move between APs. Develop a testing strategy covering RF conditions, authentication, 802.11k/v/r support, subnet design, client diversity, latency, jitter, and packet loss.

Multiple Choice Questions with Answers

Question 1

Which IEEE 802.11 component normally provides wireless access to a distribution system?

A. Access point

B. Beacon interval

C. Resource unit

D. Pairing key

Correct Answer: A. Access point

Question 2

What is the principal purpose of CSMA/CA in Wi‑Fi?

A. To assign IP addresses

B. To avoid collisions on the shared radio medium

C. To encrypt application data

D. To increase antenna gain

Correct Answer: B. To avoid collisions on the shared radio medium

Question 3

Which Wi‑Fi feature divides a channel into resource units for multiple users?

A. SAE

B. RTS/CTS

C. OFDMA

D. DHCP

Correct Answer: C. OFDMA

Question 4

Which statement about an SSID is correct?

A. It is a complete encryption mechanism

B. It identifies a WLAN service name

C. It is always identical to the user password

D. It prevents all rogue AP attacks

Correct Answer: B. It identifies a WLAN service name

Question 5

What is a likely effect of excessive transmit power in a dense WLAN?

A. Improved frequency reuse in every case

B. Larger cells and potentially more co-channel contention

C. Automatic WPA3 authentication

D. Removal of all hidden-node problems

Correct Answer: B. Larger cells and potentially more co-channel contention

Question 6

Which technology is most closely associated with very short-range tap interactions?

A. NFC

B. Wi‑Fi 6

C. Zigbee mesh

D. Bluetooth Classic audio

Correct Answer: A. NFC

Question 7

In the approximate throughput relation T_app ≈ R_phy × η_protocol × η_contention × η_retransmission, what does η_retransmission represent?

A. Antenna height

B. The fraction of performance remaining after retransmission losses

C. The number of spatial streams

D. The channel frequency

Correct Answer: B. The fraction of performance remaining after retransmission losses

Question 8

Which technology is generally most suitable for low-power building sensors and control devices?

A. Zigbee

B. NFC only

C. High-bandwidth Wi‑Fi video

D. Ethernet switching

Correct Answer: A. Zigbee

Question 9

What is the main purpose of 802.11r?

A. To provide faster security transitions during roaming

B. To increase NFC coupling distance

C. To replace DHCP

D. To define Bluetooth profiles

Correct Answer: A. To provide faster security transitions during roaming

Question 10

Using FSPL(dB) = 20 log₁₀(d) + 20 log₁₀(f) + 32.44 with distance in kilometres and frequency in megahertz, which assumption is essential?

A. The model represents ideal free-space propagation

B. The model automatically includes building walls

C. The model applies only to NFC

D. The model directly gives application throughput

Correct Answer: A. The model represents ideal free-space propagation