Chapters

36 Wi-Fi Access: Scanning and Deployment

networking-core
network
physical
wireless

36.1 Start With the Situation

A link budget predicts coverage, but the site has competing networks and changing users. The team must scan the real channels, test airtime and security, and record whether the deployment remains supportable.

36.2 Overview

This route turns site scans, case evidence, and deployment checks into a Wi-Fi fit decision.

This is part 2 of 2. Review Wi-Fi Access: Standards and Link Budget when you need the first route.

36.3 Learning Objectives

By the end of this chapter, you will be able to:

  • scan and interpret nearby Wi-Fi networks
  • test capacity and security constraints
  • record a supportable Wi-Fi deployment decision

36.4 Chapter Roadmap

Follow the original sections below in order. They begin at the reviewed split boundary and keep every worked example, figure, check, and supporting banner with the section that owns it.

36.5 ESP32 Wi-Fi Scanning Lab

Scan and Analyze Wi-Fi Networks

Objective: Use an ESP32 to scan available Wi-Fi networks and analyze their characteristics (SSID, RSSI, channel, encryption).

Hardware Required:

  • ESP32 development board
  • USB cable
  • Computer with Arduino IDE

The Wi-Fi range calculator above is the no-hardware version of this lab. If you have an ESP32 ready, use it to collect the same evidence: network name, RSSI, channel, and security mode.

Lab StepWhat the ESP32 Scanner CollectsWhat to Learn From It
1SSID for each visible networkWhich networks are nearby and whether naming leaks sensitive information
2RSSI in dBmWhether each AP is strong enough for stable IoT connectivity
3Channel numberWhether the site is crowded on channels 1, 6, 11, or shifted to 5 GHz
4Encryption modeWhether open or weak networks create security risk
5Repeat scans in different locationsHow walls, distance, and competing APs change coverage quality

Typical scan result to interpret:

SSIDRSSIChannelSecurityInterpretation
HomeNetwork-45 dBm6WPA2Strong signal, crowded common channel
Office_WiFi-62 dBm11WPA2Usable signal, separate non-overlapping channel
Guest_Network-58 dBm1WPA2Good signal but may compete with IoT devices
IoT_Sensors-71 dBm6WPA2Marginal signal; consider closer AP or better channel plan

Analysis Tasks:

  1. Identify channel congestion: Which channels have the most networks?
  2. Measure signal strength: Which networks have the strongest signal (RSSI)?
  3. Security assessment: Are there any open (unencrypted) networks?
  4. Channel selection: If deploying a new network, which channel would you choose?
  5. Range estimation: Based on RSSI, estimate approximate distance to access points

Once the scan gives local evidence, the case study shows how those same checks scale to thousands of devices.


36.6 Knowledge Check

Quiz: Theme Park Wearables

36.7 Wi-Fi 6 at Denver Airport

Denver International Airport (DEN) deployed Wi-Fi 6 in 2022 to support both passenger connectivity and 4,200 IoT devices across its terminal complex — making it one of the largest Wi-Fi 6 IoT deployments in a public venue.

The Challenge: The existing Wi-Fi 5 (802.11ac) network served passengers well but could not handle the growing IoT fleet: 1,800 environmental sensors (HVAC, air quality), 900 asset tracking tags (wheelchairs, carts), 800 digital signage displays, and 700 security cameras. During peak hours (6-9 AM, 4-7 PM), the access points experienced 40% channel utilization, causing sensor data delays of 500 ms-2s that triggered false HVAC alarms.

Why Wi-Fi 5 Failed for IoT:

Per-AP Peak StatisticWi-Fi 5 ObservationWhy It Hurt IoT
Connected clients120 total: 80 passengers and 40 IoT devicesPassenger traffic competed directly with sensor traffic
Channel access methodOFDM, one device transmitting at a timeIoT packets waited behind larger client transfers
Average IoT wait time450 msSensor readings arrived too late for control decisions
Delivery success rate87%Missing readings created unreliable automation
False HVAC alarms23 per dayDelayed readings looked like real system faults

Wi-Fi 6 Solution — OFDMA and TWT:

The airport deployed 340 Wi-Fi 6 access points (Cisco Catalyst 9136) with two critical configurations:

  1. OFDMA for sensor data: Each 20 MHz channel was subdivided into 9 Resource Units (RUs), allowing 9 IoT devices to transmit simultaneously. This reduced per-device wait time from 450 ms to under 50 ms.

  2. TWT for asset tracking tags: The 900 tracking tags negotiated TWT schedules — waking every 30 seconds to transmit a 12-byte location update, then sleeping. Battery life increased from 6 months (Wi-Fi 5, constant beacon listening) to 28 months (Wi-Fi 6 TWT).

Quantitative Results:

MetricWi-Fi 5 (Before)Wi-Fi 6 (After)Improvement
Sensor data latency (peak)450 ms average38 ms average12x lower
Delivery success rate87%99.6%+12.6%
False HVAC alarms/day231-292% reduction
Asset tag battery life6 months28 months4.7x longer
Devices per AP (peak)12018050% more capacity
Annual battery replacement cost$162,000$34,600$127,400 saved

Key Insight: Wi-Fi 6’s value for IoT is not about higher speeds — the sensors only need kilobits per second. The transformative features are OFDMA (simultaneous multi-device access, eliminating queuing delays) and TWT (scheduled sleep, extending battery life). For any deployment mixing high-bandwidth clients (passengers, cameras) with low-bandwidth IoT devices (sensors, tags), Wi-Fi 6 eliminates the contention that made Wi-Fi 5 unreliable for IoT at scale.

Packet PeteCheckpoint: Field and Case Evidence

You now know:

  • A scan should capture SSID, RSSI, channel, security mode, and location-to-location variation.
  • The hospital quiz needs Wi-Fi 6 latency near 8 ms to meet a 100 ms patient-monitoring requirement.
  • The airport case links 4,200 IoT devices to OFDMA, TWT, lower sensor latency, and longer asset-tag battery life.


36.8 Match Wi-Fi Standards


36.9 Wi-Fi Deployment Sequence


Common Pitfalls

Wi-Fi power consumption (100–200 mA active) is 10–50× higher than Zigbee or BLE. Battery-powered IoT devices on Wi-Fi may last only days. Fix: use Wi-Fi only for mains-powered IoT devices; use Zigbee, BLE, or LoRaWAN for battery-powered sensors.

The 2.4 GHz band has only 3 non-overlapping channels (1, 6, 11). Dense AP deployments using these 3 channels cause co-channel interference. Fix: use the 5 GHz band with its 24 non-overlapping channels for dense deployments.

Deploying IoT devices on an open or WPA2-Personal network exposes the entire VLAN to any device that knows the pre-shared key. Fix: isolate IoT devices on a dedicated VLAN with WPA2-Enterprise or WPA3 authentication.

Label the Diagram
Code Challenge

36.10 Wi-Fi Fit Record

Wi-Fi is not just a range or speed choice. It is a shared-airtime system where every access point, client, retry, management frame, and neighboring network competes for time on the channel.

An IoT design that says “use Wi-Fi” is incomplete until it explains how much airtime the devices need, how they authenticate, how they sleep, and how the access points will keep coverage and contention inside the deployment budget.

The design question is therefore not “does the signal reach the device?” A device can show acceptable RSSI and still lose useful service when the channel is busy, when the modulation rate falls, when hidden nodes trigger retries, or when neighboring networks reuse the same channel. Each retransmission spends more airtime before the application receives a single useful payload.

IoT makes this sharper because many devices send small messages, wake briefly, or reconnect after long sleeps. A temperature sensor, badge reader, camera, and commissioning laptop may all be “low bandwidth” in application terms, but each association, DHCP lease, TLS handshake, multicast burst, and acknowledgment still consumes channel time. The Wi-Fi decision must include the access point, channel width, band, security method, client power behavior, and backhaul path as one service contract.

A good fit record separates coverage, capacity, and operations evidence. Coverage proves the client can hear and be heard. Capacity proves the channel has enough airtime during busy periods. Operations evidence proves the design can survive firmware updates, credential rotation, AP replacement, and site changes without forcing a truck roll for every sleeping device.

Pete’s Delivery Slip

  • Address: a device can show acceptable signal strength and still lose service when the channel is busy.
  • Route: association, DHCP lease, TLS handshake, and every acknowledgment still spend airtime, even for a "low-bandwidth" sensor.
  • Receipt: coverage proves the client can be heard -- capacity proves the channel has time to hear it back.

Before wi-fi fit record, inspect Figure 36.1: Wi-Fi Fit must be considered with Evidence Record. That visual pairing grounds wi-fi fit evidence record linking device role, infrastructure, traffic, power, security, provisioning, operations, and next review areas in named evidence.

Wi-Fi fit evidence record linking device role, infrastructure, traffic, power, security, provisioning, operations, and next review areas.
Figure 36.1: Wi-Fi fit evidence record linking device role, infrastructure, traffic, power, security, provisioning, operations, and next review areas.

At Wi-Fi Fit in Figure 36.1, compare the diagram with Evidence Record; then locate Decision, limits, review. That labelled check bounds wi-fi fit evidence record linking device role, infrastructure, traffic, power, security, provisioning, operations, and next review areas. For wi-fi fit record, retain Decision, limits, review as evidence for the resulting choice.

Complete the record by naming the device role, infrastructure owner, traffic envelope, power source, security boundary, provisioning path, and operational review trigger.

Fit questionWhat to verifyTypical failure mode
CoverageRSSI, SNR, antenna orientation, wall loss, and roaming boundariesDevice can associate but falls to low MCS rates or retries heavily
CapacityDevice count, traffic shape, modulation rate, retries, and channel reuse“Low-bandwidth” devices still stall because management traffic and retries consume airtime
PowerListen interval, DTIM, Target Wake Time, and reconnect behaviorBattery devices spend energy waiting, rejoining, or retrying instead of sleeping
Design signal

Choose Wi-Fi when the application needs IP reachability and moderate to high throughput, and when the site can support measured airtime, managed channels, and appropriate security.

36.11 Wi-Fi Capacity Record

A useful Wi-Fi record turns radio assumptions into field checks. It should show what each device sends, how often it wakes, which access point serves it, what minimum signal quality is acceptable, and what happens when the channel is busy.

Build the record from measured evidence, not vendor coverage claims. For each device class, record the band, channel width, SSID, authentication method, VLAN, expected packet size and cadence, peak burst behavior, firmware-update path, and battery sleep pattern. Then attach site evidence: AP placement, survey readings at installed height, noise floor, channel utilization, retry percentage, client MCS rates, roaming results, and backhaul utilization during the busiest period you can reproduce.

AP placement follows a few practical rules of thumb, not just a coverage heat map. Keeping one SSID across every AP in a coverage area lets client radios roam to the strongest AP on their own, instead of a person choosing between differently named networks by hand. Two APs assigned the same channel should sit as far apart as the site allows, because co-channel APs compete for the same airtime instead of adding capacity. Overlapping AP cells by roughly 15-25% avoids both extremes: too little overlap leaves dead zones between APs, and too much wastes channels on redundant coverage. Assigning channels across a dense AP layout is really a graph-coloring problem — treat each AP as a node, connect APs that can hear each other, and assign the fewest channels (“colors”) so no two connected APs share one — which is part of why the same three 2.4 GHz channels (1, 6, 11) keep reappearing in this chapter’s examples even as AP count grows.

The record should also document what the design will not support. A 2.4 GHz-only sensor may be acceptable for low-rate telemetry, but it competes with legacy clients and neighboring networks. A high-resolution camera may need 5 GHz or 6 GHz capacity, but it may lose range faster through walls. A battery device may support long sleep intervals, but failed joins, certificate renewal, or captive provisioning can dominate energy use if the network path is unreliable.

Pete’s Delivery Slip

  • Address: a useful record names what each device class sends, how often it wakes, and which access point serves it.
  • Route: overlapping channels create contention even when each access point looks healthy on its own.
  • Receipt: measured survey and retry-rate evidence beats a vendor coverage claim every time.
Record fieldExample valueWhy it mattersEvidence to keep
Coverage target-67 dBm RSSI, 25 dB SNR at sensor mount pointsWeak signal forces lower modulation, longer airtime, and more retriesSurvey heat map and measured client RSSI
Channel plan2.4 GHz channels 1/6/11 for legacy sensors; 5 GHz for camerasOverlapping channels create contention even when each AP looks healthyAP configuration export and spectrum scan
Traffic profile60 sensors send 2 kB every minute; gateway bursts firmware logs hourlySmall packets still consume contention overhead, acknowledgments, and wake timeAirtime estimate and packet capture sample
Security and roamingWPA2-Enterprise or WPA3, IoT VLAN, sticky-client threshold testedAuthentication delay and roaming behavior can break mobile or sleep-heavy devicesAuth logs, VLAN map, roaming test notes
Deployment momentChecks to perform
Before installMeasure noise floor, interference, AP placement, antenna pattern, and expected client density for each coverage zone.
During commissioningVerify association time, DHCP or static addressing, TLS handshake, retry rate, roaming path, and actual upload latency.
During operationsWatch airtime utilization, channel changes, retry percentage, deauth events, client MCS rates, and battery drain after firmware updates.
Escalation trigger

If average RSSI is acceptable but retry rate or latency is high, treat the issue as capacity, interference, or hidden-node contention instead of adding transmit power first.

The fit record turns selection into operations: it says what to measure after installation, not just what standard to buy.

36.12 OFDMA and TWT Schedule Contention

Wi-Fi 6 improves dense IoT service by giving the access point better tools for scheduling. OFDMA divides a channel into resource units so multiple clients can send in a coordinated transmission window. Target Wake Time lets clients agree on sleep and wake schedules instead of listening constantly.

Those tools do not remove the shared medium. Beacons, probe traffic, acknowledgments, retransmissions, hidden nodes, low modulation rates, and neighboring networks still consume airtime. A slow or distant device can reduce usable capacity because each frame takes longer to deliver.

Classic Wi-Fi access is contention-based. A station listens before transmitting, waits through interframe spacing, chooses a random backoff when the medium is busy, and expects an acknowledgment for unicast frames. If the acknowledgment is missed, the frame is retried at additional airtime cost. This is why retry rate and airtime utilization often explain user-visible stalls better than headline PHY rate.

OFDMA changes the scheduling granularity, not the need for planning. In Wi-Fi 6, the access point can divide a channel into resource units and coordinate multiple clients during a transmission opportunity, including trigger-based uplink traffic when clients and the AP support it. That helps dense small-packet workloads, but it depends on compatible clients, firmware behavior, AP scheduler policy, channel conditions, and whether the traffic arrives in patterns the scheduler can combine.

Target Wake Time is also a contract. The AP and client agree when the client can wake for service, so the device spends less energy listening between events. It works best when sensor deadlines, AP buffering, beacon/DTIM behavior, IP lease timing, and security renewal all fit the wake plan. If a device wakes outside its agreed window, roams unexpectedly, or must reauthenticate after sleep, the power saving can disappear into repeated join and retry work.

MechanismWhere it helpsWhat still limits it
OFDMAMany clients have small packets ready at similar times and the AP can coordinate them efficientlyClient compatibility, AP scheduler policy, channel quality, and traffic burst alignment
TWTBattery clients can sleep between scheduled service windowsSensor deadlines, buffering limits, beacon/DTIM behavior, IP lease timing, and security renewal
Retry controlAirtime stays available for useful payloads instead of repeated failed framesInterference, weak signal, hidden nodes, motion, and low modulation fallback

Knowledge Check: Wi-Fi Airtime Capacity

Packet PeteCheckpoint: Operations Contract

You now know:

  • A fit record separates coverage, capacity, power, security, provisioning, and operations evidence.
  • Good RSSI is not enough; retry rate, airtime utilization, MCS fallback, roaming, and hidden-node behavior can still break service.
  • OFDMA and TWT help only when clients, AP scheduling, buffering, wake timing, and traffic bursts line up.

36.13 Summary

Wi-Fi provides high-bandwidth wireless connectivity for IoT, with recent standards specifically designed for IoT applications.

Key Takeaways

Wi-Fi for IoT:

  • 802.11n: General IoT where dual-band support and MIMO are enough.
  • 802.11ac: Video and other high-bandwidth devices that benefit from fast 5 GHz links.
  • 802.11ah (Wi-Fi HaLow): Long-range sensors that need sub-1 GHz coverage and lower power.
  • 802.11ax (Wi-Fi 6): Dense deployments where OFDMA and Target Wake Time improve capacity and battery life.

IoT-Specific Features:

  • Wi-Fi HaLow: Sub-1 GHz for 1km range, 8,191 devices/AP, battery-friendly
  • Wi-Fi 6: OFDMA for efficient multi-device, TWT for power savings, 8 ms latency

Selection Criteria:

  • Range: HaLow for 1km, traditional for 100m
  • Power: Wi-Fi 6 TWT or HaLow for battery devices
  • Bandwidth: Wi-Fi 5/6 for video, HaLow for sensors
  • Density: Wi-Fi 6 OFDMA for many devices

Best Practices:

  1. Use Wi-Fi 6 for new IoT deployments (TWT, OFDMA)
  2. Consider HaLow for outdoor/long-range sensors
  3. Design for 5-10 dB SNR margin in congested environments
  4. Use 5 GHz where possible to avoid 2.4 GHz congestion
  5. Plan AP density based on device count and bandwidth needs

36.14 What’s Next?

Continue to Low-Power Networks: 802.15.4, LPWAN, and Cellular to explore IEEE 802.15.4 (Zigbee, Thread), LPWAN technologies (LoRaWAN, Sigfox, NB-IoT), and cellular IoT from 2G to 5G.

TopicChapterDescription
Low-Power Networks802.15.4, LPWAN, and CellularIEEE 802.15.4, Zigbee, LoRaWAN, Sigfox, NB-IoT, and 5G cellular IoT options compared
Wired Network AccessEthernet for IoTEthernet standards, PoE, industrial Ethernet and how wired compares to Wi-Fi for fixed IoT
Network Access OverviewNetwork Access and Physical LayerPhysical layer fundamentals, modulation, and the role of the access layer in IoT stacks
Bluetooth and BLEBluetooth OverviewBLE’s role alongside Wi-Fi: short-range, ultra-low-power personal area networking
Protocol IntegrationProtocol BridgingHow Wi-Fi gateways bridge BLE, Zigbee, and Z-Wave devices to IP-based cloud platforms
Network SecurityThreat Modeling FundamentalsSecuring Wi-Fi IoT deployments: WPA3, certificate-based authentication, and network segmentation