Wireless Networking: Wi-Fi 6, 7 & WPA3

Wireless fails when the access point (AP) sits on a crowded channel, uses a weak passphrase, or advertises the same name as a rogue radio. CompTIA Network+ (N10-009) tests whether you can select the band, the channel plan, the encryption mode, and the AP type before clients join. Domain 2.0 Network Implementation is 20% of the exam. Objective 2.3 is the wireless configuration task.

Official N10-009 language does not print the marketing names “Wi-Fi 6” or “Wi-Fi 7.” It prints 802.11 standards under 1.5 and the frequency options 2.4 GHz, 5 GHz, and 6 GHz under 2.3. Treat those official bullets as the exam map. Fill generation-to-standard rows only from your own notes.

What N10-009 actually names

1.5 Compare and contrast transmission media and transceivers.

Wireless: 802.11 standards, cellular, satellite.

1.2 Compare and contrast networking appliances, applications, and functions.

Wireless: access point (AP), controller.

2.3 Given a scenario, select and configure wireless devices and technologies.

Channels: channel width, non-overlapping channels, regulatory impacts, 802.11h.
Frequency options: 2.4 GHz, 5 GHz, 6 GHz, band steering.
Service set identifier (SSID): basic service set identifier (BSSID), extended service set identifier (ESSID).
Network types: mesh networks, ad hoc, point to point, infrastructure.
Encryption: Wi-Fi Protected Access 2 (WPA2), WPA3.
Guest networks: captive portals.
Authentication: pre-shared key (PSK) versus Enterprise.
Antennas: omnidirectional versus directional.
Autonomous versus lightweight access point.

3.1 lists a wireless survey / heat map as documentation.

4.3 lists rogue devices and services: AP and evil twin.

Domain 5.0 Network Troubleshooting lists wireless symptoms: interference, channel overlap, signal degradation or loss, insufficient wireless coverage, client disassociation issues, roaming misconfiguration. Hardware tools on the objectives include a Wi-Fi analyzer.

Domain weights on the official document: Networking Concepts 23%, Network Implementation 20%, Network Operations 19%, Network Security 14%, Network Troubleshooting 24%.

802.11 standards and the three exam bands

An 802.11 network is a wireless local area network. The Institute of Electrical and Electronics Engineers (IEEE) publishes the 802.11 family. CompTIA groups that family as “802.11 standards” and then forces a band choice.

The AP radio transmits on one of three frequency options on the exam:

2.4 GHz. Longer reach through walls. Fewer clean channels. Crowded with older clients and non-Wi-Fi noise.
5 GHz. Shorter reach. More room for wider channels. Less leftover 2.4 GHz clutter.
6 GHz. The newest band printed on N10-009. Use it only when the AP and the client both support it.

Band steering pushes a dual-band or tri-band client toward the band the AP prefers. The client still has to support that band. Steering does not create 6 GHz support on a 2.4 GHz-only NIC.

Channels, width, and 802.11h

A channel is the slice of a band the AP uses. Channel width is how wide that slice is. A wider channel moves more bits when the air is clean. A wider channel also collides with more neighbors.

Non-overlapping channels are channels that do not share spectrum with each other. The exam asks you to pick a plan that avoids overlap. Overlap is also a Domain 5 symptom: channel overlap.

Regulatory impacts change which channels a country allows. Objective 2.3 names one standard under that bullet: 802.11h.

Walk the floor with a heat map before you lock the plan. Objective 3.1 calls that document a wireless survey / heat map. The map shows where signal exists and where it dies. Domain 5 later tests insufficient wireless coverage and signal degradation or loss.

SSID, BSSID, and ESSID

The service set identifier (SSID) is the network name the client sees.

The basic service set identifier (BSSID) identifies one AP radio. It is the Layer 2 address of that radio.

The extended service set identifier (ESSID) is the shared name across more than one AP. Clients roam between those APs while the name stays the same. Domain 5 tests roaming misconfiguration when that handoff fails.

Hide the SSID only if your design notes say so. Hiding the name does not replace WPA2 or WPA3. N10-009 still expects encryption and authentication on the SSID that users join.

Network types the exam expects you to select

Infrastructure uses an AP. Clients talk through the AP, not straight to each other. This is the default office design.

Ad hoc has no AP. Clients talk peer to peer. The exam still lists it. Do not build a campus on it.

Point to point aims two radios at each other. Use a directional antenna on each end when the path is a bridge, not a room.

Mesh networks let APs forward traffic for each other. Mesh fills a floor when you cannot pull Ethernet to every radio. Mesh still needs a backhaul plan and the same encryption standard as the rest of the WLAN.

WPA2, WPA3, PSK, and Enterprise

Objective 2.3 encryption list is short: Wi-Fi Protected Access 2 (WPA2) and WPA3.

WPA2 is the older of the two names on the exam. WPA3 is the current name on the exam. Do not configure an open SSID for staff traffic.

Authentication on 2.3 is a two-way choice:

Pre-shared key (PSK). Every authorized device uses the same secret. Simple for a small office. A leaked passphrase opens every PSK client.
Enterprise. Each user or device authenticates as itself. Objective 4.3 also lists 802.1X under network access control (NAC). Pair Enterprise Wi-Fi with that access-control model when the scenario is a company WLAN, not a home router.

Change default passwords on the AP. That hardening bullet sits in 4.3 next to “disable unused ports and services.”

Guest networks and captive portals

A guest network keeps visitors off the staff SSID. Objective 4.3 also lists guest under network segmentation enforcement. Put guests in their own segment. Do not hand them the staff PSK.

A captive portal is the web page that intercepts a guest browser before full access. The portal collects an accept-click, a voucher, or a sponsor login. The portal is not a replacement for WPA2 or WPA3 on the staff SSID.

Antennas, autonomous APs, and lightweight APs

An omnidirectional antenna radiates in a wide disk. Ceiling APs in an open office use this pattern.

A directional antenna focuses energy in one direction. Point-to-point links and long hallways use this pattern. Wrong pattern creates the Domain 5 problem “insufficient wireless coverage” in one room and bleed into the next.

An autonomous access point stores its own SSID, channel, and encryption settings. You configure that box directly.

A lightweight access point takes those settings from a controller (objective 1.2). The controller pushes SSIDs, encryption, and band steering to many APs at once. Use lightweight plus a controller when the scenario is many APs and one policy.

Rogue APs and evil twins, without the attack recipe

Objective 4.3 names rogue AP and evil twin under rogue devices and services.

A rogue AP is an access point you did not deploy. Someone plugged it into a wall jack or stood it up on a desk.

An evil twin is an AP that copies a name people already trust. Clients join the copy.

N10-009 asks you to recognize the risk and apply defenses that are already on the blueprint: known SSIDs, WPA2 or WPA3, PSK versus Enterprise, guest segmentation, surveys, and a Wi-Fi analyzer. It does not ask you to build the twin.

When the WLAN breaks

Match the symptom to the Domain 5 list.

Interference and channel overlap — another transmitter sits on your channel or a neighbor’s width covers yours. Recheck the non-overlapping plan. Walk it with a Wi-Fi analyzer.
Signal degradation or loss — walls, distance, or a dead radio. Recheck antenna type and AP placement against the heat map.
Insufficient wireless coverage — the survey never showed signal there, or an AP failed. Add coverage. Do not just raise power and hope.
Client disassociation issues — the AP or the client drops the session. Check encryption match (WPA2 versus WPA3) and whether the client supports the band you steered it toward.
Roaming misconfiguration — ESSID is shared, but the BSSIDs are planned badly. Fix channel reuse and controller roaming settings.

Study the official 2.3 list until you can pick a band, a channel plan, an SSID design, WPA2 or WPA3, PSK or Enterprise, and autonomous or lightweight without guessing. For the full N10-009 study path, use the Network+ hub at https://legacyhaven.university/how-to-pass-comptia-network-n10-009/.