36 Wi-Fi Access: Scanning and Deployment
36.1 Start With the Situation
A link budget predicts coverage, but the site has competing networks and changing users. The team must scan the real channels, test airtime and security, and record whether the deployment remains supportable.
36.2 Overview
This route turns site scans, case evidence, and deployment checks into a Wi-Fi fit decision.
This is part 2 of 2. Review Wi-Fi Access: Standards and Link Budget when you need the first route.
36.3 Learning Objectives
By the end of this chapter, you will be able to:
- scan and interpret nearby Wi-Fi networks
- test capacity and security constraints
- record a supportable Wi-Fi deployment decision
36.4 Chapter Roadmap
Follow the original sections below in order. They begin at the reviewed split boundary and keep every worked example, figure, check, and supporting banner with the section that owns it.
36.5 ESP32 Wi-Fi Scanning Lab
Once the scan gives local evidence, the case study shows how those same checks scale to thousands of devices.
36.6 Knowledge Check
36.7 Wi-Fi 6 at Denver Airport
Denver International Airport (DEN) deployed Wi-Fi 6 in 2022 to support both passenger connectivity and 4,200 IoT devices across its terminal complex — making it one of the largest Wi-Fi 6 IoT deployments in a public venue.
The Challenge: The existing Wi-Fi 5 (802.11ac) network served passengers well but could not handle the growing IoT fleet: 1,800 environmental sensors (HVAC, air quality), 900 asset tracking tags (wheelchairs, carts), 800 digital signage displays, and 700 security cameras. During peak hours (6-9 AM, 4-7 PM), the access points experienced 40% channel utilization, causing sensor data delays of 500 ms-2s that triggered false HVAC alarms.
Why Wi-Fi 5 Failed for IoT:
| Per-AP Peak Statistic | Wi-Fi 5 Observation | Why It Hurt IoT |
|---|---|---|
| Connected clients | 120 total: 80 passengers and 40 IoT devices | Passenger traffic competed directly with sensor traffic |
| Channel access method | OFDM, one device transmitting at a time | IoT packets waited behind larger client transfers |
| Average IoT wait time | 450 ms | Sensor readings arrived too late for control decisions |
| Delivery success rate | 87% | Missing readings created unreliable automation |
| False HVAC alarms | 23 per day | Delayed readings looked like real system faults |
Wi-Fi 6 Solution — OFDMA and TWT:
The airport deployed 340 Wi-Fi 6 access points (Cisco Catalyst 9136) with two critical configurations:
-
OFDMA for sensor data: Each 20 MHz channel was subdivided into 9 Resource Units (RUs), allowing 9 IoT devices to transmit simultaneously. This reduced per-device wait time from 450 ms to under 50 ms.
-
TWT for asset tracking tags: The 900 tracking tags negotiated TWT schedules — waking every 30 seconds to transmit a 12-byte location update, then sleeping. Battery life increased from 6 months (Wi-Fi 5, constant beacon listening) to 28 months (Wi-Fi 6 TWT).
Quantitative Results:
| Metric | Wi-Fi 5 (Before) | Wi-Fi 6 (After) | Improvement |
|---|---|---|---|
| Sensor data latency (peak) | 450 ms average | 38 ms average | 12x lower |
| Delivery success rate | 87% | 99.6% | +12.6% |
| False HVAC alarms/day | 23 | 1-2 | 92% reduction |
| Asset tag battery life | 6 months | 28 months | 4.7x longer |
| Devices per AP (peak) | 120 | 180 | 50% more capacity |
| Annual battery replacement cost | $162,000 | $34,600 | $127,400 saved |
Key Insight: Wi-Fi 6’s value for IoT is not about higher speeds — the sensors only need kilobits per second. The transformative features are OFDMA (simultaneous multi-device access, eliminating queuing delays) and TWT (scheduled sleep, extending battery life). For any deployment mixing high-bandwidth clients (passengers, cameras) with low-bandwidth IoT devices (sensors, tags), Wi-Fi 6 eliminates the contention that made Wi-Fi 5 unreliable for IoT at scale.
Checkpoint: Field and Case Evidence
You now know:
- A scan should capture SSID, RSSI, channel, security mode, and location-to-location variation.
- The hospital quiz needs Wi-Fi 6 latency near 8 ms to meet a 100 ms patient-monitoring requirement.
- The airport case links 4,200 IoT devices to OFDMA, TWT, lower sensor latency, and longer asset-tag battery life.
36.8 Match Wi-Fi Standards
36.9 Wi-Fi Deployment Sequence
Common Pitfalls
Wi-Fi power consumption (100–200 mA active) is 10–50× higher than Zigbee or BLE. Battery-powered IoT devices on Wi-Fi may last only days. Fix: use Wi-Fi only for mains-powered IoT devices; use Zigbee, BLE, or LoRaWAN for battery-powered sensors.
The 2.4 GHz band has only 3 non-overlapping channels (1, 6, 11). Dense AP deployments using these 3 channels cause co-channel interference. Fix: use the 5 GHz band with its 24 non-overlapping channels for dense deployments.
Deploying IoT devices on an open or WPA2-Personal network exposes the entire VLAN to any device that knows the pre-shared key. Fix: isolate IoT devices on a dedicated VLAN with WPA2-Enterprise or WPA3 authentication.
36.10 Wi-Fi Fit Record
Wi-Fi is not just a range or speed choice. It is a shared-airtime system where every access point, client, retry, management frame, and neighboring network competes for time on the channel.
An IoT design that says “use Wi-Fi” is incomplete until it explains how much airtime the devices need, how they authenticate, how they sleep, and how the access points will keep coverage and contention inside the deployment budget.
The design question is therefore not “does the signal reach the device?” A device can show acceptable RSSI and still lose useful service when the channel is busy, when the modulation rate falls, when hidden nodes trigger retries, or when neighboring networks reuse the same channel. Each retransmission spends more airtime before the application receives a single useful payload.
IoT makes this sharper because many devices send small messages, wake briefly, or reconnect after long sleeps. A temperature sensor, badge reader, camera, and commissioning laptop may all be “low bandwidth” in application terms, but each association, DHCP lease, TLS handshake, multicast burst, and acknowledgment still consumes channel time. The Wi-Fi decision must include the access point, channel width, band, security method, client power behavior, and backhaul path as one service contract.
A good fit record separates coverage, capacity, and operations evidence. Coverage proves the client can hear and be heard. Capacity proves the channel has enough airtime during busy periods. Operations evidence proves the design can survive firmware updates, credential rotation, AP replacement, and site changes without forcing a truck roll for every sleeping device.
Pete’s Delivery Slip
- Address: a device can show acceptable signal strength and still lose service when the channel is busy.
- Route: association, DHCP lease, TLS handshake, and every acknowledgment still spend airtime, even for a "low-bandwidth" sensor.
- Receipt: coverage proves the client can be heard -- capacity proves the channel has time to hear it back.
Before wi-fi fit record, inspect Figure 36.1: Wi-Fi Fit must be considered with Evidence Record. That visual pairing grounds wi-fi fit evidence record linking device role, infrastructure, traffic, power, security, provisioning, operations, and next review areas in named evidence.
At Wi-Fi Fit in Figure 36.1, compare the diagram with Evidence Record; then locate Decision, limits, review. That labelled check bounds wi-fi fit evidence record linking device role, infrastructure, traffic, power, security, provisioning, operations, and next review areas. For wi-fi fit record, retain Decision, limits, review as evidence for the resulting choice.
Complete the record by naming the device role, infrastructure owner, traffic envelope, power source, security boundary, provisioning path, and operational review trigger.
| Fit question | What to verify | Typical failure mode |
|---|---|---|
| Coverage | RSSI, SNR, antenna orientation, wall loss, and roaming boundaries | Device can associate but falls to low MCS rates or retries heavily |
| Capacity | Device count, traffic shape, modulation rate, retries, and channel reuse | “Low-bandwidth” devices still stall because management traffic and retries consume airtime |
| Power | Listen interval, DTIM, Target Wake Time, and reconnect behavior | Battery devices spend energy waiting, rejoining, or retrying instead of sleeping |
Choose Wi-Fi when the application needs IP reachability and moderate to high throughput, and when the site can support measured airtime, managed channels, and appropriate security.
36.11 Wi-Fi Capacity Record
A useful Wi-Fi record turns radio assumptions into field checks. It should show what each device sends, how often it wakes, which access point serves it, what minimum signal quality is acceptable, and what happens when the channel is busy.
Build the record from measured evidence, not vendor coverage claims. For each device class, record the band, channel width, SSID, authentication method, VLAN, expected packet size and cadence, peak burst behavior, firmware-update path, and battery sleep pattern. Then attach site evidence: AP placement, survey readings at installed height, noise floor, channel utilization, retry percentage, client MCS rates, roaming results, and backhaul utilization during the busiest period you can reproduce.
AP placement follows a few practical rules of thumb, not just a coverage heat map. Keeping one SSID across every AP in a coverage area lets client radios roam to the strongest AP on their own, instead of a person choosing between differently named networks by hand. Two APs assigned the same channel should sit as far apart as the site allows, because co-channel APs compete for the same airtime instead of adding capacity. Overlapping AP cells by roughly 15-25% avoids both extremes: too little overlap leaves dead zones between APs, and too much wastes channels on redundant coverage. Assigning channels across a dense AP layout is really a graph-coloring problem — treat each AP as a node, connect APs that can hear each other, and assign the fewest channels (“colors”) so no two connected APs share one — which is part of why the same three 2.4 GHz channels (1, 6, 11) keep reappearing in this chapter’s examples even as AP count grows.
The record should also document what the design will not support. A 2.4 GHz-only sensor may be acceptable for low-rate telemetry, but it competes with legacy clients and neighboring networks. A high-resolution camera may need 5 GHz or 6 GHz capacity, but it may lose range faster through walls. A battery device may support long sleep intervals, but failed joins, certificate renewal, or captive provisioning can dominate energy use if the network path is unreliable.
Pete’s Delivery Slip
- Address: a useful record names what each device class sends, how often it wakes, and which access point serves it.
- Route: overlapping channels create contention even when each access point looks healthy on its own.
- Receipt: measured survey and retry-rate evidence beats a vendor coverage claim every time.
| Record field | Example value | Why it matters | Evidence to keep |
|---|---|---|---|
| Coverage target | -67 dBm RSSI, 25 dB SNR at sensor mount points | Weak signal forces lower modulation, longer airtime, and more retries | Survey heat map and measured client RSSI |
| Channel plan | 2.4 GHz channels 1/6/11 for legacy sensors; 5 GHz for cameras | Overlapping channels create contention even when each AP looks healthy | AP configuration export and spectrum scan |
| Traffic profile | 60 sensors send 2 kB every minute; gateway bursts firmware logs hourly | Small packets still consume contention overhead, acknowledgments, and wake time | Airtime estimate and packet capture sample |
| Security and roaming | WPA2-Enterprise or WPA3, IoT VLAN, sticky-client threshold tested | Authentication delay and roaming behavior can break mobile or sleep-heavy devices | Auth logs, VLAN map, roaming test notes |
| Deployment moment | Checks to perform |
|---|---|
| Before install | Measure noise floor, interference, AP placement, antenna pattern, and expected client density for each coverage zone. |
| During commissioning | Verify association time, DHCP or static addressing, TLS handshake, retry rate, roaming path, and actual upload latency. |
| During operations | Watch airtime utilization, channel changes, retry percentage, deauth events, client MCS rates, and battery drain after firmware updates. |
If average RSSI is acceptable but retry rate or latency is high, treat the issue as capacity, interference, or hidden-node contention instead of adding transmit power first.
The fit record turns selection into operations: it says what to measure after installation, not just what standard to buy.
36.12 OFDMA and TWT Schedule Contention
Wi-Fi 6 improves dense IoT service by giving the access point better tools for scheduling. OFDMA divides a channel into resource units so multiple clients can send in a coordinated transmission window. Target Wake Time lets clients agree on sleep and wake schedules instead of listening constantly.
Those tools do not remove the shared medium. Beacons, probe traffic, acknowledgments, retransmissions, hidden nodes, low modulation rates, and neighboring networks still consume airtime. A slow or distant device can reduce usable capacity because each frame takes longer to deliver.
Classic Wi-Fi access is contention-based. A station listens before transmitting, waits through interframe spacing, chooses a random backoff when the medium is busy, and expects an acknowledgment for unicast frames. If the acknowledgment is missed, the frame is retried at additional airtime cost. This is why retry rate and airtime utilization often explain user-visible stalls better than headline PHY rate.
OFDMA changes the scheduling granularity, not the need for planning. In Wi-Fi 6, the access point can divide a channel into resource units and coordinate multiple clients during a transmission opportunity, including trigger-based uplink traffic when clients and the AP support it. That helps dense small-packet workloads, but it depends on compatible clients, firmware behavior, AP scheduler policy, channel conditions, and whether the traffic arrives in patterns the scheduler can combine.
Target Wake Time is also a contract. The AP and client agree when the client can wake for service, so the device spends less energy listening between events. It works best when sensor deadlines, AP buffering, beacon/DTIM behavior, IP lease timing, and security renewal all fit the wake plan. If a device wakes outside its agreed window, roams unexpectedly, or must reauthenticate after sleep, the power saving can disappear into repeated join and retry work.
| Mechanism | Where it helps | What still limits it |
|---|---|---|
| OFDMA | Many clients have small packets ready at similar times and the AP can coordinate them efficiently | Client compatibility, AP scheduler policy, channel quality, and traffic burst alignment |
| TWT | Battery clients can sleep between scheduled service windows | Sensor deadlines, buffering limits, beacon/DTIM behavior, IP lease timing, and security renewal |
| Retry control | Airtime stays available for useful payloads instead of repeated failed frames | Interference, weak signal, hidden nodes, motion, and low modulation fallback |
Checkpoint: Operations Contract
You now know:
- A fit record separates coverage, capacity, power, security, provisioning, and operations evidence.
- Good RSSI is not enough; retry rate, airtime utilization, MCS fallback, roaming, and hidden-node behavior can still break service.
- OFDMA and TWT help only when clients, AP scheduling, buffering, wake timing, and traffic bursts line up.
36.13 Summary
Wi-Fi provides high-bandwidth wireless connectivity for IoT, with recent standards specifically designed for IoT applications.
Wi-Fi for IoT:
- 802.11n: General IoT where dual-band support and MIMO are enough.
- 802.11ac: Video and other high-bandwidth devices that benefit from fast 5 GHz links.
- 802.11ah (Wi-Fi HaLow): Long-range sensors that need sub-1 GHz coverage and lower power.
- 802.11ax (Wi-Fi 6): Dense deployments where OFDMA and Target Wake Time improve capacity and battery life.
IoT-Specific Features:
- Wi-Fi HaLow: Sub-1 GHz for 1km range, 8,191 devices/AP, battery-friendly
- Wi-Fi 6: OFDMA for efficient multi-device, TWT for power savings, 8 ms latency
Selection Criteria:
- Range: HaLow for 1km, traditional for 100m
- Power: Wi-Fi 6 TWT or HaLow for battery devices
- Bandwidth: Wi-Fi 5/6 for video, HaLow for sensors
- Density: Wi-Fi 6 OFDMA for many devices
Best Practices:
- Use Wi-Fi 6 for new IoT deployments (TWT, OFDMA)
- Consider HaLow for outdoor/long-range sensors
- Design for 5-10 dB SNR margin in congested environments
- Use 5 GHz where possible to avoid 2.4 GHz congestion
- Plan AP density based on device count and bandwidth needs
36.14 What’s Next?
Continue to Low-Power Networks: 802.15.4, LPWAN, and Cellular to explore IEEE 802.15.4 (Zigbee, Thread), LPWAN technologies (LoRaWAN, Sigfox, NB-IoT), and cellular IoT from 2G to 5G.
| Topic | Chapter | Description |
|---|---|---|
| Low-Power Networks | 802.15.4, LPWAN, and Cellular | IEEE 802.15.4, Zigbee, LoRaWAN, Sigfox, NB-IoT, and 5G cellular IoT options compared |
| Wired Network Access | Ethernet for IoT | Ethernet standards, PoE, industrial Ethernet and how wired compares to Wi-Fi for fixed IoT |
| Network Access Overview | Network Access and Physical Layer | Physical layer fundamentals, modulation, and the role of the access layer in IoT stacks |
| Bluetooth and BLE | Bluetooth Overview | BLE’s role alongside Wi-Fi: short-range, ultra-low-power personal area networking |
| Protocol Integration | Protocol Bridging | How Wi-Fi gateways bridge BLE, Zigbee, and Z-Wave devices to IP-based cloud platforms |
| Network Security | Threat Modeling Fundamentals | Securing Wi-Fi IoT deployments: WPA3, certificate-based authentication, and network segmentation |
