Chapters

36 Wi-Fi Access: Scanning and Deployment

networking-core
network
physical
wireless

36.1 Start With the Situation

This section: Start With the Situation — A link budget estimates whether a radio signal can reach each device.

A link budget estimates whether a radio signal can reach each device. That predicts coverage, the places where the link should work, but other networks and moving users may change it. Scan the real channels, the slices of radio spectrum devices share. Test airtime, the time they occupy those channels, and security. Record whether the site can still support the deployment.

36.2 Overview

This section: Overview — This route turns site scans, case evidence, and deployment checks into a Wi-Fi fit decision.

This route turns site scans, case evidence, and deployment checks into a Wi-Fi fit decision.

This is part 2 of 2. Review Wi-Fi Access: Standards and Link Budget when you need the first route.

36.3 Learning Objectives

This section: Learning Objectives

By the end of this chapter, you will be able to:

  • scan and interpret nearby Wi-Fi networks
  • test capacity and security constraints
  • record a supportable Wi-Fi deployment decision

36.4 ESP32 Wi-Fi Scanning Lab

This section: ESP32 Wi-Fi Scanning Lab — Once the scan gives local evidence, the case study shows how those same checks scale to thousands of devices.

Scan and Analyze Wi-Fi Networks

Objective: Use an ESP32 to scan available Wi-Fi networks and analyze their characteristics (SSID, RSSI, channel, encryption).

Hardware Required:

  • ESP32 development board
  • USB cable
  • Computer with Arduino IDE

The Wi-Fi range calculator above is the no-hardware version of this lab. If you have an ESP32 ready, use it to collect the same evidence: network name, RSSI, channel, and security mode.

Lab StepWhat the ESP32 Scanner CollectsWhat to Learn From It
1SSID for each visible networkWhich networks are nearby and whether naming leaks sensitive information
2RSSI in dBmWhether each AP is strong enough for stable IoT connectivity
3Channel numberWhether the site is crowded on channels 1, 6, 11, or shifted to 5 GHz
4Encryption modeWhether open or weak networks create security risk
5Repeat scans in different locationsHow walls, distance, and competing APs change coverage quality

Typical scan result to interpret:

SSIDRSSIChannelSecurityInterpretation
HomeNetwork-45 dBm6WPA2Strong signal, crowded common channel
Office_WiFi-62 dBm11WPA2Usable signal, separate non-overlapping channel
Guest_Network-58 dBm1WPA2Good signal but may compete with IoT devices
IoT_Sensors-71 dBm6WPA2Marginal signal; consider closer AP or better channel plan

Analysis Tasks:

  1. Identify channel congestion: Which channels have the most networks?
  2. Measure signal strength: Which networks have the strongest signal (RSSI)?
  3. Security assessment: Are there any open (unencrypted) networks?
  4. Channel selection: If deploying a new network, which channel would you choose?
  5. Range estimation: Based on RSSI, estimate approximate distance to access points

Once the scan gives local evidence, the case study shows how those same checks scale to thousands of devices.


36.5 Knowledge Check

This section: Knowledge Check

Quiz: Theme Park Wearables

36.6 Illustrative Airport Wi-Fi 6 Case

This section: Illustrative Airport Wi-Fi 6 Case — The following hypothetical airport case is a worked planning scenario, not a report of a Denver International Airport deployment.

The following hypothetical airport case is a worked planning scenario, not a report of a Denver International Airport deployment. Its 4,200 devices, 340 access points, delays, battery results, and costs are illustrative assumptions to test with site evidence.

The Challenge: In this hypothetical case, an existing Wi-Fi 5 (802.11ac) network serves passengers and a growing IoT fleet: 1,800 environmental sensors (HVAC, air quality), 900 asset tracking tags (wheelchairs, carts), 800 digital signage displays, and 700 security cameras. Assume that during peak hours (6-9 AM, 4-7 PM), busy access points show 40% channel utilization and sensor data delays of 500 ms-2 s. Utilization alone does not prove the cause of delay; a real investigation would also inspect airtime, retries, queues, and application timing.

Why Wi-Fi 5 Failed for IoT:

Per-AP Peak StatisticWi-Fi 5 ObservationWhy It Hurt IoT
Connected clients120 total: 80 passengers and 40 IoT devicesPassenger traffic competed directly with sensor traffic
Channel access methodOFDM, one device transmitting at a timeIoT packets waited behind larger client transfers
Average IoT wait time450 msSensor readings arrived too late for control decisions
Delivery success rate87%Missing readings created unreliable automation
False HVAC alarms23 per dayDelayed readings looked like real system faults

Wi-Fi 6 Solution — OFDMA and TWT:

The scenario compares a proposed deployment of 340 Wi-Fi 6 access points with two configurations:

  1. OFDMA for sensor data: A 20 MHz channel can be divided into nine 26-tone Resource Units (RUs), allowing up to nine scheduled transmissions in one OFDMA exchange when client and AP support it. Assume measured wait time falls from 450 ms to under 50 ms in this scenario; neither rate is a standard guarantee.

  2. TWT for asset tracking tags: Assume 900 compatible tags negotiate wake periods every 30 seconds to transmit 12-byte updates. The model compares six months of battery life under an older power-save policy with 28 months under TWT. Actual power draw must be measured; Wi-Fi 5 clients can also sleep.

Illustrative Results (assumptions, not field measurements):

MetricWi-Fi 5 (Before)Wi-Fi 6 (After)Improvement
Sensor data latency (peak-hour mean)450 ms average38 ms averageabout 12x lower
Delivery success rate87%99.6%+12.6 percentage points
False HVAC alarms/day231-2about 91-96% reduction
Asset tag battery life6 months28 months4.7x longer
Devices per AP (peak)12018050% more capacity
Annual battery replacement cost$162,000$34,600$127,400 saved

Key Insight: Sensors may need only kilobits per second, so OFDMA’s scheduled multi-device access and TWT’s coordinated sleep can matter more than peak PHY speed. These features can reduce contention and power use when supported and configured, but they do not eliminate queues or replace measurements in a mixed passenger and IoT network.

This section:

Packet Pete, Networking and packet-journey domain expertCheckpoint: Field and Case Evidence

You now know:

  • A scan should capture SSID, RSSI, channel, security mode, and location-to-location variation.
  • The hospital quiz selects Wi-Fi 6 as a candidate; the 100 ms patient-monitoring requirement still needs measured end-to-end proof.
  • The illustrative airport case links a 4,200-device planning workload to OFDMA and TWT assumptions that need field validation.

This section:


36.7 Match Wi-Fi Standards

This section: Match Wi-Fi Standards


36.8 Wi-Fi Deployment Sequence

This section: Wi-Fi Deployment Sequence


Common Pitfalls

This section: Common Pitfalls

Wi-Fi power consumption (100–200 mA active) is 10–50× higher than Zigbee or BLE. Battery-powered IoT devices on Wi-Fi may last only days. Fix: use Wi-Fi only for mains-powered IoT devices; use Zigbee, BLE, or LoRaWAN for battery-powered sensors.

The 2.4 GHz band has only 3 non-overlapping channels (1, 6, 11). Dense AP deployments using these 3 channels cause co-channel interference. Fix: use the 5 GHz band with its 24 non-overlapping channels for dense deployments.

Deploying IoT devices on an open or WPA2-Personal network exposes the entire VLAN to any device that knows the pre-shared key. Fix: isolate IoT devices on a dedicated VLAN with WPA2-Enterprise or WPA3 authentication.

Label the Diagram
Code Challenge

36.9 Wi-Fi Fit Record

This section: Wi-Fi Fit Record — Wi-Fi is not just a range or speed choice.

Wi-Fi is not just a range or speed choice. It is a shared-airtime system where every access point, client, retry, management frame, and neighboring network competes for time on the channel.

An IoT design that says “use Wi-Fi” is incomplete until it explains how much airtime the devices need, how they authenticate, how they sleep, and how the access points will keep coverage and contention inside the deployment budget.

The design question is therefore not “does the signal reach the device?” A device can show acceptable RSSI and still lose useful service when the channel is busy, when the modulation rate falls, when hidden nodes trigger retries, or when neighboring networks reuse the same channel. Each retransmission spends more airtime before the application receives a single useful payload.

IoT makes this sharper because many devices send small messages, wake briefly, or reconnect after long sleeps. A temperature sensor, badge reader, camera, and commissioning laptop may all be “low bandwidth” in application terms, but each association, DHCP lease, TLS handshake, multicast burst, and acknowledgment still consumes channel time. The Wi-Fi decision must include the access point, channel width, band, security method, client power behavior, and backhaul path as one service contract.

A good fit record separates coverage, capacity, and operations evidence. Coverage proves the client can hear and be heard. Capacity proves the channel has enough airtime during busy periods. Operations evidence proves the design can survive firmware updates, credential rotation, AP replacement, and site changes without forcing a truck roll for every sleeping device.

Pete’s Delivery Slip

  • Address: a device can show acceptable signal strength and still lose service when the channel is busy.
  • Route: association, DHCP lease, TLS handshake, and every acknowledgment still spend airtime, even for a "low-bandwidth" sensor.
  • Receipt: coverage proves the client can be heard -- capacity proves the channel has time to hear it back.

Work through Figure 36.1 in its three numbered stages to see why a signal reading on its own cannot close a Wi-Fi decision.

Wi-Fi fit evidence record linking device role, infrastructure, traffic, power, security, provisioning, operations, and next review areas.
Figure 36.1: Wi-Fi fit evidence record linking device role, infrastructure, traffic, power, security, provisioning, operations, and next review areas.

Stage one names the service: device role, infrastructure owner, traffic envelope, power source, security boundary, provisioning path and review trigger. Nothing is measured yet. Stage two collects field evidence against three claims, and the split matters. Coverage proves the client can be heard. Capacity proves the channel has time to hear it. Operations proves the design survives updates and site changes. Stage three writes the decision, the limits and the retest trigger. The escalation rule at the foot of Figure 36.1 is the one to memorise. An acceptable average with high retries is a capacity or contention problem, so do not raise transmit power first.

Complete the record by naming the device role, infrastructure owner, traffic envelope, power source, security boundary, provisioning path, and operational review trigger.

Fit questionWhat to verifyTypical failure mode
CoverageRSSI, SNR, antenna orientation, wall loss, and roaming boundariesDevice can associate but falls to low MCS rates or retries heavily
CapacityDevice count, traffic shape, modulation rate, retries, and channel reuse“Low-bandwidth” devices still stall because management traffic and retries consume airtime
PowerListen interval, DTIM, Target Wake Time, and reconnect behaviorBattery devices spend energy waiting, rejoining, or retrying instead of sleeping
Design signal

Choose Wi-Fi when the application needs IP reachability and moderate to high throughput, and when the site can support measured airtime, managed channels, and appropriate security.

36.10 Wi-Fi Capacity Record

This section: Wi-Fi Capacity Record — A useful Wi-Fi record turns radio assumptions into field checks.

A useful Wi-Fi record turns radio assumptions into field checks. It should show what each device sends, how often it wakes, which access point serves it, what minimum signal quality is acceptable, and what happens when the channel is busy.

Build the record from measured evidence, not vendor coverage claims. For each device class, record the band, channel width, SSID, authentication method, VLAN, expected packet size and cadence, peak burst behavior, firmware-update path, and battery sleep pattern. Then attach site evidence: AP placement, survey readings at installed height, noise floor, channel utilization, retry percentage, client MCS rates, roaming results, and backhaul utilization during the busiest period you can reproduce.

AP placement follows a few practical rules of thumb, not just a coverage heat map. Keeping one SSID across every AP in a coverage area lets client radios roam to the strongest AP on their own, instead of a person choosing between differently named networks by hand. Two APs assigned the same channel should sit as far apart as the site allows, because co-channel APs compete for the same airtime instead of adding capacity. In one Cisco WLAN design guide, 10–15% overlapping coverage is a starting point for general roaming, and 15–20% for voice; verify cell edges and interference with a site survey rather than applying one universal overlap range. Cisco guide Assigning channels across a dense AP layout is really a graph-coloring problem — treat each AP as a node, connect APs that can hear each other, and assign the fewest channels (“colors”) so no two connected APs share one — which is part of why the same three 2.4 GHz channels (1, 6, 11) keep reappearing in this chapter’s examples even as AP count grows.

The record should also document what the design will not support. A 2.4 GHz-only sensor may be acceptable for low-rate telemetry, but it competes with legacy clients and neighboring networks. A high-resolution camera may need 5 GHz or 6 GHz capacity, but it may lose range faster through walls. A battery device may support long sleep intervals, but failed joins, certificate renewal, or captive provisioning can dominate energy use if the network path is unreliable.

Pete’s Delivery Slip

  • Address: a useful record names what each device class sends, how often it wakes, and which access point serves it.
  • Route: overlapping channels create contention even when each access point looks healthy on its own.
  • Receipt: measured survey and retry-rate evidence beats a vendor coverage claim every time.
Record fieldExample valueWhy it mattersEvidence to keep
Coverage target-67 dBm RSSI, 25 dB SNR at sensor mount pointsWeak signal forces lower modulation, longer airtime, and more retriesSurvey heat map and measured client RSSI
Channel plan2.4 GHz channels 1/6/11 for legacy sensors; 5 GHz for camerasOverlapping channels create contention even when each AP looks healthyAP configuration export and spectrum scan
Traffic profile60 sensors send 2 kB every minute; gateway bursts firmware logs hourlySmall packets still consume contention overhead, acknowledgments, and wake timeAirtime estimate and packet capture sample
Security and roamingWPA2-Enterprise or WPA3, IoT VLAN, sticky-client threshold testedAuthentication delay and roaming behavior can break mobile or sleep-heavy devicesAuth logs, VLAN map, roaming test notes
Deployment momentChecks to perform
Before installMeasure noise floor, interference, AP placement, antenna pattern, and expected client density for each coverage zone.
During commissioningVerify association time, DHCP or static addressing, TLS handshake, retry rate, roaming path, and actual upload latency.
During operationsWatch airtime utilization, channel changes, retry percentage, deauth events, client MCS rates, and battery drain after firmware updates.
Escalation trigger

If average RSSI is acceptable but retry rate or latency is high, treat the issue as capacity, interference, or hidden-node contention instead of adding transmit power first.

The fit record turns selection into operations: it says what to measure after installation, not just what standard to buy.

36.11 OFDMA and TWT Schedule Contention

This section: OFDMA and TWT Schedule Contention — Wi-Fi 6 improves dense IoT service by giving the access point better tools for scheduling.

Wi-Fi 6 improves dense IoT service by giving the access point better tools for scheduling. OFDMA divides a channel into resource units so multiple clients can send in a coordinated transmission window. Target Wake Time lets clients agree on sleep and wake schedules instead of listening constantly.

Those tools do not remove the shared medium. Beacons, probe traffic, acknowledgments, retransmissions, hidden nodes, low modulation rates, and neighboring networks still consume airtime. A slow or distant device can reduce usable capacity because each frame takes longer to deliver.

Classic Wi-Fi access is contention-based. A station listens before transmitting, waits through interframe spacing, chooses a random backoff when the medium is busy, and expects an acknowledgment for unicast frames. If the acknowledgment is missed, the frame is retried at additional airtime cost. This is why retry rate and airtime utilization often explain user-visible stalls better than headline PHY rate.

OFDMA changes the scheduling granularity, not the need for planning. In Wi-Fi 6, the access point can divide a channel into resource units and coordinate multiple clients during a transmission opportunity, including trigger-based uplink traffic when clients and the AP support it. That helps dense small-packet workloads, but it depends on compatible clients, firmware behavior, AP scheduler policy, channel conditions, and whether the traffic arrives in patterns the scheduler can combine.

Target Wake Time is also a contract. The AP and client agree when the client can wake for service, so the device spends less energy listening between events. It works best when sensor deadlines, AP buffering, beacon/DTIM behavior, IP lease timing, and security renewal all fit the wake plan. If a device wakes outside its agreed window, roams unexpectedly, or must reauthenticate after sleep, the power saving can disappear into repeated join and retry work.

MechanismWhere it helpsWhat still limits it
OFDMAMany clients have small packets ready at similar times and the AP can coordinate them efficientlyClient compatibility, AP scheduler policy, channel quality, and traffic burst alignment
TWTBattery clients can sleep between scheduled service windowsSensor deadlines, buffering limits, beacon/DTIM behavior, IP lease timing, and security renewal
Retry controlAirtime stays available for useful payloads instead of repeated failed framesInterference, weak signal, hidden nodes, motion, and low modulation fallback

This section:

Knowledge Check: Wi-Fi Airtime Capacity

This section:

This section:

Packet Pete, Networking and packet-journey domain expertCheckpoint: Operations Contract

You now know:

  • A fit record separates coverage, capacity, power, security, provisioning, and operations evidence.
  • Good RSSI is not enough; retry rate, airtime utilization, MCS fallback, roaming, and hidden-node behavior can still break service.
  • OFDMA and TWT help only when clients, AP scheduling, buffering, wake timing, and traffic bursts line up.

This section:

36.12 Summary

This section: Summary — Wi-Fi provides high-bandwidth wireless connectivity for IoT, with recent standards specifically designed for IoT applications.

Wi-Fi provides high-bandwidth wireless connectivity for IoT, with recent standards specifically designed for IoT applications.

Key Takeaways

Wi-Fi for IoT:

  • 802.11n: General IoT where dual-band support and MIMO are enough.
  • 802.11ac: Video and other high-bandwidth devices that benefit from fast 5 GHz links.
  • 802.11ah (Wi-Fi HaLow): Long-range sensors that need sub-1 GHz coverage and lower power.
  • 802.11ax (Wi-Fi 6): Dense deployments where OFDMA and Target Wake Time improve capacity and battery life.

IoT-Specific Features:

  • Wi-Fi HaLow: Sub-1 GHz with possible kilometre-scale outdoor reach and an 8,191-station association-ID ceiling; confirm airtime and power on site
  • Wi-Fi 6: OFDMA for efficient multi-device access and TWT for scheduled sleep; verify latency in the deployment

Selection Criteria:

  • Range: HaLow can reach around 1 km outdoors under a suitable link budget; ordinary Wi-Fi may cover around 100 m in an open-area example
  • Power: Wi-Fi 6 TWT or HaLow for battery devices
  • Bandwidth: Wi-Fi 5/6 for video, HaLow for sensors
  • Density: Wi-Fi 6 OFDMA for many devices

Best Practices:

  1. Use Wi-Fi 6 for new IoT deployments (TWT, OFDMA)
  2. Consider HaLow for outdoor/long-range sensors
  3. Design for 5-10 dB SNR margin in congested environments
  4. Use 5 GHz where possible to avoid 2.4 GHz congestion
  5. Plan AP density based on device count and bandwidth needs

36.13 What’s Next?

This section: What’s Next? — Continue to Low-Power Networks: 802.15.4, LPWAN, and Cellular to explore IEEE 802.15.4 (Zigbee, Thread), LPWAN technologies (LoRaWAN, Sigfox, NB-IoT), and cellular IoT from 2G to 5G.

Continue to Low-Power Networks: 802.15.4, LPWAN, and Cellular to explore IEEE 802.15.4 (Zigbee, Thread), LPWAN technologies (LoRaWAN, Sigfox, NB-IoT), and cellular IoT from 2G to 5G.

TopicChapterDescription
Low-Power Networks802.15.4, LPWAN, and CellularIEEE 802.15.4, Zigbee, LoRaWAN, Sigfox, NB-IoT, and 5G cellular IoT options compared
Wired Network AccessEthernet for IoTEthernet standards, PoE, industrial Ethernet and how wired compares to Wi-Fi for fixed IoT
Network Access OverviewNetwork Access and Physical LayerPhysical layer fundamentals, modulation, and the role of the access layer in IoT stacks
Bluetooth and BLEBluetooth OverviewBLE’s role alongside Wi-Fi: short-range, ultra-low-power personal area networking
Protocol IntegrationProtocol BridgingHow Wi-Fi gateways bridge BLE, Zigbee, and Z-Wave devices to IP-based cloud platforms
Network SecurityThreat Modeling FundamentalsSecuring Wi-Fi IoT deployments: WPA3, certificate-based authentication, and network segmentation

Find help

3 reviewed answers.

Where should I start in a module?

Open the module page from the sidebar to see its chapters in order. Use the module map to return to a topic you need.

Modules and paths

Reviewed

What can I try when a project does not work?

Check the symptom, then work through the diagnostic steps. Keep the error message and the smallest example that reproduces it.

When you are stuck

Reviewed

How do interactive examples work?

Use the interactive guide to check how examples and simulations work before changing your project.

Interactive examples guide

Reviewed