Back to Networking Examples
Networking Basics · Guide 3

How Wi-Fi works

The Networking Introduction called an access point “a switch port without the cable” and moved on. This guide covers what replaces the cable: radio. You'll see what the 2.4, 5 and 6 GHz bands trade off, why your neighbours' Wi-Fi slows yours down, what the signal number means, and why a 1,200 Mbps connection gives you 400. It also covers how your phone joins a network without ever sending the password, and which security setting to pick. Every step has a command that shows the idea on your own Wi-Fi.

The finish line — you'll be able to read every line of this
C:\> netsh wlan show interfaces SSID : HomeNet Radio type : 802.11ax Authentication : WPA3-Personal Band : 5 GHz Channel : 36 Receive rate (Mbps) : 1201 Signal : 88%
Time needed ~50 min · hardware any Wi-Fi device
Wi-Fi feels like magic because you can't see it. The 💡 Explain it simply prompts are placed where a picture in your head beats a spec sheet. Answer each one out loud before revealing it. If you can explain why a Wi-Fi extender can make things slower, you understand Wi-Fi better than most people who sell it.
STEP 01

Wi-Fi is a cable made of radio.

Everything from the Introduction still applies. Your laptop on Wi-Fi sends the same packets, with the same MAC and IP addresses, to the same default gateway as a laptop on a cable. The only difference is the bottom layer: instead of electrical pulses on copper, the bits travel as radio waves to an access point, which passes them onto the wired network.

A laptop, a phone and a tablet connect by radio to an access point, which announces the network name HomeNet about ten times a second. The access point's radio has the hardware address a4:2b:b0:5c:19:e3, its BSSID. One Ethernet cable joins it to the router and switch of the wired network, 192.168.1.x, and on to the Internet. The packets, MAC addresses and IP addresses are the same as on a cable.
The access point is a bridge between radio and cable. Your home router has one built in; offices put separate ones on the ceiling.

Two names to know:

  • SSID (service set identifier): the network name you pick from the list, like HomeNet. The access point broadcasts it in a small beacon about ten times a second, which is how your phone knows the network is there.
  • BSSID: the MAC address of one access point's radio. One SSID can have many BSSIDs. A house with a mesh system, or an office with twenty ceiling access points, shows one network name, but every radio has its own BSSID, and your device picks one.

See yours

Windows — PowerShell
netsh wlan show interfaces
Name : Wi-Fi State : connected SSID : HomeNet BSSID : a4:2b:b0:5c:19:e3 Radio type : 802.11ax Authentication : WPA3-Personal Cipher : CCMP Band : 5 GHz Channel : 36 Receive rate (Mbps) : 1201 Transmit rate (Mbps) : 1201 Signal : 88%

Mac: hold Option and click the Wi-Fi icon in the menu bar. The grey details under your network show the same things: PHY Mode, BSSID, Channel, Security, RSSI (signal), Noise and Tx Rate.

Linux — terminal
nmcli dev wifi list
IN-USE BSSID SSID MODE CHAN RATE SIGNAL BARS SECURITY * A4:2B:B0:5C:19:E3 HomeNet Infra 36 540 Mbit/s 88 ▂▄▆█ WPA3 A4:2B:B0:5C:19:E4 HomeNet Infra 6 130 Mbit/s 74 ▂▄▆_ WPA3 3C:84:6A:10:22:0F Neighbour Infra 11 195 Mbit/s 42 ▂▄__ WPA2

Keep this output open; every step below explains one or two of its lines. Notice the Linux example: HomeNet appears twice, with BSSIDs one digit apart. That's the same router's two radios, one on channel 36 (5 GHz) and one on channel 6 (2.4 GHz), both announcing the same name.

Windows 11 asks for location permission?

Recent Windows 11 versions treat the list of nearby Wi-Fi networks as location data, so netsh wlan may refuse and point you at your privacy settings. Turn on Settings → Privacy & security → Location → Let desktop apps access your location, run the command, and turn it off again afterwards if you like.

STEP 02

Three bands: range or speed.

Wi-Fi uses three slices of the radio spectrum, called bands, named after their frequency: 2.4 GHz, 5 GHz and 6 GHz. The physics comes down to one trade-off. Lower frequencies travel further and pass through walls better. Higher frequencies can carry more data but fade faster, especially through walls, floors and people.

An access point sends three bands through two walls. 2.4 GHz reaches furthest, through both walls, but is slowest and most crowded. 5 GHz reaches through one wall and is much faster. 6 GHz is fastest and least crowded but barely gets past the first wall. Lower frequency goes further; higher frequency goes faster.
Each wall costs every band something, but the higher bands lose more of what they have.
2.4 GHz5 GHz6 GHz
Rangebestmediumshortest
Speedlowesthighhighest
Crowdingvery crowded: neighbours, Bluetooth, microwaves, baby monitorsless crowdednearly empty, for now
Usable channels that don't overlap3many (about 25 at 20 MHz in the US)many (up to 59 at 20 MHz, depending on country)
Devices that can use iteverythingmost devices from the last decadeonly Wi-Fi 6E and Wi-Fi 7 devices

Most routers run 2.4 and 5 GHz at the same time, often under one name, and let each device pick (band steering). Rule of thumb: use 5 GHz when you're in the same room or next door, and 2.4 GHz for the far bedroom, the garden, and cheap smart-home gadgets, many of which only speak 2.4. Look at the Band or Channel line from Step 01 to see which one you're on now. Channels 1–14 are 2.4 GHz and 36 and up are 5 GHz. 6 GHz channels restart from 1, so on 6E hardware check the band line.

💡 Explain it simply

A friend's phone shows full bars on 2.4 GHz in the garden but can't hold a 5 GHz connection there. Why would the network be built with a “worse” band at all?

Reveal a plain-language answer

Think of a bass drum and a piccolo. You can hear the bass drum through the wall from next door, but it can't play a fast tune. The piccolo can play very fast, but step into the next room and it's gone. 2.4 GHz is the bass drum: slow, but it gets everywhere. 5 and 6 GHz are the piccolo: fast, but only if you're close. A good network uses both. The fast band covers the rooms where people stream and work, and the slow band makes sure the garden, the garage and the smart doorbell still get something.

STEP 03

Channels, and why your neighbours matter.

Each band is divided into channels, like lanes on a motorway. Two networks on the same channel have to take turns, and two networks on overlapping channels garble each other. In the 2.4 GHz band this is a real problem, because the channels were laid out before anyone expected every flat to have a router:

The 2.4 GHz band drawn to scale from 2,400 to 2,485 MHz. Channels 1 to 11 are 5 MHz apart but each is about 20 MHz wide, so neighbouring channels overlap. Only channels 1, 6 and 11 do not overlap each other.
Channel 3 overlaps 1 and 6. It collides with both and cooperates with neither. Stick to 1, 6 or 11.

So the 2.4 GHz band really only has three clean lanes: 1, 6 and 11. (Europe and much of the world also allow 12 and 13; the 1/6/11 rule still works everywhere.) If your neighbour is on 6 and you're on 6, you share the lane politely. If you're on 4, you overlap both 1 and 6 and make things worse for everyone, including yourself.

The 5 GHz band has far more room: dozens of non-overlapping 20 MHz channels, from 36 upward. Routers usually bond several together into one wider channel (40, 80 or 160 MHz) to go faster. A wider channel is like a wider lane: more speed, but fewer lanes to share around the neighbourhood. Some 5 GHz channels are shared with weather and aviation radar (DFS channels), and a router must jump off them if it detects radar, which you may notice as a brief dropout.

See your neighbours

Windows — every network in range, with channels
netsh wlan show networks mode=bssid

On Linux, the nmcli dev wifi list from Step 01 already has a CHAN column; on a Mac, hold Option and click Wi-Fi, then choose Open Wireless Diagnostics → Window → Scan. Count how many networks sit on each 2.4 GHz channel. In a block of flats it can be twenty or more. If your router is on a busy 2.4 GHz channel, set it to whichever of 1, 6 or 11 is quietest, or leave it on Auto, which on modern routers usually does this for you.

STEP 04

Signal strength: reading dBm.

The bars on your phone are a rough summary of a number engineers measure in dBm: decibels relative to one milliwatt. Wi-Fi signals are tiny, far less than a milliwatt, so the numbers are negative, and closer to zero is stronger. −45 is a great signal; −85 is barely there.

Signal strength from minus 30 dBm, strongest, to minus 90, weakest. Minus 30 to minus 50 is excellent, minus 50 to minus 60 very good, minus 60 to minus 67 good, minus 67 to minus 70 fair, minus 70 to minus 80 weak, and below minus 80 unusable. Minus 67 is the usual minimum for video calls. Every 3 dB lower is half the power; 10 dB lower is a tenth, so minus 70 is a thousand times weaker than minus 40.
The scale is logarithmic. A drop from −50 to −60 isn't “a bit weaker”; it's a tenth of the power.

Where to find it: on a Mac it's the RSSI line in the Option-click menu. On Linux, iw dev shows your interface name, then iw dev wlan0 link (with your name in place of wlan0) prints signal: -54 dBm. Windows shows a percentage instead; as a rough guide, 100% is about −50 dBm or better and 50% is about −75.

Try it: walk the house

Run the command once next to the router, once in the next room, and once as far away as you can get, and write down the signal each time. On a Mac or Linux, where you get real dBm, you'll typically see each wall cost anywhere from 3 dB (plasterboard) to 15 dB or more (brick, concrete). Also note how the receive rate from Step 01 falls with it. That's the next step.

STEP 05

Sharing the air: why 1,201 Mbps isn't 1,201 Mbps.

Your Receive rate of 1,201 Mbps is the link rate: how fast the bits are sent while your device is actually talking. It is not how fast your downloads go. Three things eat into it:

  • Only one device talks at a time. A cable has its own wires for each direction; radio doesn't. On each channel, every device (yours, your family's, and your neighbours' on the same channel) listens first and only transmits when the air is quiet. This is called CSMA/CA, “listen before you talk”. Everyone gets a turn, so everyone shares the speed.
  • Every packet is acknowledged. Radio loses packets far more often than cable, so each one is confirmed and resent if lost. That checking costs time.
  • Slow devices use up airtime. An old phone at the edge of the house might be talking at 20 Mbps. Sending it one packet takes 60 times longer than sending the same packet to your laptop at 1,201, and nobody else can use the channel while that happens.

In practice, real throughput is often around half the link rate on a good day, and less when the channel is busy. Newer standards (Wi-Fi 6 and later) soften this by letting the access point talk to several devices in one turn, but the basic rule stands: the air is shared.

Try it: link rate compared with real speed

Run the site's Boz Bandwidth test next to the router, then again from the far room, and compare each result with the receive rate netsh or your Mac showed at that spot. The gap between the two is the cost of sharing the air. If your Internet plan is slower than your Wi-Fi, the test measures the plan instead, which is useful to know too.

💡 Explain it simply

Your laptop says it's connected at 1,201 Mbps, but a speed test gives 450. Your friend thinks the router is lying. Explain where the rest went.

Reveal a plain-language answer

Wi-Fi is a room full of people with one microphone. 1,201 is how fast you speak when you're holding it. But you have to wait until nobody else is talking, including the neighbours on the same channel, and after every sentence the listener has to say “got it” before you continue. If someone at the back is speaking very slowly, everyone waits for them too. So your talking speed is 1,201, but what you actually get said per minute is much less. The router isn't lying; it's reporting your talking speed, not your share of the microphone.

STEP 06

How a device joins.

When you pick a network and type the password, four things happen in about a second. The clever part is step 3: your device proves it knows the password without ever sending it.

A sequence diagram with three columns: laptop, access point and router. 1, find: the access point sends beacons announcing HomeNet, WPA3, channel 36, and the laptop sends a probe request and gets a response. 2, join: authentication and association request, and the access point replies that the laptop is associated. 3, the four-way handshake: four messages in which both sides exchange random numbers and proof that they know the password, and the access point sends the group key, then encryption is switched on. 4, get an address: DHCP through the access point, and the router replies that the laptop is 192.168.1.23. The password itself is never sent over the air.
Steps 1–3 are Wi-Fi. Step 4 is the same DHCP from the Introduction; after that, Wi-Fi is just the cable.
  1. Find. Your device hears beacons and may ask “is HomeNet here?” with a probe. The beacon says which security the network uses.
  2. Join. The device asks to join (authentication and association) and the access point accepts it. With WPA3, this is also where the password check begins.
  3. The 4-way handshake. Both sides mix the password with fresh random numbers to create encryption keys that are new for this session. Each proves it got the same answer. Anyone listening sees random numbers, never the password.
  4. Get an address. Only now does the device send its DHCP request, and the router hands out an IP address, mask, gateway and DNS server, exactly as in the Introduction's Step 03.
“Connected, no Internet”

That message means steps 1–3 worked: the Wi-Fi part is fine. Something after it failed. Run ipconfig. If the address starts with 169.254., step 4 failed and DHCP never answered. If you have a normal address, ping the default gateway, then ping 1.1.1.1, then nslookup a name. Whichever fails first is your problem, and none of them are Wi-Fi.

STEP 07

Security: which setting to pick.

A cable only reaches the people in the building. Radio reaches the car park. Wi-Fi security exists so that people nearby can't join your network or read what you send. Here are the options your router will offer, from worst to best:

SettingVerdictWhy
Openonly for guests, if at allNo password and no encryption: anyone nearby can join, and can see any traffic that isn't separately encrypted.
WEPneverBroken since the early 2000s; cracked in minutes.
WPA (TKIP)neverA stopgap for WEP hardware. Weak, and deprecated.
WPA2-Personal (AES)acceptableStrong encryption, but someone who records one handshake can try password guesses offline at huge speed. A long password is essential.
WPA2/WPA3 transitiongood defaultNew devices use WPA3; old ones still connect with WPA2.
WPA3-Personal (SAE)best at homeEvery password guess needs a live exchange with the access point, so offline guessing doesn't work. Required on 6 GHz.
WPA2/WPA3-EnterprisebusinessesEach person logs in with their own username and password or certificate, checked by a server (802.1X). Remove one person without changing everyone's password.

Three more settings worth a minute:

  • Password: long beats clever. Four random words is far stronger than P@ssw0rd1, and easier to type on a TV.
  • WPS (the push-button or 8-digit PIN pairing): turn it off. The PIN version in particular can be guessed quickly.
  • Guest network: turn it on for visitors and smart-home gadgets. It's a separate subnet that can reach the Internet but not your laptops. That's the subnetting guide's first reason, security, built into your router.
On public Wi-Fi

On an open café network, other people nearby can see which sites you connect to. The padlock in your browser (HTTPS) still keeps the contents private, so banking is safe on any site that shows it. What the open network exposes is everything that isn't HTTPS, and it lets anyone set up a fake network with the same name. When in doubt, use your phone's hotspot.

💡 Explain it simply

Both WPA2 and WPA3 use strong encryption. So why is WPA3 safer when the password is short?

Reveal a plain-language answer

With WPA2, the handshake works like a locked box sent through the air: anyone who records it can take the box home and try a billion keys an hour on their own computer, and nobody ever knows. With WPA3, there's no box to take home. Every guess has to be tried live against your access point, one at a time, like a burglar who has to walk up and try each key in your actual front door. A short password that would fall in an afternoon of offline guessing becomes impractical to guess when every attempt means knocking on the door.

STEP 08

The generations: Wi-Fi 4 to Wi-Fi 7.

Wi-Fi standards are named by the IEEE as 802.11 plus letters, which nobody could remember, so the Wi-Fi Alliance added plain numbers in 2018. Your Radio type line from Step 01 is the letters version:

NameStandardFromBandsWhat it added
Wi-Fi 4802.11n20092.4 & 5multiple antennas (MIMO); the first “fast” Wi-Fi
Wi-Fi 5802.11ac20135wider channels on 5 GHz, much faster
Wi-Fi 6802.11ax20192.4 & 5serving many devices at once in busy places
Wi-Fi 6E802.11ax20212.4, 5 & 6the new, empty 6 GHz band
Wi-Fi 7802.11be20242.4, 5 & 6320 MHz channels; using several bands at once

Every generation connects to every older one at the older one's speed. The headline maximums on the box (“9.6 Gbps!”) add up every antenna on every band under perfect conditions; a single laptop never sees them. The real-world gains come from the extra room and the better handling of crowds, which is why a Wi-Fi 6 router still helps an older laptop in a busy house.

STEP 09

Making your Wi-Fi better.

Nearly every Wi-Fi complaint comes down to distance, walls, or a crowded channel. In order of how much they help:

  1. Move the router. Central, high, and in the open: not in a cupboard, behind the TV, on the floor, or next to the fish tank. Water, metal, mirrors and brick absorb signal; a microwave in use floods 2.4 GHz.
  2. Use a cable where you can. A desktop, games console or TV that never moves should be wired. It gets a faster, steadier connection and frees airtime for everything that has to be wireless.
  3. Fix the channel. 2.4 GHz on 1, 6 or 11 (whichever is quietest), and let 5 GHz pick automatically.
  4. Add access points the right way. A mesh system, or extra access points connected by cable, covers a big house properly. A cheap plug-in extender is the last resort; see the prompt below.
SymptomMost likely cause
Fast next to the router, slow two rooms awayWeak signal: check dBm. Move the router, or add a wired or mesh access point.
Slow everywhere in the eveningsA crowded channel, or your Internet plan itself: run a speed test on a cable to tell them apart.
A smart plug can't find the networkIt only supports 2.4 GHz. Make sure 2.4 is on, or give it the guest network.
“Connected, no Internet”Not Wi-Fi: see the callout in Step 06.
Drops for a few seconds, then comes backThe router left a DFS channel because of radar, or the device roamed between access points. Pick a non-DFS 5 GHz channel (36–48) to test.
💡 Explain it simply

Someone plugs a Wi-Fi extender in halfway to their bedroom. The signal bars in the bedroom go up, but the speed goes down. How is that possible?

Reveal a plain-language answer

A simple extender has one radio, and it's a relay runner on a single track. Every packet goes from the router to the extender, and then the extender repeats it to your laptop, on the same channel. Only one can talk at a time, so every packet now uses the air twice. The bars go up because the extender is closer, but the channel is carrying everything twice, so you get roughly half. Mesh systems avoid this with a separate radio, or better still a cable, for the router-to-extender leg, so the relay runs on its own track.

STEP 10

The words, and a check.

TermIn one line
Access point (AP)The radio that bridges Wi-Fi devices onto the wired network.
SSIDThe network name, announced in beacons.
BSSIDThe MAC address of one access point's radio.
Band2.4, 5 or 6 GHz: range compared with speed.
ChannelOne lane within a band. In 2.4 GHz, use 1, 6 or 11.
Channel width20 to 320 MHz. Wider is faster but leaves fewer lanes.
dBm / RSSISignal strength. Negative; closer to zero is stronger; −67 is the minimum for calls.
Link rateTalking speed while transmitting, not your share of the air.
CSMA/CA“Listen before you talk”: one transmitter per channel at a time.
4-way handshakeProves both sides know the password and makes fresh keys without sending it.
WPA2 / WPA3Wi-Fi security. WPA3 stops offline password guessing.
MeshSeveral access points acting as one network, ideally joined by cable.
802.11ax / Wi-Fi 6The generation name, in letters and in numbers.

Check yourself

  • You found your SSID, BSSID, band, channel and signal on your own device
  • You can say why 2.4 GHz reaches further but 5 GHz is faster
  • You know why 1, 6 and 11 are the 2.4 GHz channels to use
  • You measured signal in at least three places and saw it fall through walls
  • You compared your link rate with a real speed test and can explain the gap
  • Your own router is on WPA3 or WPA2/WPA3, with WPS off
STEP 11

Where to go next.

Wi-Fi is the bottom layer: radio in place of copper. Everything above it is what the first two guides covered, and what the router guides let you build by hand.

2

Subnetting, by hand

The guest network from Step 07 is a subnet. Learn how to plan one, and how to cut one network into several.

⬢

Cisco 1921 Router Guide

Build the wired side yourself: addresses, DHCP, NAT and VLANs on a real router. Access points plug into the switch in the lab build.