36 Wi-Fi Access: Scanning and Deployment
More
Depth: Practitioner
Progress saves as you read. Mark sections complete as you go; your progress appears in the sidebar.
36.1 Start With the Situation
This section: Start With the Situation — A link budget estimates whether a radio signal can reach each device.
A link budget estimates whether a radio signal can reach each device. That predicts coverage, the places where the link should work, but other networks and moving users may change it. Scan the real channels, the slices of radio spectrum devices share. Test airtime, the time they occupy those channels, and security. Record whether the site can still support the deployment.
36.2 Overview
This section: Overview — This route turns site scans, case evidence, and deployment checks into a Wi-Fi fit decision.
This route turns site scans, case evidence, and deployment checks into a Wi-Fi fit decision.
This is part 2 of 2. Review Wi-Fi Access: Standards and Link Budget when you need the first route.
36.3 Learning Objectives
This section: Learning Objectives
By the end of this chapter, you will be able to:
- scan and interpret nearby Wi-Fi networks
- test capacity and security constraints
- record a supportable Wi-Fi deployment decision
36.4 ESP32 Wi-Fi Scanning Lab
This section: ESP32 Wi-Fi Scanning Lab — Once the scan gives local evidence, the case study shows how those same checks scale to thousands of devices.
Once the scan gives local evidence, the case study shows how those same checks scale to thousands of devices.
36.5 Knowledge Check
This section: Knowledge Check
36.6 Illustrative Airport Wi-Fi 6 Case
This section: Illustrative Airport Wi-Fi 6 Case — The following hypothetical airport case is a worked planning scenario, not a report of a Denver International Airport deployment.
The following hypothetical airport case is a worked planning scenario, not a report of a Denver International Airport deployment. Its 4,200 devices, 340 access points, delays, battery results, and costs are illustrative assumptions to test with site evidence.
The Challenge: In this hypothetical case, an existing Wi-Fi 5 (802.11ac) network serves passengers and a growing IoT fleet: 1,800 environmental sensors (HVAC, air quality), 900 asset tracking tags (wheelchairs, carts), 800 digital signage displays, and 700 security cameras. Assume that during peak hours (6-9 AM, 4-7 PM), busy access points show 40% channel utilization and sensor data delays of 500 ms-2 s. Utilization alone does not prove the cause of delay; a real investigation would also inspect airtime, retries, queues, and application timing.
Why Wi-Fi 5 Failed for IoT:
| Per-AP Peak Statistic | Wi-Fi 5 Observation | Why It Hurt IoT |
|---|---|---|
| Connected clients | 120 total: 80 passengers and 40 IoT devices | Passenger traffic competed directly with sensor traffic |
| Channel access method | OFDM, one device transmitting at a time | IoT packets waited behind larger client transfers |
| Average IoT wait time | 450 ms | Sensor readings arrived too late for control decisions |
| Delivery success rate | 87% | Missing readings created unreliable automation |
| False HVAC alarms | 23 per day | Delayed readings looked like real system faults |
Wi-Fi 6 Solution — OFDMA and TWT:
The scenario compares a proposed deployment of 340 Wi-Fi 6 access points with two configurations:
-
OFDMA for sensor data: A 20 MHz channel can be divided into nine 26-tone Resource Units (RUs), allowing up to nine scheduled transmissions in one OFDMA exchange when client and AP support it. Assume measured wait time falls from 450 ms to under 50 ms in this scenario; neither rate is a standard guarantee.
-
TWT for asset tracking tags: Assume 900 compatible tags negotiate wake periods every 30 seconds to transmit 12-byte updates. The model compares six months of battery life under an older power-save policy with 28 months under TWT. Actual power draw must be measured; Wi-Fi 5 clients can also sleep.
Illustrative Results (assumptions, not field measurements):
| Metric | Wi-Fi 5 (Before) | Wi-Fi 6 (After) | Improvement |
|---|---|---|---|
| Sensor data latency (peak-hour mean) | 450 ms average | 38 ms average | about 12x lower |
| Delivery success rate | 87% | 99.6% | +12.6 percentage points |
| False HVAC alarms/day | 23 | 1-2 | about 91-96% reduction |
| Asset tag battery life | 6 months | 28 months | 4.7x longer |
| Devices per AP (peak) | 120 | 180 | 50% more capacity |
| Annual battery replacement cost | $162,000 | $34,600 | $127,400 saved |
Key Insight: Sensors may need only kilobits per second, so OFDMA’s scheduled multi-device access and TWT’s coordinated sleep can matter more than peak PHY speed. These features can reduce contention and power use when supported and configured, but they do not eliminate queues or replace measurements in a mixed passenger and IoT network.
This section:
Checkpoint: Field and Case Evidence
You now know:
- A scan should capture SSID, RSSI, channel, security mode, and location-to-location variation.
- The hospital quiz selects Wi-Fi 6 as a candidate; the 100 ms patient-monitoring requirement still needs measured end-to-end proof.
- The illustrative airport case links a 4,200-device planning workload to OFDMA and TWT assumptions that need field validation.
This section:
36.7 Match Wi-Fi Standards
This section: Match Wi-Fi Standards
36.8 Wi-Fi Deployment Sequence
This section: Wi-Fi Deployment Sequence
Common Pitfalls
This section: Common Pitfalls
Wi-Fi power consumption (100–200 mA active) is 10–50× higher than Zigbee or BLE. Battery-powered IoT devices on Wi-Fi may last only days. Fix: use Wi-Fi only for mains-powered IoT devices; use Zigbee, BLE, or LoRaWAN for battery-powered sensors.
The 2.4 GHz band has only 3 non-overlapping channels (1, 6, 11). Dense AP deployments using these 3 channels cause co-channel interference. Fix: use the 5 GHz band with its 24 non-overlapping channels for dense deployments.
Deploying IoT devices on an open or WPA2-Personal network exposes the entire VLAN to any device that knows the pre-shared key. Fix: isolate IoT devices on a dedicated VLAN with WPA2-Enterprise or WPA3 authentication.
36.9 Wi-Fi Fit Record
This section: Wi-Fi Fit Record — Wi-Fi is not just a range or speed choice.
Wi-Fi is not just a range or speed choice. It is a shared-airtime system where every access point, client, retry, management frame, and neighboring network competes for time on the channel.
An IoT design that says “use Wi-Fi” is incomplete until it explains how much airtime the devices need, how they authenticate, how they sleep, and how the access points will keep coverage and contention inside the deployment budget.
The design question is therefore not “does the signal reach the device?” A device can show acceptable RSSI and still lose useful service when the channel is busy, when the modulation rate falls, when hidden nodes trigger retries, or when neighboring networks reuse the same channel. Each retransmission spends more airtime before the application receives a single useful payload.
IoT makes this sharper because many devices send small messages, wake briefly, or reconnect after long sleeps. A temperature sensor, badge reader, camera, and commissioning laptop may all be “low bandwidth” in application terms, but each association, DHCP lease, TLS handshake, multicast burst, and acknowledgment still consumes channel time. The Wi-Fi decision must include the access point, channel width, band, security method, client power behavior, and backhaul path as one service contract.
A good fit record separates coverage, capacity, and operations evidence. Coverage proves the client can hear and be heard. Capacity proves the channel has enough airtime during busy periods. Operations evidence proves the design can survive firmware updates, credential rotation, AP replacement, and site changes without forcing a truck roll for every sleeping device.
Pete’s Delivery Slip
- Address: a device can show acceptable signal strength and still lose service when the channel is busy.
- Route: association, DHCP lease, TLS handshake, and every acknowledgment still spend airtime, even for a "low-bandwidth" sensor.
- Receipt: coverage proves the client can be heard -- capacity proves the channel has time to hear it back.
Work through Figure 36.1 in its three numbered stages to see why a signal reading on its own cannot close a Wi-Fi decision.
Stage one names the service: device role, infrastructure owner, traffic envelope, power source, security boundary, provisioning path and review trigger. Nothing is measured yet. Stage two collects field evidence against three claims, and the split matters. Coverage proves the client can be heard. Capacity proves the channel has time to hear it. Operations proves the design survives updates and site changes. Stage three writes the decision, the limits and the retest trigger. The escalation rule at the foot of Figure 36.1 is the one to memorise. An acceptable average with high retries is a capacity or contention problem, so do not raise transmit power first.
Complete the record by naming the device role, infrastructure owner, traffic envelope, power source, security boundary, provisioning path, and operational review trigger.
| Fit question | What to verify | Typical failure mode |
|---|---|---|
| Coverage | RSSI, SNR, antenna orientation, wall loss, and roaming boundaries | Device can associate but falls to low MCS rates or retries heavily |
| Capacity | Device count, traffic shape, modulation rate, retries, and channel reuse | “Low-bandwidth” devices still stall because management traffic and retries consume airtime |
| Power | Listen interval, DTIM, Target Wake Time, and reconnect behavior | Battery devices spend energy waiting, rejoining, or retrying instead of sleeping |
Choose Wi-Fi when the application needs IP reachability and moderate to high throughput, and when the site can support measured airtime, managed channels, and appropriate security.
36.10 Wi-Fi Capacity Record
This section: Wi-Fi Capacity Record — A useful Wi-Fi record turns radio assumptions into field checks.
A useful Wi-Fi record turns radio assumptions into field checks. It should show what each device sends, how often it wakes, which access point serves it, what minimum signal quality is acceptable, and what happens when the channel is busy.
Build the record from measured evidence, not vendor coverage claims. For each device class, record the band, channel width, SSID, authentication method, VLAN, expected packet size and cadence, peak burst behavior, firmware-update path, and battery sleep pattern. Then attach site evidence: AP placement, survey readings at installed height, noise floor, channel utilization, retry percentage, client MCS rates, roaming results, and backhaul utilization during the busiest period you can reproduce.
AP placement follows a few practical rules of thumb, not just a coverage heat map. Keeping one SSID across every AP in a coverage area lets client radios roam to the strongest AP on their own, instead of a person choosing between differently named networks by hand. Two APs assigned the same channel should sit as far apart as the site allows, because co-channel APs compete for the same airtime instead of adding capacity. In one Cisco WLAN design guide, 10–15% overlapping coverage is a starting point for general roaming, and 15–20% for voice; verify cell edges and interference with a site survey rather than applying one universal overlap range. Cisco guide Assigning channels across a dense AP layout is really a graph-coloring problem — treat each AP as a node, connect APs that can hear each other, and assign the fewest channels (“colors”) so no two connected APs share one — which is part of why the same three 2.4 GHz channels (1, 6, 11) keep reappearing in this chapter’s examples even as AP count grows.
The record should also document what the design will not support. A 2.4 GHz-only sensor may be acceptable for low-rate telemetry, but it competes with legacy clients and neighboring networks. A high-resolution camera may need 5 GHz or 6 GHz capacity, but it may lose range faster through walls. A battery device may support long sleep intervals, but failed joins, certificate renewal, or captive provisioning can dominate energy use if the network path is unreliable.
Pete’s Delivery Slip
- Address: a useful record names what each device class sends, how often it wakes, and which access point serves it.
- Route: overlapping channels create contention even when each access point looks healthy on its own.
- Receipt: measured survey and retry-rate evidence beats a vendor coverage claim every time.
| Record field | Example value | Why it matters | Evidence to keep |
|---|---|---|---|
| Coverage target | -67 dBm RSSI, 25 dB SNR at sensor mount points | Weak signal forces lower modulation, longer airtime, and more retries | Survey heat map and measured client RSSI |
| Channel plan | 2.4 GHz channels 1/6/11 for legacy sensors; 5 GHz for cameras | Overlapping channels create contention even when each AP looks healthy | AP configuration export and spectrum scan |
| Traffic profile | 60 sensors send 2 kB every minute; gateway bursts firmware logs hourly | Small packets still consume contention overhead, acknowledgments, and wake time | Airtime estimate and packet capture sample |
| Security and roaming | WPA2-Enterprise or WPA3, IoT VLAN, sticky-client threshold tested | Authentication delay and roaming behavior can break mobile or sleep-heavy devices | Auth logs, VLAN map, roaming test notes |
| Deployment moment | Checks to perform |
|---|---|
| Before install | Measure noise floor, interference, AP placement, antenna pattern, and expected client density for each coverage zone. |
| During commissioning | Verify association time, DHCP or static addressing, TLS handshake, retry rate, roaming path, and actual upload latency. |
| During operations | Watch airtime utilization, channel changes, retry percentage, deauth events, client MCS rates, and battery drain after firmware updates. |
If average RSSI is acceptable but retry rate or latency is high, treat the issue as capacity, interference, or hidden-node contention instead of adding transmit power first.
The fit record turns selection into operations: it says what to measure after installation, not just what standard to buy.
36.11 OFDMA and TWT Schedule Contention
This section: OFDMA and TWT Schedule Contention — Wi-Fi 6 improves dense IoT service by giving the access point better tools for scheduling.
Wi-Fi 6 improves dense IoT service by giving the access point better tools for scheduling. OFDMA divides a channel into resource units so multiple clients can send in a coordinated transmission window. Target Wake Time lets clients agree on sleep and wake schedules instead of listening constantly.
Those tools do not remove the shared medium. Beacons, probe traffic, acknowledgments, retransmissions, hidden nodes, low modulation rates, and neighboring networks still consume airtime. A slow or distant device can reduce usable capacity because each frame takes longer to deliver.
Classic Wi-Fi access is contention-based. A station listens before transmitting, waits through interframe spacing, chooses a random backoff when the medium is busy, and expects an acknowledgment for unicast frames. If the acknowledgment is missed, the frame is retried at additional airtime cost. This is why retry rate and airtime utilization often explain user-visible stalls better than headline PHY rate.
OFDMA changes the scheduling granularity, not the need for planning. In Wi-Fi 6, the access point can divide a channel into resource units and coordinate multiple clients during a transmission opportunity, including trigger-based uplink traffic when clients and the AP support it. That helps dense small-packet workloads, but it depends on compatible clients, firmware behavior, AP scheduler policy, channel conditions, and whether the traffic arrives in patterns the scheduler can combine.
Target Wake Time is also a contract. The AP and client agree when the client can wake for service, so the device spends less energy listening between events. It works best when sensor deadlines, AP buffering, beacon/DTIM behavior, IP lease timing, and security renewal all fit the wake plan. If a device wakes outside its agreed window, roams unexpectedly, or must reauthenticate after sleep, the power saving can disappear into repeated join and retry work.
| Mechanism | Where it helps | What still limits it |
|---|---|---|
| OFDMA | Many clients have small packets ready at similar times and the AP can coordinate them efficiently | Client compatibility, AP scheduler policy, channel quality, and traffic burst alignment |
| TWT | Battery clients can sleep between scheduled service windows | Sensor deadlines, buffering limits, beacon/DTIM behavior, IP lease timing, and security renewal |
| Retry control | Airtime stays available for useful payloads instead of repeated failed frames | Interference, weak signal, hidden nodes, motion, and low modulation fallback |
This section:
This section:
This section:
Checkpoint: Operations Contract
You now know:
- A fit record separates coverage, capacity, power, security, provisioning, and operations evidence.
- Good RSSI is not enough; retry rate, airtime utilization, MCS fallback, roaming, and hidden-node behavior can still break service.
- OFDMA and TWT help only when clients, AP scheduling, buffering, wake timing, and traffic bursts line up.
This section:
36.12 Summary
This section: Summary — Wi-Fi provides high-bandwidth wireless connectivity for IoT, with recent standards specifically designed for IoT applications.
Wi-Fi provides high-bandwidth wireless connectivity for IoT, with recent standards specifically designed for IoT applications.
Wi-Fi for IoT:
- 802.11n: General IoT where dual-band support and MIMO are enough.
- 802.11ac: Video and other high-bandwidth devices that benefit from fast 5 GHz links.
- 802.11ah (Wi-Fi HaLow): Long-range sensors that need sub-1 GHz coverage and lower power.
- 802.11ax (Wi-Fi 6): Dense deployments where OFDMA and Target Wake Time improve capacity and battery life.
IoT-Specific Features:
- Wi-Fi HaLow: Sub-1 GHz with possible kilometre-scale outdoor reach and an 8,191-station association-ID ceiling; confirm airtime and power on site
- Wi-Fi 6: OFDMA for efficient multi-device access and TWT for scheduled sleep; verify latency in the deployment
Selection Criteria:
- Range: HaLow can reach around 1 km outdoors under a suitable link budget; ordinary Wi-Fi may cover around 100 m in an open-area example
- Power: Wi-Fi 6 TWT or HaLow for battery devices
- Bandwidth: Wi-Fi 5/6 for video, HaLow for sensors
- Density: Wi-Fi 6 OFDMA for many devices
Best Practices:
- Use Wi-Fi 6 for new IoT deployments (TWT, OFDMA)
- Consider HaLow for outdoor/long-range sensors
- Design for 5-10 dB SNR margin in congested environments
- Use 5 GHz where possible to avoid 2.4 GHz congestion
- Plan AP density based on device count and bandwidth needs
36.13 What’s Next?
This section: What’s Next? — Continue to Low-Power Networks: 802.15.4, LPWAN, and Cellular to explore IEEE 802.15.4 (Zigbee, Thread), LPWAN technologies (LoRaWAN, Sigfox, NB-IoT), and cellular IoT from 2G to 5G.
Continue to Low-Power Networks: 802.15.4, LPWAN, and Cellular to explore IEEE 802.15.4 (Zigbee, Thread), LPWAN technologies (LoRaWAN, Sigfox, NB-IoT), and cellular IoT from 2G to 5G.
| Topic | Chapter | Description |
|---|---|---|
| Low-Power Networks | 802.15.4, LPWAN, and Cellular | IEEE 802.15.4, Zigbee, LoRaWAN, Sigfox, NB-IoT, and 5G cellular IoT options compared |
| Wired Network Access | Ethernet for IoT | Ethernet standards, PoE, industrial Ethernet and how wired compares to Wi-Fi for fixed IoT |
| Network Access Overview | Network Access and Physical Layer | Physical layer fundamentals, modulation, and the role of the access layer in IoT stacks |
| Bluetooth and BLE | Bluetooth Overview | BLE’s role alongside Wi-Fi: short-range, ultra-low-power personal area networking |
| Protocol Integration | Protocol Bridging | How Wi-Fi gateways bridge BLE, Zigbee, and Z-Wave devices to IP-based cloud platforms |
| Network Security | Threat Modeling Fundamentals | Securing Wi-Fi IoT deployments: WPA3, certificate-based authentication, and network segmentation |
Find help
3 reviewed answers.
Where should I start in a module?
Open the module page from the sidebar to see its chapters in order. Use the module map to return to a topic you need.
Modules and pathsReviewed
What can I try when a project does not work?
Check the symptom, then work through the diagnostic steps. Keep the error message and the smallest example that reproduces it.
When you are stuckReviewed
How do interactive examples work?
Use the interactive guide to check how examples and simulations work before changing your project.
Interactive examples guideReviewed
