IEEE 802.11 WLAN

What It Is

IEEE 802.11 is the WLAN MAC and PHY family behind Wi-Fi. A modern wireless sheet needs to cover more than speed labels: bands, channel width, RF behavior, roaming, authentication, encryption, client capability, and how SSIDs map into wired VLANs and policy.

Standards And Generations

Modern note: Wi-Fi generation labels are marketing shortcuts. Design around client mix, band support, channel plan, power, roaming behavior, and application requirements.

WLAN Components

Watch out: SSID and VLAN are not the same thing. One SSID can map to different VLANs by policy, and multiple SSIDs can terminate into the same VLAN.

Bands And Channels

Design note: Wider channels increase peak rate but reduce channel reuse. In busy enterprise WLANs, stable airtime often beats headline throughput.

RF Measurements

Rule-of-thumb targets vary by design, but voice and real-time apps usually need stronger signal and cleaner SNR than best-effort data.

Frame Types

Client join flow:

• Probe or passive beacon discovery.
• Authentication.
• Association.
• 802.1X or PSK authentication where used.
• 4-way handshake.
• DHCP or IPv6 address assignment.
• Data flow.

Watch out: "Authentication" in 802.11 management frames is not the same thing as WPA2/WPA3 or 802.1X user authentication.

Security

Modern note: 6 GHz Wi-Fi generally raises the security floor. Expect WPA3 and Protected Management Frames requirements in modern 6 GHz deployments.

Roaming And Client Behavior

Watch out: The client decides when to roam. Infrastructure can influence roaming, but it does not fully control it.

QoS And Airtime

Wi-Fi Multimedia maps traffic into wireless access categories. Wired DSCP and 802.1p markings may not survive correctly unless the WLAN, controller, switch, and QoS policy agree.

Design note: Airtime is the scarce resource. A slow client can consume more airtime than a fast client sending the same amount of data.

Cisco Catalyst 9800 Examples

Basic WLAN profile:

wlan CORP-WIFI 20 CORP-WIFI
 no shutdown

Policy profile with VLAN:

wireless profile policy CORP-WIFI-POLICY
 vlan 30
 no shutdown

Map WLAN to policy tag:

wireless tag policy SITE-ACCESS
 wlan CORP-WIFI policy CORP-WIFI-POLICY

Assign policy tag to an AP:

ap aaaa.bbbb.cccc
 policy-tag SITE-ACCESS

Notes:

• Catalyst 9800 separates WLAN profile, policy profile, and tags.
• Changing AP tags can cause APs to drop and rejoin.
• RF tags and site tags also matter in real deployments.
• Validate security settings, AAA, VLAN, and switching mode before enabling a production SSID.

Troubleshooting

Commands

show wlan summary
show wireless client summary
show wireless client mac-address <mac> detail
show ap summary
show ap name <ap-name> config general
show wireless profile policy summary
show wireless tag policy summary

Expected clues:

• WLAN is enabled and mapped to the expected policy profile.
• AP has the expected policy, site, and RF tags.
• Client joins the expected BSSID, SSID, VLAN, and policy.
• Security negotiation matches the WLAN design.
• RF channel, power, retries, and SNR fit the expected design.

Watch Out

• Do not design only from AP count. Design from coverage, capacity, clients, and applications.
• Do not use 80, 160, or 320 MHz channels just because the hardware supports them.
• Do not leave legacy data rates enabled without a reason.
• Do not treat hidden SSIDs as security.
• Do not assume 6 GHz coverage equals 5 GHz coverage at the same power.
• Do not enable WPA2/WPA3 transition modes without testing client behavior.
• Do not forget wired dependencies: VLANs, DHCP, DNS, RADIUS, QoS, and firewall policy.

References

• IEEE 802.11-2020
• IEEE 802.11 Working Group overview
• Cisco: Migrate to 6 GHz and Wi-Fi 7 with Cisco Wireless
• Cisco: Wi-Fi 7 and the Growing Future of Wireless Design Guide
• Cisco Catalyst 9800 Configuration Model: Configuring WLANs
• Cisco Catalyst 9800 Configuration Model: Configuring Profiles