The Networking Introduction called an access point “a switch port without the cable” and moved on. This guide covers what replaces the cable: radio. You'll see what the 2.4, 5 and 6 GHz bands trade off, why your neighbours' Wi-Fi slows yours down, what the signal number means, and why a 1,200 Mbps connection gives you 400. It also covers how your phone joins a network without ever sending the password, and which security setting to pick. Every step has a command that shows the idea on your own Wi-Fi.
Everything from the Introduction still applies. Your laptop on Wi-Fi sends the same packets, with the same MAC and IP addresses, to the same default gateway as a laptop on a cable. The only difference is the bottom layer: instead of electrical pulses on copper, the bits travel as radio waves to an access point, which passes them onto the wired network.
Two names to know:
HomeNet. The access point broadcasts it in a small beacon about ten times a second, which is how your phone knows the network is there.netsh wlan show interfaces
Mac: hold Option and click the Wi-Fi icon in the menu bar. The grey details under your network show the same things: PHY Mode, BSSID, Channel, Security, RSSI (signal), Noise and Tx Rate.
nmcli dev wifi list
Keep this output open; every step below explains one or two of its lines. Notice the Linux example: HomeNet appears twice, with BSSIDs one digit apart. That's the same router's two radios, one on channel 36 (5 GHz) and one on channel 6 (2.4 GHz), both announcing the same name.
Recent Windows 11 versions treat the list of nearby Wi-Fi networks as location data, so netsh wlan may refuse and point you at your privacy settings. Turn on Settings → Privacy & security → Location → Let desktop apps access your location, run the command, and turn it off again afterwards if you like.
Wi-Fi uses three slices of the radio spectrum, called bands, named after their frequency: 2.4 GHz, 5 GHz and 6 GHz. The physics comes down to one trade-off. Lower frequencies travel further and pass through walls better. Higher frequencies can carry more data but fade faster, especially through walls, floors and people.
| 2.4 GHz | 5 GHz | 6 GHz | |
|---|---|---|---|
| Range | best | medium | shortest |
| Speed | lowest | high | highest |
| Crowding | very crowded: neighbours, Bluetooth, microwaves, baby monitors | less crowded | nearly empty, for now |
| Usable channels that don't overlap | 3 | many (about 25 at 20 MHz in the US) | many (up to 59 at 20 MHz, depending on country) |
| Devices that can use it | everything | most devices from the last decade | only Wi-Fi 6E and Wi-Fi 7 devices |
Most routers run 2.4 and 5 GHz at the same time, often under one name, and let each device pick (band steering). Rule of thumb: use 5 GHz when you're in the same room or next door, and 2.4 GHz for the far bedroom, the garden, and cheap smart-home gadgets, many of which only speak 2.4. Look at the Band or Channel line from Step 01 to see which one you're on now. Channels 1–14 are 2.4 GHz and 36 and up are 5 GHz. 6 GHz channels restart from 1, so on 6E hardware check the band line.
A friend's phone shows full bars on 2.4 GHz in the garden but can't hold a 5 GHz connection there. Why would the network be built with a “worse” band at all?
Think of a bass drum and a piccolo. You can hear the bass drum through the wall from next door, but it can't play a fast tune. The piccolo can play very fast, but step into the next room and it's gone. 2.4 GHz is the bass drum: slow, but it gets everywhere. 5 and 6 GHz are the piccolo: fast, but only if you're close. A good network uses both. The fast band covers the rooms where people stream and work, and the slow band makes sure the garden, the garage and the smart doorbell still get something.
Each band is divided into channels, like lanes on a motorway. Two networks on the same channel have to take turns, and two networks on overlapping channels garble each other. In the 2.4 GHz band this is a real problem, because the channels were laid out before anyone expected every flat to have a router:
So the 2.4 GHz band really only has three clean lanes: 1, 6 and 11. (Europe and much of the world also allow 12 and 13; the 1/6/11 rule still works everywhere.) If your neighbour is on 6 and you're on 6, you share the lane politely. If you're on 4, you overlap both 1 and 6 and make things worse for everyone, including yourself.
The 5 GHz band has far more room: dozens of non-overlapping 20 MHz channels, from 36 upward. Routers usually bond several together into one wider channel (40, 80 or 160 MHz) to go faster. A wider channel is like a wider lane: more speed, but fewer lanes to share around the neighbourhood. Some 5 GHz channels are shared with weather and aviation radar (DFS channels), and a router must jump off them if it detects radar, which you may notice as a brief dropout.
netsh wlan show networks mode=bssid
On Linux, the nmcli dev wifi list from Step 01 already has a CHAN column; on a Mac, hold Option and click Wi-Fi, then choose Open Wireless Diagnostics → Window → Scan. Count how many networks sit on each 2.4 GHz channel. In a block of flats it can be twenty or more. If your router is on a busy 2.4 GHz channel, set it to whichever of 1, 6 or 11 is quietest, or leave it on Auto, which on modern routers usually does this for you.
The bars on your phone are a rough summary of a number engineers measure in dBm: decibels relative to one milliwatt. Wi-Fi signals are tiny, far less than a milliwatt, so the numbers are negative, and closer to zero is stronger. −45 is a great signal; −85 is barely there.
Where to find it: on a Mac it's the RSSI line in the Option-click menu. On Linux, iw dev shows your interface name, then iw dev wlan0 link (with your name in place of wlan0) prints signal: -54 dBm. Windows shows a percentage instead; as a rough guide, 100% is about −50 dBm or better and 50% is about −75.
Run the command once next to the router, once in the next room, and once as far away as you can get, and write down the signal each time. On a Mac or Linux, where you get real dBm, you'll typically see each wall cost anywhere from 3 dB (plasterboard) to 15 dB or more (brick, concrete). Also note how the receive rate from Step 01 falls with it. That's the next step.
Your Receive rate of 1,201 Mbps is the link rate: how fast the bits are sent while your device is actually talking. It is not how fast your downloads go. Three things eat into it:
In practice, real throughput is often around half the link rate on a good day, and less when the channel is busy. Newer standards (Wi-Fi 6 and later) soften this by letting the access point talk to several devices in one turn, but the basic rule stands: the air is shared.
Run the site's Boz Bandwidth test next to the router, then again from the far room, and compare each result with the receive rate netsh or your Mac showed at that spot. The gap between the two is the cost of sharing the air. If your Internet plan is slower than your Wi-Fi, the test measures the plan instead, which is useful to know too.
Your laptop says it's connected at 1,201 Mbps, but a speed test gives 450. Your friend thinks the router is lying. Explain where the rest went.
Wi-Fi is a room full of people with one microphone. 1,201 is how fast you speak when you're holding it. But you have to wait until nobody else is talking, including the neighbours on the same channel, and after every sentence the listener has to say “got it” before you continue. If someone at the back is speaking very slowly, everyone waits for them too. So your talking speed is 1,201, but what you actually get said per minute is much less. The router isn't lying; it's reporting your talking speed, not your share of the microphone.
When you pick a network and type the password, four things happen in about a second. The clever part is step 3: your device proves it knows the password without ever sending it.
That message means steps 1–3 worked: the Wi-Fi part is fine. Something after it failed. Run ipconfig. If the address starts with 169.254., step 4 failed and DHCP never answered. If you have a normal address, ping the default gateway, then ping 1.1.1.1, then nslookup a name. Whichever fails first is your problem, and none of them are Wi-Fi.
A cable only reaches the people in the building. Radio reaches the car park. Wi-Fi security exists so that people nearby can't join your network or read what you send. Here are the options your router will offer, from worst to best:
| Setting | Verdict | Why |
|---|---|---|
| Open | only for guests, if at all | No password and no encryption: anyone nearby can join, and can see any traffic that isn't separately encrypted. |
| WEP | never | Broken since the early 2000s; cracked in minutes. |
| WPA (TKIP) | never | A stopgap for WEP hardware. Weak, and deprecated. |
| WPA2-Personal (AES) | acceptable | Strong encryption, but someone who records one handshake can try password guesses offline at huge speed. A long password is essential. |
| WPA2/WPA3 transition | good default | New devices use WPA3; old ones still connect with WPA2. |
| WPA3-Personal (SAE) | best at home | Every password guess needs a live exchange with the access point, so offline guessing doesn't work. Required on 6 GHz. |
| WPA2/WPA3-Enterprise | businesses | Each person logs in with their own username and password or certificate, checked by a server (802.1X). Remove one person without changing everyone's password. |
Three more settings worth a minute:
P@ssw0rd1, and easier to type on a TV.On an open café network, other people nearby can see which sites you connect to. The padlock in your browser (HTTPS) still keeps the contents private, so banking is safe on any site that shows it. What the open network exposes is everything that isn't HTTPS, and it lets anyone set up a fake network with the same name. When in doubt, use your phone's hotspot.
Both WPA2 and WPA3 use strong encryption. So why is WPA3 safer when the password is short?
With WPA2, the handshake works like a locked box sent through the air: anyone who records it can take the box home and try a billion keys an hour on their own computer, and nobody ever knows. With WPA3, there's no box to take home. Every guess has to be tried live against your access point, one at a time, like a burglar who has to walk up and try each key in your actual front door. A short password that would fall in an afternoon of offline guessing becomes impractical to guess when every attempt means knocking on the door.
Wi-Fi standards are named by the IEEE as 802.11 plus letters, which nobody could remember, so the Wi-Fi Alliance added plain numbers in 2018. Your Radio type line from Step 01 is the letters version:
| Name | Standard | From | Bands | What it added |
|---|---|---|---|---|
| Wi-Fi 4 | 802.11n | 2009 | 2.4 & 5 | multiple antennas (MIMO); the first “fast” Wi-Fi |
| Wi-Fi 5 | 802.11ac | 2013 | 5 | wider channels on 5 GHz, much faster |
| Wi-Fi 6 | 802.11ax | 2019 | 2.4 & 5 | serving many devices at once in busy places |
| Wi-Fi 6E | 802.11ax | 2021 | 2.4, 5 & 6 | the new, empty 6 GHz band |
| Wi-Fi 7 | 802.11be | 2024 | 2.4, 5 & 6 | 320 MHz channels; using several bands at once |
Every generation connects to every older one at the older one's speed. The headline maximums on the box (“9.6 Gbps!”) add up every antenna on every band under perfect conditions; a single laptop never sees them. The real-world gains come from the extra room and the better handling of crowds, which is why a Wi-Fi 6 router still helps an older laptop in a busy house.
Nearly every Wi-Fi complaint comes down to distance, walls, or a crowded channel. In order of how much they help:
| Symptom | Most likely cause |
|---|---|
| Fast next to the router, slow two rooms away | Weak signal: check dBm. Move the router, or add a wired or mesh access point. |
| Slow everywhere in the evenings | A crowded channel, or your Internet plan itself: run a speed test on a cable to tell them apart. |
| A smart plug can't find the network | It only supports 2.4 GHz. Make sure 2.4 is on, or give it the guest network. |
| “Connected, no Internet” | Not Wi-Fi: see the callout in Step 06. |
| Drops for a few seconds, then comes back | The router left a DFS channel because of radar, or the device roamed between access points. Pick a non-DFS 5 GHz channel (36–48) to test. |
Someone plugs a Wi-Fi extender in halfway to their bedroom. The signal bars in the bedroom go up, but the speed goes down. How is that possible?
A simple extender has one radio, and it's a relay runner on a single track. Every packet goes from the router to the extender, and then the extender repeats it to your laptop, on the same channel. Only one can talk at a time, so every packet now uses the air twice. The bars go up because the extender is closer, but the channel is carrying everything twice, so you get roughly half. Mesh systems avoid this with a separate radio, or better still a cable, for the router-to-extender leg, so the relay runs on its own track.
| Term | In one line |
|---|---|
| Access point (AP) | The radio that bridges Wi-Fi devices onto the wired network. |
| SSID | The network name, announced in beacons. |
| BSSID | The MAC address of one access point's radio. |
| Band | 2.4, 5 or 6 GHz: range compared with speed. |
| Channel | One lane within a band. In 2.4 GHz, use 1, 6 or 11. |
| Channel width | 20 to 320 MHz. Wider is faster but leaves fewer lanes. |
| dBm / RSSI | Signal strength. Negative; closer to zero is stronger; −67 is the minimum for calls. |
| Link rate | Talking speed while transmitting, not your share of the air. |
| CSMA/CA | “Listen before you talk”: one transmitter per channel at a time. |
| 4-way handshake | Proves both sides know the password and makes fresh keys without sending it. |
| WPA2 / WPA3 | Wi-Fi security. WPA3 stops offline password guessing. |
| Mesh | Several access points acting as one network, ideally joined by cable. |
802.11ax / Wi-Fi 6 | The generation name, in letters and in numbers. |
Wi-Fi is the bottom layer: radio in place of copper. Everything above it is what the first two guides covered, and what the router guides let you build by hand.
The guest network from Step 07 is a subnet. Learn how to plan one, and how to cut one network into several.
Build the wired side yourself: addresses, DHCP, NAT and VLANs on a real router. Access points plug into the switch in the lab build.