Master 802.11 a/b/g/n/ac/ax, 2.4GHz vs 5GHz vs 6GHz channel planning, WPA2/WPA3 security, MIMO, and antenna types with scenario-based practice and the Wi-Fi Advisor.
Wireless Networking Standards
From the original 802.11 protocols to Wi-Fi 6E, understanding wireless standards, frequencies, security, and antenna selection is core to Network+ Domain 2 (20% of the exam).
IEEE 802.11 defines how wireless devices communicate. Each amendment improves speed, range, or efficiency, and is marketed under a Wi-Fi generation number starting with 802.11n.
Selecting the right frequency band and channels prevents interference and maximizes throughput. Channel overlap on 2.4GHz is one of the most tested topics on the exam.
Wireless security has evolved from the broken WEP protocol through WPA and WPA2 to the current WPA3 standard. Each generation addresses vulnerabilities in the previous one.
Understanding antenna types, access point modes, and wireless topology terms (BSS, ESS, IBSS) is essential for both network design questions and troubleshooting scenarios.
How It Works
The evolution of 802.11 standards, how 2.4GHz channels overlap, and how WPA2 vs WPA3 authenticate clients.
WPA2 vs WPA3 Authentication
WPA2-Enterprise: 802.1X / RADIUS
The wireless client (supplicant) attempts to associate with the AP (authenticator). The AP does not grant access yet — it only passes authentication traffic.
The AP (authenticator) forwards the client's EAP credentials to the RADIUS server (authentication server) on the wired network. The AP itself does not make the authentication decision.
RADIUS uses an EAP method to validate credentials: EAP-TLS (certificates — most secure), PEAP (server cert + username/password — most common), or EAP-TTLS.
On success, RADIUS sends Access-Accept and a session key. The AP uses this to complete the 4-Way Handshake and grants the client network access with per-user encryption keys.
Compare & Reference
Filter by category to study specific 802.11 standards, frequency bands, security protocols, or infrastructure concepts.
| Standard / Protocol | Band / Key Value | Details | Exam Notes |
|---|---|---|---|
802.11a Standard |
5 GHz · 54 Mbps · OFDM | Released 1999 alongside 802.11b. Less interference than 2.4GHz. Shorter range due to higher frequency. | 5GHz only. Not compatible with b or g. No Wi-Fi gen number. |
802.11b Standard |
2.4 GHz · 11 Mbps · DSSS | Released 1999. First widely adopted standard. DSSS modulation. Longest range but slowest speed and most susceptible to interference. | DSSS (not OFDM). Longest range. Most interference. No gen number. |
802.11g Standard |
2.4 GHz · 54 Mbps · OFDM | Released 2003. Backward compatible with 802.11b. Brought OFDM modulation to 2.4GHz, matching 802.11a speeds on the more widely used band. | OFDM on 2.4GHz. Backward compatible with b. No gen number. |
802.11n / Wi-Fi 4 Standard |
2.4 + 5 GHz · 600 Mbps | Released 2009. First dual-band standard. Introduced MIMO (multiple antennas). Channel bonding at 40 MHz. Backward compatible with a, b, g. | First dual-band. First MIMO. Wi-Fi 4. 40 MHz channels. |
802.11ac / Wi-Fi 5 Standard |
5 GHz only · ~3.5 Gbps | Released 2013. 5GHz ONLY. MU-MIMO (multiple users simultaneously). Beamforming. Channel bonding up to 160 MHz. Up to 8 spatial streams. | 5GHz ONLY. MU-MIMO. Beamforming. Wi-Fi 5. 80/160 MHz bonding. |
802.11ax / Wi-Fi 6/6E Standard |
2.4 + 5 + 6 GHz · 9.6 Gbps | Released 2019. Introduced OFDMA (multiple users per channel), BSS Coloring (reduces interference in dense deployments), TWT (target wake time for IoT battery savings). Wi-Fi 6E adds 6GHz. | OFDMA. BSS Coloring. TWT. First to use 6GHz (Wi-Fi 6E). Dense/IoT. |
2.4 GHz Band Frequency |
Channels 1–11 (US) · 22 MHz wide | Only 3 non-overlapping channels: 1, 6, 11. Better range and wall penetration. High interference: microwaves, Bluetooth, baby monitors, neighboring Wi-Fi. | "1, 6, 11" is one of the most-tested facts on the entire exam. |
5 GHz Band Frequency |
24+ non-overlapping channels (US) | Far more channels than 2.4GHz. Higher throughput, less interference. Shorter range and poorer wall penetration than 2.4GHz. Some channels require DFS (Dynamic Frequency Selection) to avoid radar. | More channels = better for dense deployments. Trade-off: shorter range. |
6 GHz Band Frequency |
59 non-overlapping 20 MHz channels | Wi-Fi 6E only. New spectrum with no legacy devices — virtually zero interference at launch. Shortest range of the three bands. High throughput for very dense environments. | Wi-Fi 6E exclusive. 59 channels. Least interference. Shortest range. |
Channel Bonding Frequency |
40/80/160 MHz aggregated | Combines adjacent channels to double/quadruple throughput. 802.11n: 40 MHz. 802.11ac: 80 or 160 MHz. Trade-off: fewer non-overlapping channels available in the band. | Higher speed but reduces available channels for other APs. 5/6GHz only for 80/160 MHz. |
DFS Channels Frequency |
5 GHz channels 52–144 | Dynamic Frequency Selection: devices must detect and avoid radar systems (weather, aviation) on these channels. AP must vacate channel within 10 seconds if radar detected. | Some enterprise APs avoid DFS channels for reliability. Exam may test DFS awareness. |
WEP Security |
RC4 · 24-bit IV · Broken | Wired Equivalent Privacy. Uses RC4 stream cipher with a short 24-bit Initialization Vector that repeats frequently, allowing passive attackers to recover the encryption key. | Never use. Crackable in minutes with tools like aircrack-ng. Always the wrong answer. |
WPA Security |
TKIP · RC4 · Deprecated | Temporal Key Integrity Protocol improved on WEP by using per-packet keys, but still based on RC4. Transitional standard — superseded by WPA2. Now deprecated. | Transitional. TKIP = RC4 based. Deprecated. Do not use in new deployments. |
WPA2-Personal Security |
PSK · CCMP/AES · 4-Way Handshake | Pre-Shared Key: all users share one passphrase. CCMP (Counter Mode CBC-MAC Protocol) with AES encryption is the critical improvement over WPA. 4-Way Handshake can be captured offline. | CCMP/AES is the key feature. PSK = shared password. Vulnerable to offline dictionary. |
WPA2-Enterprise Security |
802.1X · RADIUS · EAP | Per-user authentication via RADIUS server. Uses EAP methods: EAP-TLS (certificates, most secure), PEAP (server cert + credentials, most common), EAP-TTLS. No shared password. | Required when individual credentials are needed. Exam: RADIUS = Enterprise. |
WPA3-Personal Security |
SAE · Forward Secrecy | SAE (Simultaneous Authentication of Equals / Dragonfly handshake) replaces PSK 4-Way Handshake. Provides forward secrecy. Offline dictionary attacks impossible — each guess requires AP interaction. | SAE = the defining WPA3 feature. Forward secrecy = past sessions safe if key later compromised. |
Enhanced Open (OWE) Security |
WPA3 · Open networks | Opportunistic Wireless Encryption. Encrypts open networks (no password) using Diffie-Hellman key exchange. Prevents passive eavesdropping on coffee shop / hotel networks without requiring a password. | WPA3 feature for open/guest networks. Encrypts without requiring a passphrase. |
BSS Infrastructure |
Basic Service Set · Single AP | One access point and its associated clients. The AP's BSSID is its MAC address. Clients can only communicate through the AP, not directly with each other (in infrastructure mode). | BSS = one AP. BSSID = AP MAC address. Smallest wireless cell. |
ESS Infrastructure |
Extended Service Set · Multiple APs | Multiple APs connected via a distribution system (usually wired), all broadcasting the same SSID. Enables seamless client roaming between APs without reconnecting. | ESS = multiple APs + same SSID + roaming. How enterprise Wi-Fi works. |
IBSS / Ad Hoc Infrastructure |
No AP · Peer-to-peer | Independent Basic Service Set. Devices communicate directly without an AP. No centralized management. Used for temporary file sharing or device pairing. | IBSS = ad hoc = no AP required. Peer-to-peer. Not suitable for enterprise. |
MIMO / MU-MIMO Infrastructure |
Multiple antennas | MIMO: multiple antennas on one device for higher throughput (introduced in 802.11n). MU-MIMO: multiple antennas serving multiple clients simultaneously (introduced in 802.11ac). | MIMO = 802.11n. MU-MIMO = 802.11ac and later. Critical for throughput. |
Omnidirectional Infrastructure |
360° radiation pattern | Signal radiates in all directions horizontally. Standard for indoor APs covering an open area. Dipole antennas are a common omnidirectional type included with most APs. | Default AP antenna. Best for indoor open-area coverage. Lower gain than directional. |
Directional Infrastructure |
Focused beam · High gain | Focuses signal in a specific direction. Higher gain and range than omnidirectional. Types: Yagi (narrow beam), patch (moderate), parabolic dish (very narrow, maximum range). Used for building-to-building links. | Point-to-point between buildings. Yagi and dish = maximum range. Sacrifices coverage width. |
Real Examples
Worked exam-style scenarios covering the most commonly tested wireless concepts.
Practice Quiz
10 scenario-based questions aligned to N10-009 exam style. Each tests a specific wireless networking concept.
Wi-Fi Advisor
Answer a few questions to get tailored guidance on standard selection, channel planning, security configuration, or wireless troubleshooting.
📡 What do you need help with?
📶 What is your primary deployment requirement?
📡 What is your frequency / channel situation?
🔒 What type of environment is this for?
🛠️ What symptom are you experiencing?
Memory Hooks
Click each card to flip it and reveal the answer. Then use the cheat sheet for instant reference.
Quick Reference Cheat Sheet
| Standard | Wi-Fi Gen | Band(s) | Max Speed | Key Feature |
|---|---|---|---|---|
| 802.11a | — | 5 GHz only | 54 Mbps | OFDM · First 5GHz · Not compatible with b/g |
| 802.11b | — | 2.4 GHz only | 11 Mbps | DSSS · Longest range · Most interference |
| 802.11g | — | 2.4 GHz only | 54 Mbps | OFDM on 2.4GHz · Backward compatible with b |
| 802.11n | Wi-Fi 4 | 2.4 + 5 GHz | 600 Mbps | First MIMO · First dual-band · 40 MHz bonding |
| 802.11ac | Wi-Fi 5 | 5 GHz ONLY | ~3.5 Gbps | MU-MIMO · Beamforming · 80/160 MHz bonding |
| 802.11ax | Wi-Fi 6/6E | 2.4 + 5 + 6 GHz | 9.6 Gbps | OFDMA · BSS Coloring · TWT · Dense deployments |
| WEP | — | — | — | BROKEN · RC4 + 24-bit IV · Never use |
| WPA | — | — | — | TKIP · Deprecated · Transitional only |
| WPA2-Personal | — | — | — | PSK + CCMP/AES · 4-Way Handshake · Offline crack risk |
| WPA2-Enterprise | — | — | — | 802.1X + RADIUS + EAP · Per-user credentials |
| WPA3-Personal | — | — | — | SAE · Forward secrecy · No offline dictionary attack |
| 2.4GHz | — | — | — | Channels 1, 6, 11 non-overlapping · Better range |
| 5GHz | — | — | — | 24+ non-overlapping channels · Less interference |
| 6GHz | Wi-Fi 6E | — | — | 59 non-overlapping channels · Least interference |
| ESS | — | — | — | Multiple APs + same SSID = seamless roaming |