Blog

Wi-Fi is so familiar that it is easy to forget how unusual it is as a network technology. Every device shares one half-duplex radio channel, nobody can detect a collision while it is happening, signal quality changes as people walk around, and the “cable” is invisible and shared with neighbours, microwave ovens and Bluetooth headsets. This post covers the foundations that every later topic builds on: who defines Wi-Fi, how the generations evolved, the building blocks of a WLAN, how stations share the air, how a client joins a network, and why the speed on the box is never the speed in the room.

It is the first of a set of wireless fundamentals posts on this site. The others go deeper on specific areas: Radio Frequency Bands, EIRP and OFDM, Channel Bonding and Frame Types, Spectrum Management, QoS and RSN/WPA2, and the Wireless Terminology and Acronyms reference. The Aruba Wireless series then applies all of it to a real enterprise platform.

Who Defines Wi-Fi

Four kinds of organization shape every Wi-Fi network, and it helps to know which one is responsible for what:

Organization	Role	Examples of its output
IEEE 802.11 Working Group	Writes the technical standard: PHY and MAC behaviour	802.11-2020 (the base standard), amendments such as 802.11ax and 802.11be
Wi-Fi Alliance	Industry body that tests interoperability, certifies products and owns the “Wi-Fi” brand	Wi-Fi CERTIFIED programs, generation names (Wi-Fi 6, Wi-Fi 7), WPA2 and WPA3
Regulators	Decide which frequencies may be used, at what power, under what rules	FCC (US), ETSI and national regulators (Europe), ISED (Canada), Ofcom (UK)
IETF	Standards for the protocols around Wi-Fi	RADIUS, EAP methods, CAPWAP (controller-to-AP protocol)

The distinction matters in practice. The IEEE standard often contains optional features that few vendors implement; the Wi-Fi Alliance certification decides which of them become mandatory in products. WPA2 and WPA3 are Wi-Fi Alliance programs built on IEEE 802.11 security mechanisms (originally the 802.11i amendment). And regulators, not the IEEE, decide whether a channel or power level is legal in a given country — which is why the same access point model has different channel lists in different regions.

Wi-Fi is unlicensed spectrum: anyone may transmit without a licence as long as the equipment is certified and stays within power and behaviour rules. That freedom is why Wi-Fi is cheap and everywhere, and also why it must coexist with everything else using the same bands.

The 802.11 Generations

The original IEEE 802.11 standard was published in 1997. Since then, amendments have added new physical layers and features; periodically the IEEE rolls the amendments into a new revision of the base standard (802.11-2007, -2012, -2016, -2020 and so on). In 2018 the Wi-Fi Alliance introduced simple generation names, so that buyers no longer needed to decode amendment letters.

Amendment	Generation	Year	Bands	Max channel width	Max PHY rate	Headline features
802.11	—	1997	2.4 GHz (and infrared)	22 MHz	2 Mbps	DSSS or FHSS; the original MAC (CSMA/CA)
802.11b	(Wi-Fi 1)*	1999	2.4 GHz	22 MHz	11 Mbps	DSSS with CCK; made Wi-Fi a mass-market product
802.11a	(Wi-Fi 2)*	1999	5 GHz	20 MHz	54 Mbps	OFDM — the basis of every later standard
802.11g	(Wi-Fi 3)*	2003	2.4 GHz	20 MHz	54 Mbps	OFDM in 2.4 GHz, backward compatible with 802.11b
802.11n	Wi-Fi 4	2009	2.4 + 5 GHz	40 MHz	600 Mbps	MIMO (up to 4 spatial streams), frame aggregation, 40 MHz channels
802.11ac	Wi-Fi 5	2013	5 GHz only	160 MHz	6.9 Gbps	256-QAM, 80/160 MHz channels, downlink MU-MIMO (Wave 2)
802.11ax	Wi-Fi 6 / 6E	2019 cert. / 2021 IEEE	2.4 + 5 (+ 6 GHz for 6E)	160 MHz	9.6 Gbps	OFDMA, uplink MU-MIMO, 1024-QAM, BSS colouring, Target Wake Time
802.11be	Wi-Fi 7	2024 cert.	2.4 + 5 + 6 GHz	320 MHz (6 GHz)	~46 Gbps	Multi-Link Operation, 4096-QAM, 320 MHz channels, puncturing, multi-RU

* The Wi-Fi Alliance named only Wi-Fi 4 onward; “Wi-Fi 1–3” are informal labels used in some literature.

What Each Generation Really Changed

• 802.11b and 802.11a (1999) took two different routes. 802.11b stayed in crowded 2.4 GHz with an improved DSSS scheme and became the product everyone bought. 802.11a introduced OFDM in the cleaner 5 GHz band; it was more expensive and had shorter range, but OFDM became the foundation of everything that followed.
• 802.11g (2003) brought OFDM to 2.4 GHz. Its catch was backward compatibility: when 802.11b devices were present, 802.11g stations had to use protection mechanisms (RTS/CTS or CTS-to-self sent at old DSSS rates) so the older devices would defer, which cut throughput sharply. Legacy support costing everybody airtime is a theme that repeats in every generation.
• 802.11n / Wi-Fi 4 (2009) was the biggest single leap. MIMO sends several independent spatial streams over multiple antennas at once, multiplying throughput. Frame aggregation (A-MPDU, A-MSDU) packs many frames into one transmission, amortizing the per-frame overhead. 40 MHz channels doubled the width.
• 802.11ac / Wi-Fi 5 (2013) was 5 GHz only. It widened channels to 80 and 160 MHz and raised modulation to 256-QAM. First-wave (“Wave 1”) products had no MU-MIMO; Wave 2 products added downlink MU-MIMO, letting an AP send to several clients simultaneously using beamforming.
• 802.11ax / Wi-Fi 6 (2019) changed focus from peak speed to efficiency in crowded networks. OFDMA splits a channel into resource units so one transmission serves several clients. Uplink MU-MIMO lets several clients transmit at once. BSS colouring lets an AP ignore weak transmissions from a neighbouring network on the same channel instead of deferring to them. Target Wake Time schedules when IoT devices wake, saving battery. Wi-Fi 6E (2021) is the same technology extended into the new 6 GHz band.
• 802.11be / Wi-Fi 7 (2024) adds Multi-Link Operation (MLO) — a client can use links in two or three bands simultaneously or switch between them instantly — plus 320 MHz channels in 6 GHz, 4096-QAM, and preamble puncturing, which lets a wide channel skip a busy 20 MHz slice instead of falling back to a narrower width.

The next amendment, 802.11bn (expected to become Wi-Fi 8), focuses on reliability — consistent latency and fewer drops — rather than another headline speed increase.

Where 802.11 Sits in the Network Stack

802.11 defines only the bottom of the stack: a physical layer (PHY) that turns bits into radio signals and a MAC layer that decides who may transmit, addresses frames, acknowledges them and encrypts them. Above the MAC, the IEEE 802.2 Logical Link Control (LLC) sublayer is shared with Ethernet, so IP and everything above it run unchanged.

The 802.11 MAC is far more complex than Ethernet’s because it has to deal with problems a cable never has: an unreliable medium (so every unicast frame is acknowledged and retried), mobility (association, roaming), power saving (clients sleep and the AP buffers frames for them), and an open medium anyone can listen to (so encryption is part of the MAC). An 802.11 data frame can carry up to four MAC addresses — source, destination, transmitter and receiver — because the device that sends a frame over the air is often not the device that originated it.

An access point is, at heart, a bridge between the 802.11 MAC/PHY on its radio and the 802.3 (Ethernet) MAC/PHY on its uplink. It rewrites frame headers; the IP packet inside passes through untouched. The frame formats themselves — management, control and data frames — are covered in Channel Bonding and Frame Types.

WLAN Building Blocks

Term	Meaning
STA (station)	Any device with an 802.11 radio — strictly, APs are stations too, but in practice “station” or “client” means the end device
AP (access point)	A station that provides access to the distribution system for associated clients
BSS (basic service set)	One AP radio and the clients associated to it — the basic cell
BSSID	The 48-bit identifier of a BSS: the MAC address of the AP radio (one per SSID per radio when an AP broadcasts several networks)
SSID	The human-readable network name, up to 32 bytes
DS (distribution system)	What connects APs together and to the rest of the network — almost always switched Ethernet, sometimes wireless (mesh)
ESS (extended service set)	Several BSSs sharing the same SSID and security, joined by a DS, which clients treat as one network and roam within
IBSS	“Ad hoc” mode: stations talk directly without an AP. Rare today; replaced by Wi-Fi Direct for device-to-device use
Mesh BSS	APs (or mesh points) that relay traffic for one another over the air (802.11s), with only some wired to the DS

A client decides whether it is on “the same network” by the SSID and the security settings. When it moves out of range of one AP and associates to another with the same SSID, it has roamed between BSSs within the ESS. Making that roam fast and invisible — no new IP address, no long re-authentication — is one of the central jobs of enterprise WLAN design.

Autonomous, Controller-Based and Cloud-Managed APs

APs come in three management styles. Autonomous APs are configured individually and do everything themselves — fine for a home, painful for a hundred APs. Controller-based APs are managed by a WLAN controller that pushes configuration, coordinates RF and often terminates user traffic through tunnels. Cloud-managed APs receive configuration from a SaaS platform and forward traffic locally. Many enterprise platforms support all three; the Aruba Wireless series shows how one vendor implements them.

Sharing the Air: CSMA/CA

A radio cannot reliably listen while it transmits — its own signal drowns out everything else — so Wi-Fi cannot detect collisions the way early Ethernet did (CSMA/CD). Instead it tries to avoid them: Carrier Sense Multiple Access with Collision Avoidance. Every station on a channel, AP or client, follows the same rules.

1. Carrier sense. Before transmitting, a station checks whether the medium is busy in two ways. Physical carrier sense (Clear Channel Assessment) listens for Wi-Fi preambles and for raw energy on the channel. Virtual carrier sense uses the Network Allocation Vector (NAV): every frame carries a Duration field announcing how long the exchange will take, and every station that hears it sets a timer and stays quiet until it expires.
2. Interframe space. Once the medium is idle, the station waits a fixed gap. Short gaps give priority: an ACK waits only a SIFS, so it always wins; a new data frame waits a longer DIFS (or, with QoS, an AIFS that depends on the traffic class — voice waits less than background traffic).
3. Random backoff. The station picks a random number of slots from its contention window and counts down while the medium stays idle, pausing whenever someone else transmits. Randomness makes it unlikely that two waiting stations start at the same moment.
4. Transmit and acknowledge. The receiver of a unicast frame replies with an ACK after SIFS. No ACK means the frame was lost — collision or interference — so the sender doubles its contention window (up to a maximum) and tries again.

Important consequences follow:

• Wi-Fi is half-duplex and shared. Only one transmission per channel at a time (MU-MIMO and OFDMA are partial exceptions). Every client on a channel, and every neighbouring AP and client on the same channel, competes for the same airtime.
• Airtime, not bandwidth, is the scarce resource. A slow client takes longer to send the same data and so consumes more airtime, slowing everyone. One old device at a low data rate can drag a whole cell down.
• Overhead is substantial. Preambles, interframe spaces, backoff and ACKs mean real throughput is typically 50–70% of the PHY rate in good conditions, and far less in a busy channel.
• Broadcast and multicast frames are not acknowledged and are sent at a low basic rate, which makes them unreliable and expensive in airtime.

The Hidden Node Problem

Carrier sense only works if stations can hear each other. Two clients on opposite sides of an AP may both hear the AP but not each other; each believes the medium is free, both transmit, and their frames collide at the AP. RTS/CTS solves this: the sender asks permission with a short Request-To-Send, and the AP replies with Clear-To-Send, which every station in the AP’s range hears and honours by setting its NAV. Because RTS/CTS costs airtime, it is used selectively — for large frames, for protecting legacy devices, and to reserve wide channels.

Co-Channel Interference

The same rules mean that two APs on the same channel within hearing range of each other share airtime, even if they belong to different networks. This co-channel contention — often called co-channel interference — is the main reason dense networks use narrower channels, lower power and careful channel planning, and why Wi-Fi 6 introduced BSS colouring. More APs on too few channels can make a network slower, not faster.

How a Client Joins a WLAN

1. Discovery. APs announce each network in beacons, by default every 100 time units (102.4 ms). A client can listen for them (passive scanning) or send probe requests and collect probe responses (active scanning). Beacons carry the SSID, supported rates, security capabilities and much more.
2. 802.11 authentication. Despite the name, for most networks this is a formality: Open System authentication simply says hello. The exception is WPA3-Personal, where this step carries the SAE (Simultaneous Authentication of Equals) exchange. The old “shared key” method used with WEP is obsolete.
3. Association. The client requests to join the BSS, stating its capabilities (rates, streams, channel widths, features); the AP accepts and assigns an Association ID.
4. 802.1X / EAP (enterprise networks). The client proves its identity to a RADIUS server through the AP or controller, using a method such as EAP-TLS (certificates) or PEAP (username and password). Success produces a Pairwise Master Key (PMK).
5. 4-way handshake. Client and AP prove they hold the same PMK — from 802.1X, from the WPA2 passphrase, or from SAE — and derive fresh encryption keys: a Pairwise Transient Key for unicast traffic and a Group Temporal Key for broadcast/multicast. Only now does user traffic flow, encrypted.
6. IP connectivity. DHCP, ARP and DNS — exactly as on a wired network.

When a client roams, it repeats the association and key steps with the new AP. Fast-roaming mechanisms — key caching and 802.11r Fast BSS Transition — avoid repeating the full 802.1X exchange, which is essential for voice. The security mechanisms behind steps 4 and 5 are covered in Spectrum Management, QoS and RSN/WPA2.

Frequency Bands at a Glance

	2.4 GHz	5 GHz	6 GHz
Usable 20 MHz channels (US)	3 non-overlapping (1, 6, 11)	Up to ~25, including DFS channels	Up to 59
Range and wall penetration	Best	Moderate	Shortest
Interference	Heavy: Bluetooth, microwaves, neighbours, legacy devices	Moderate; radar avoidance (DFS) on some channels	Very low; no legacy devices allowed
Practical channel width	20 MHz only	20/40/80 MHz	80/160/320 MHz
Generations	b, g, n, ax, be	a, n, ac, ax, be	6E (ax), be
Security	Any	Any	WPA3 or Enhanced Open only

Higher frequencies lose more energy passing through walls and over distance, so they give smaller cells; but they also offer far more spectrum, which allows more APs on separate channels and wider channels for speed. Most enterprise designs today treat 5 GHz and 6 GHz as the primary bands and keep 2.4 GHz for legacy and IoT devices. Band details, channel plans and DFS are covered in Radio Frequency Bands.

Modulation, MCS and Data Rates

The data rate a client achieves at any moment is set by four things:

1. Modulation — how many bits each OFDM subcarrier carries per symbol, from 1 (BPSK) to 12 (4096-QAM).
2. Coding rate — what fraction of the bits are data rather than error-correction redundancy (1/2, 2/3, 3/4, 5/6).
3. Channel width — more MHz means more subcarriers.
4. Spatial streams — how many independent streams MIMO carries in parallel.

The combination of modulation and coding is the MCS index (Modulation and Coding Scheme). Denser modulation needs a stronger, cleaner signal — a higher signal-to-noise ratio — so as a client moves away from the AP, or as noise rises, it steps down to lower MCS values. This rate adaptation happens continuously, frame by frame. A Wi-Fi 6 client next to the AP might use 1024-QAM at 5/6; the same client at the edge of the cell might be using QPSK at 1/2, at a small fraction of the rate.

The headline figures in the generation table assume the maximum of everything: the widest channel, the densest modulation, and 4, 8 or 16 spatial streams. Real clients have far fewer: most phones have two spatial streams, many laptops two, IoT devices one. A realistic expectation for a modern two-stream Wi-Fi 6 laptop on an 80 MHz channel is a PHY rate of 1.2 Gbps close to the AP and real throughput of a few hundred megabits per second. OFDM and power calculations are covered in EIRP and OFDM.

MIMO, MU-MIMO and OFDMA

Three techniques let Wi-Fi do more than one thing at a time, and they are often confused:

• SU-MIMO (single-user, Wi-Fi 4 onward) — multiple antennas send several spatial streams to one client at once, multiplying that client’s rate. It relies on multipath: signals bouncing off walls arrive by different routes, which lets the receiver separate the streams.
• MU-MIMO (multi-user; downlink in Wi-Fi 5 Wave 2, uplink in Wi-Fi 6) — the AP uses beamforming to send different streams to different clients at the same time on the same channel. It works best with stationary clients that are spatially separated.
• OFDMA (Wi-Fi 6 onward) — divides the frequency of a channel into resource units and gives them to different clients in one transmission. It helps most with many small frames: voice, IoT, acknowledgements, web browsing in a busy room.

Put simply: MIMO adds lanes, MU-MIMO serves several cars in different lanes at once, and OFDMA lets several small cars share one lane at the same time. Wi-Fi 6 and Wi-Fi 7 combine all three.

Security Evolution

Generation	Year	Encryption	Status
WEP	1997	RC4 with static keys	Broken; can be cracked in minutes. Never use.
WPA	2003	TKIP (RC4 with per-packet keys)	Interim fix for WEP hardware; deprecated
WPA2	2004	AES-CCMP (from IEEE 802.11i)	Still widely deployed and acceptable with strong passphrases or 802.1X
WPA3	2018	AES-CCMP/GCMP; SAE for Personal; mandatory Protected Management Frames; 192-bit option for Enterprise	Current standard; required for 6 GHz
Enhanced Open (OWE)	2018	Per-client encryption without a password	Replaces open networks (guest Wi-Fi, cafés)

Each WPA version comes in two flavours. Personal uses a shared passphrase — WPA2-Personal’s passphrase can be attacked offline if captured, while WPA3’s SAE resists that attack and provides forward secrecy. Enterprise uses 802.1X with a RADIUS server, giving every user individual credentials and keys. Enterprise networks should use WPA2/WPA3-Enterprise; a single shared passphrase for a whole organization cannot be revoked for one person without changing it for everyone.

Why Real Wi-Fi Is Slower Than the Box Says

• Theoretical maxima assume more spatial streams and wider channels than real clients and real channel plans use.
• Protocol overhead — preambles, interframe spaces, backoff and ACKs — consumes a large share of airtime.
• Half-duplex sharing — every client and every co-channel neighbour shares the same airtime.
• Distance and obstacles push clients to lower MCS rates.
• Interference and retries — every lost frame is sent again.
• Legacy clients and low basic rates consume disproportionate airtime and force protection mechanisms.
• The client decides — its antennas, driver, power-saving behaviour and roaming logic matter as much as the AP.

Common Misconceptions

• “More APs always means better Wi-Fi.” Too many APs on too few channels contend with each other. Capacity comes from channel reuse, not AP count alone.
• “Turn the power up for better coverage.” The client also has to reach the AP. A loud AP that a phone can hear but not answer creates one-way coverage and sticky clients.
• “Wider channels are always faster.” Only if there is enough spectrum to avoid overlap. In a dense deployment, 20 or 40 MHz channels often deliver more total capacity.
• “Hidden SSIDs are more secure.” The SSID still appears in probe and association frames. Hiding it only makes clients probe for it everywhere.
• “MAC filtering protects the network.” MAC addresses are visible over the air and easy to spoof. Use WPA2/WPA3-Enterprise.
• “New Wi-Fi 7 APs make every device faster.” Older clients connect to a Wi-Fi 7 AP using their own generation’s features. The benefits arrive as the client fleet is refreshed.

Exercises

1. Explain why Wi-Fi uses CSMA/CA rather than CSMA/CD, and what replaces collision detection.

Show answer

A radio cannot listen for other signals while it transmits, because its own transmission overwhelms the receiver, so collisions cannot be detected as they happen. Wi-Fi instead tries to avoid collisions (carrier sense, interframe spaces, random backoff, NAV) and relies on positive acknowledgements: if a unicast frame is not ACKed, the sender assumes it was lost, increases its contention window and retransmits.

2. An office has three APs, all broadcasting the SSID “Office” on 5 GHz. How many SSIDs, BSSIDs, BSSs and ESSs are there?

Show answer

One SSID; three BSSIDs (one per AP radio); three BSSs; one ESS — the three BSSs share the SSID and security and are joined by the wired distribution system. If each AP also broadcast “Office” on 2.4 GHz, there would be six BSSIDs and BSSs, still one SSID and one ESS.

3. A warehouse uses old 802.11b barcode scanners on the same 2.4 GHz network as new laptops. Laptop users complain that 2.4 GHz is extremely slow. Give two reasons.

Show answer

The 802.11b scanners transmit at very low DSSS rates, so each of their frames occupies the channel for a long time (airtime is shared). Their presence also forces OFDM stations to use protection mechanisms (RTS/CTS or CTS-to-self at legacy rates) and keeps low basic rates enabled, adding overhead to every exchange. Moving laptops to 5/6 GHz or the scanners to a dedicated SSID/band helps.

4. Two laptops sit on opposite sides of a large open warehouse, each 30 m from the AP in the middle. They often suffer retransmissions when both are busy. What is happening, and what mechanism mitigates it?

Show answer

A hidden node problem: each laptop hears the AP but not the other laptop, so physical carrier sense does not stop them from transmitting at the same time, and their frames collide at the AP. RTS/CTS mitigates it, because the AP’s CTS is heard by both and sets their NAVs. Improving AP placement or adding APs so clients are closer also helps.

5. A user’s phone shows a “1.2 Gbps” link to a Wi-Fi 6 AP, but a speed test gives 450 Mbps. Is something wrong?

Show answer

Probably not. 1.2 Gbps is the PHY rate (two spatial streams, 80 MHz, 1024-QAM). Protocol overhead alone typically reduces real throughput to 50–70% of the PHY rate, and other clients, co-channel neighbours, retries and the speed-test path (internet, server) reduce it further. 450 Mbps is a healthy result.

6. Put the following in the order they occur when a laptop joins a WPA2-Enterprise network: 4-way handshake, probe request, DHCP, association, 802.1X/EAP, Open System authentication.

Show answer

Probe request (or beacon) → Open System authentication → association → 802.1X/EAP → 4-way handshake → DHCP.

7. Why can a Wi-Fi 6E AP broadcast an SSID on 5 GHz but not on 6 GHz, with everything else configured the same?

Show answer

The SSID uses WPA2 (or is open). The 6 GHz band only permits WPA3 (SAE or Enterprise) or Enhanced Open, with Protected Management Frames, so the AP does not offer that SSID on its 6 GHz radio.

Summary

Wi-Fi is defined by the IEEE 802.11 working group, certified and named by the Wi-Fi Alliance, and constrained by national regulators. Since 1997 it has evolved from 2 Mbps DSSS to Wi-Fi 7’s multi-link, 320 MHz, 4096-QAM radios, with Wi-Fi 6 marking the shift from peak speed to efficiency. A WLAN is made of BSSs — one AP radio and its clients, identified by a BSSID — joined by a distribution system into an ESS that shares one SSID. Every station shares the half-duplex medium using CSMA/CA: carrier sense, interframe spaces, random backoff and acknowledgements, with RTS/CTS for hidden nodes. A client joins through discovery, authentication, association, 802.1X or SAE, the 4-way handshake and DHCP. Its data rate depends on modulation, coding, channel width and spatial streams, adapting constantly to signal quality — which, together with overhead and shared airtime, is why real throughput is always well below the number on the box.