N4N062: Your First Wi-FI Network, Part 3

Ethan Banks and Holly Podbilak complete their wireless networking overview by covering three major topics: security, roaming, and access point specification.

On security, they trace the evolution from WEP (Wired Equivalent Privacy)—an early encryption standard that was trivially broken, enabling 'war driving' attacks—through WPA2 (Wi-Fi Protected Access 2) with AES encryption to WPA3, the current standard. They explain that WPA2, while more robust than WEP, is vulnerable to four-way handshake brute-force attacks and the 2017 KRACK vulnerability. WPA3 improves security through Simultaneous Authentication of Equals (SAE) instead of the Pre-Shared Key (PSK) handshake, assigns unique encryption keys per device, and resists offline dictionary attacks. The hosts note WPA3 is now mandatory for Wi-Fi 6E and 7. They also discuss WPA2-Enterprise and WPA3-Enterprise, which use individual user authentication via 802.1X and RADIUS servers rather than shared passwords, enabling credential revocation without network-wide password changes. Enhanced Open Networks (OWE) provides encryption even on open networks without passwords, though the hosts note this is rarely seen in practice, with captive portals being the more common approach.

On roaming, they address the challenge that clients (not access points) make roaming decisions, often resulting in 'sticky clients' that refuse to transition between access points even when signal degrades. To optimize roaming, they discuss three 802.11 standards: 802.11r (Fast BSS Transition) enables seamless handoffs in ~50 milliseconds by passing authentication credentials between access points without re-authentication, preventing Zoom call disruptions. 802.11k (Radio Resource Management) allows access points to inform clients about neighboring access points and signal strengths, reducing the need for clients to scan the air independently. 802.11v (BSS Transition Management) enables soft suggestions for clients to roam to better access points, useful in scenarios like conference rooms where many clients attach to one access point. The hosts explain that proper access point power and channel optimization is critical—access points should not all be at maximum power, as this creates interference and overlapping cells that degrade performance. AI-powered RRM tools now continuously monitor client experience and adjust power and channel assignments dynamically, though optimization is ongoing rather than one-time.

On access point specification, Holly outlines key decision factors: deployment location (indoor vs. outdoor, with outdoor units requiring weatherproofing), use case (dense office environments vs. sparse warehouses with high ceilings and metal interference vs. large public venues like stadiums), cost constraints, antenna types (omnidirectional vs. directional, including software-defined directional antennas), and MIMO configuration (2x2, 3x3, 4x4 spatial streams, with higher MIMO supporting denser client loads). The hosts note that external directional antennas are now less common in office deployments due to software-defined beamforming, but remain standard in large venues like stadiums. They emphasize that Wi-Fi design is highly specialized and that network engineers without Wi-Fi expertise should consult specialists, as Wi-Fi problems generate disproportionate user complaints despite representing a small portion of networking work.