← All coursesBack to the simulator →

Wireless in practice

Wi-Fi from the ground up: joining, bands and channels, Wi-Fi generations, coverage and roaming, mesh vs repeater, antennas and MIMO, and a peek at security (WPA2/WPA3, guest) – all hands-on in the simulator. Deep security has its own Course 12.

This is a text preview of the lessons for reading. The full version – an interactive simulator with animations, exercises and quizzes – runs in the app.

▶ Launch the interactive version

Lesson 1: Why wireless

A network without cables

NBMOBAP1AP2RINTERNET

You sit on the couch with a laptop, your phone is in your pocket, and both are online – without a single cable. It is so ordinary that nobody notices the magic anymore. Yet everything from the previous courses (addresses, DHCP, DNS, routing) still applies here – only the medium changed: instead of copper and fiber, data flies through the air as radio waves. Why do we want it? For mobility (a phone on a cable makes no sense), for devices with no port (a tablet, a smart bulb, a sensor) and for places where you cannot run a cable (a rented flat, a historic building, the garden). In this course we will see how Wi-Fi really works – and what you pay for the convenience. And you can try everything live in the simulator, which does wireless for real.

Step by step

  1. The laptop talks to the AP through the air – the dashed line is a radio link, no cable.
  2. A phone cannot do it any other way: it has no port. Mobility = the main reason wireless exists.
  3. Past the AP the packet rides a cable as always: router, internet. Only the first hop’s medium changed.

The air is a shared medium

NBMOBAP1AP2RINTERNETcollision: two at once

A cable has one huge advantage you only notice once you lose it: it is yours alone. The air is not – the air is a shared medium, one common ‘ether’ for everyone around. When two transmit at once on the same channel, the signals mix and nobody understands anything. So Wi-Fi works like a polite meeting: only one transmits at a time, the others wait. The mechanism is called CSMA/CA – Collision Avoidance: a device first listens whether the air is free, and only then (after a random pause) transmits. Note it is not the CSMA/CD of historic wired networks – there collisions were detected after the crash; in the air you cannot even hear your own collision (your own transmission drowns out your receiver; on a cable a crash shows up as a voltage swing), so you must avoid it up front. And one more trap of the shared air: the hidden node. Two clients at opposite edges of the range both hear the AP but cannot hear each other – so when they listen, the air seems free, they transmit at once and the frames collide at the AP. A polite arrangement helps: RTS/CTS – the client first briefly asks the AP for the floor and the AP answers ‘go ahead’ – and the other client hears that answer too, so it stays quiet. And one more tax: Wi-Fi is half-duplex – at any moment a device either transmits or receives, never both.

Step by step

  1. Two transmit at once on the same channel → the signals mix, the AP understands nothing.
  2. CSMA/CA: listen first. The air is taken by the laptop → the phone waits. Only one talks at a time.
  3. The air freed up → after a random pause the phone transmits. It avoided the collision up front (CA, not CD).
  4. And everyone is half-duplex: I either talk or listen. That is why Wi-Fi speed is shared by all.

What wireless costs you

NBMOBAP1AP2RINTERNET1 air ÷ everyone

Wireless is not free – you pay three taxes, and it is fair to know them before you start tuning Wi-Fi. (1) Shared speed: the ‘300 Mbps on the box’ is the speed of the whole air, split among all connected devices – and they talk one at a time. Ten devices = a fraction each. (2) Interference and range: the signal fades with distance and walls, and the microwave, the neighbors’ networks and Bluetooth all talk into the band. A cable does a stable 1 Gbps on Monday and on Friday; Wi-Fi does ‘it depends’. (3) Security: a radio signal does not stop at your wall – it spills into the hallway, the street and the parking lot (so-called signal bleeding). An attacker does not need to enter the building: they sit in a car outside. Anyone in range can listen, which is why Wi-Fi needs encryption (all of lesson 3). The practitioner’s takeaway: whatever can be wired (a server, a desktop, the TV next to the router), put on a cable; save the air for the devices that move.

Step by step

  1. Tax 1: the air’s speed is one and it is shared. More devices, less for each.
  2. Tax 2: the signal fades through walls and distance and the surroundings interfere. Cable is stable, air ‘depends’.
  3. Tax 3: radio waves do not stop at your wall. Anyone in range can listen → encryption is a must (lesson 3).
  4. The practitioner’s rule: wire whatever can be wired. Save the air for what moves.

▶ Open in the simulator

Lesson 2: AP, SSID and joining

The AP: a bridge into the wired network

NBMOBAP1AP2RINTERNETa frame by air

Who actually ‘makes’ the wireless network? The access point (AP). From the ISO/OSI course you know it is a Layer 2 device – it works as a bridge between air and cable: a frame arriving by radio gets translated to Ethernet and forwarded into the wired network (and back). An AP does not split the network like a router – Wi-Fi clients are on the same network as their wired colleagues, get an address from the same DHCP and use the same gateway. You recognize the network an AP broadcasts by its SSID – the name you see in the list of networks. And here is the key practical point: an SSID is just a label mapped to a specific network/VLAN. One AP can happily broadcast several SSIDs, each leading into a different network – exactly what the simulator does: on an AP you configure SSID → network / VLAN.

Step by step

  1. A frame from the phone arrives at the AP by radio. The AP is a Layer 2 device – it works with frames.
  2. The AP bridges it onto the cable (Ethernet) and forwards it. It does not split the network – the client shares the wired network.
  3. The AP announces itself by SSID. One AP can broadcast several SSIDs – each mapped to a different segment/VLAN (just like the simulator).

How a client joins

NBMOBAP1AP2RINTERNETbeacon: ‘I am Home’

You tap the network name, type the password, you are online – what really happened? Four steps. (1) Scan: the AP regularly broadcasts beacons (‘I am here, my name is Home’); your phone listens to them and builds that list of networks from them. (2) Association: the client picks an AP and agrees on the link parameters – ‘I choose you, this is how we will talk’. (3) Authentication: it proves it may enter – typically with a password (WPA2/WPA3, details in lesson 3). (4) Only now comes the old friend from Course 1: DHCP asks for an address, gateway and DNS – from the network’s view the client is ‘plugged into the socket’, only the socket is air. Try exactly this in the simulator: the ‘Connect to Wi-Fi’ task – double-click a host and Connect to Wi-Fi.

Step by step

  1. 1. Scan: the AP broadcasts beacons with its SSID. The phone listens and builds the network list from them.
  2. 2. Association: the client picks the AP and agrees with it on the link parameters.
  3. 3. Authentication: the client proves with the password it may enter. Without it the AP forwards nothing.
  4. 4. DHCP: only now does the client ask for an IP, gateway and DNS – as you know from Course 1. Try it in the ‘Connect to Wi-Fi’ task (double-click a host → Connect to Wi-Fi).

Bands: 2.4 vs 5 vs 6 GHz

NBMOBAP1AP2RINTERNET2.4 GHz: far, through walls, slow

Wi-Fi does not transmit ‘on one frequency’ – it uses several bands, each with its own character. 2.4 GHz is the veteran: it has the longest range and passes through walls best, but it is slower and above all crowded – everyone transmits in it, including the microwave and Bluetooth. 5 GHz is faster and has more room (more channels), but the signal has a shorter range and struggles with obstacles. Some 5 GHz channels are also shared with weather and military radars, so an AP there must support DFS (Dynamic Frequency Selection): it listens for a while before transmitting, and the moment it hears a radar it must leave the channel immediately – which shows up as a short ‘mysterious’ Wi-Fi outage. That is why some APs avoid DFS channels altogether (and why those channels tend to be less crowded). The newest 6 GHz (Wi-Fi 6E/7) adds more clean space without the crowd – at the cost of the shortest range of all. Remember it as simple physics: lower frequency = farther and through walls, higher frequency = faster but closer. Modern routers transmit in several bands at once and the device picks; the basement and the garden usually end up on 2.4 GHz, the TV two meters from the router flies on 5/6 GHz.

Step by step

  1. 2.4 GHz: the longest range, gets through walls – but slow and crowded (microwave, BT, neighbors).
  2. 5 GHz: faster, more channels – but shorter range and worse through obstacles.
  3. 6 GHz (Wi-Fi 6E/7): clean space with no crowd, but the shortest range of all.
  4. Physics to remember: a lower frequency travels farther and through walls, a higher one is faster but closer.

Channels and interference

NBMOBAP1AP2RINTERNETchannels = lanes

Each band is divided into channels – think of them as lanes on a road. Two APs on the same channel share the lane (they talk one at a time, see CSMA/CA); two APs on overlapping channels are an even worse combination – they interfere with each other without ‘hearing’ each other, so they cannot take turns. In the crowded 2.4 GHz band this hurts most: there are 13 channels (in Europe; only 11 in the US), but they sit so close together that only three networks fit side by side without overlapping. Hence the classic trio 1, 6 and 11 (which also works where there are only 11 channels); in Europe, with 13 channels, the plan 1, 5, 9, 13 works too – but only if the neighbors stick to it as well. So definitely 1/6/11 (or 1/5/9/13), not 3, 7 and 9. Channels also have a width: 20 MHz is the base, while 40, 80 and 160 MHz are made by gluing neighboring channels together – a wider channel carries more data but takes more room and catches more interference. In 5 and 6 GHz 80 MHz usually pays off; in 2.4 GHz 40 MHz is a bad idea – it eats nearly the whole band, so you overlap with practically every neighbor and do more harm than good. And do not forget the non-Wi-Fi noisemakers: a microwave or Bluetooth ‘shouts’ into 2.4 GHz while respecting no channel at all. In 5 and 6 GHz there are many more channels and they do not overlap – another reason those bands tend to be cleaner and faster.

Step by step

  1. A band is split into channels. APs on the same channel take turns (they hear each other) – sharing the lane.
  2. Worse is an overlap: the APs interfere yet do not ‘hear’ each other, so they cannot even take turns.
  3. In 2.4 GHz only channels 1, 6 and 11 do not overlap. Three neighboring networks belong there.
  4. And beware the non-Wi-Fi noisemakers (microwave, BT) – they respect no channel. 5/6 GHz is cleaner.

Wi-Fi generations: 4, 5, 6, 7

NBMOBAP1AP2RINTERNETWi-Fi 4/5 · 802.11n/ac

On the box you read ‘Wi-Fi 6’ or ‘802.11ax’ – what do those numbers mean? They are generations of the 802.11 standard that gradually add speed and, above all, crowd handling. Roughly: Wi-Fi 4 (802.11n) brought MIMO (more antennas = more parallel streams) and both 2.4 and 5 GHz; Wi-Fi 5 (802.11ac) sped up 5 GHz; Wi-Fi 6 (802.11ax) focused on efficiency in crowded networks (the OFDMA technique serves many clients in one transmission instead of making them queue); Wi-Fi 6E opened the clean 6 GHz; and Wi-Fi 7 (802.11be) goes further still. The key point is that a newer generation is not mainly about ‘a higher benchmark number’ but about more devices at once without stuttering – exactly what a home full of phones, TVs and IoT needs. And remember: the slowest device drags the generation down – an old Wi-Fi 4 client or AP holds the whole network back; and it is all backward compatible, so a new router still serves a ten-year-old print server.

Step by step

  1. Wi-Fi 4 and 5 added MIMO (more antennas, more streams) and fast 5 GHz. The base of today’s speed.
  2. Wi-Fi 6 targets the crowd: OFDMA serves several devices in one transmission instead of a long queue. A home with IoT feels it most.
  3. Wi-Fi 6E/7 open the clean 6 GHz – more room, less interference, the shortest range.
  4. Beware: the slowest device drags the network down. It is all backward compatible, but one old client holds the whole air back.

▶ Open in the simulator

Lesson 3: Securing Wi-Fi

An open network: anyone can listen

NBMOBAP1AP2RINTERNETno encryption

A café, ‘Free WiFi’, no password – all good? Recall what you learned in the first module: a radio signal flies through the air to everyone in range. On an open network (no encryption) that means your frames can be read by anyone sitting nearby with a laptop – no ‘hacking’ needed, just listening. They see whom you talk to, and they read any unencrypted content in full. HTTPS (Course 1) saves you to a large extent: page content is encrypted one layer up. But metadata – where you connect, when and how much – remain visible, and every unencrypted service is completely naked. The second risk: on an open network nobody guarantees that the AP named ‘Free WiFi’ really belongs to the café – an attacker sets up a rogue AP with the same name in a minute. Newer APs support Enhanced Open (OWE): the network still has no password, but the air is encrypted automatically – that kills the neighbor’s eavesdropping, though not the rogue AP. Lesson: open Wi-Fi = a public square. Behave there accordingly.

Step by step

  1. An open network: frames fly through the air unencrypted – to everyone in range.
  2. Anyone nearby reads them – no hacking needed, just listening. They see where you connect.
  3. HTTPS saves the content (encrypts a layer up). But the metadata – where, when, how much – stay visible.
  4. And who guarantees ‘Free WiFi’ belongs to the café? A rogue AP with the same name takes a minute to set up.

WPA2 and WPA3

NBMOBAP1AP2RINTERNETan encrypted frame

The solution is to encrypt the air itself – every frame between the client and the AP. The history is a quick lesson in humility: first came WEP, long broken and dead – if you ever see it, it is a museum find requiring immediate replacement. It was hastily replaced by WPA (a patch over WEP using the TKIP cipher) – also broken and obsolete today, never use it. Today’s standard is WPA2 and the newer WPA3. The home variant is called PSK (pre-shared key): everyone shares one password, from which the encryption keys are derived. The weakness of WPA2-PSK? A weak password. An attacker captures the initial handshake and then tries the password offline with a dictionary – a short password falls in minutes. WPA3 makes this attack much harder (the SAE key exchange – the password cannot be cracked offline) and adds forward secrecy: even if the attacker later obtains the password, previously captured traffic stays unreadable. Practical advice: WPA3 where possible, otherwise WPA2 with a long password – length beats cleverness.

Step by step

  1. WPA2/WPA3 encrypts every frame in the air. A neighbor captures only unreadable noise.
  2. WEP is dead – broken years ago. Wherever you meet it, replace it immediately.
  3. The WPA2-PSK weakness: an attacker captures the handshake and cracks the password offline with a dictionary. A short password falls fast.
  4. WPA3 (SAE) hampers offline cracking and adds forward secrecy. Otherwise: WPA2 + a long password.

Guest SSID and isolation

NBMOBAP1AP2RINTERNETa foreign device on the main network ⚠

A guest arrives and wants Wi-Fi. Handing over the main network password means letting a foreign (possibly infected) device among your own – to the NAS, the printer, the cameras. You actually know the solution from Course 3: segmentation. A modern AP can broadcast a second SSID – a guest network – and this is exactly where it pays off that an SSID is just a label mapped to a network/VLAN: the main SSID leads into the home network, the guest SSID into a separate guest VLAN that may reach only the internet and cannot see your devices. One AP, one air – two separate networks. Add client isolation: guests cannot even see each other. In the simulator you build it literally: on an AP (or a Wi-Fi router) you add a second SSID and map it to the guest segment – then verify by ping that a guest cannot reach the NAS.

Step by step

  1. The main password = the guest is among your devices (NAS, printer, cameras).
  2. The AP broadcasts a second SSID – and each SSID maps to a different VLAN. One air, two networks. You configure exactly this in the simulator (SSID → network / VLAN on the AP/router).
  3. A guest may reach only the internet – the guest VLAN cannot see the home network (Course 3).
  4. And with client isolation guests cannot even see each other. A foreign device = its own bubble.

▶ Open in the simulator

Lesson 4: Coverage, roaming and mesh

One AP isn’t enough

NBMOBAP1AP2RINTERNET

The router is in the living room, but in the bedroom behind two walls ‘it does not work’. A classic. A radio signal fades with distance and every obstacle takes a bite: drywall a little, brick more, reinforced concrete and water (an aquarium, a boiler) the most. From last time you know 2.4 GHz passes walls better than 5 GHz – which is why at the edge of coverage a phone often drops to slow 2.4. And mind the sneaky part: a weak signal does not slow just you. A client at the edge transmits slowly and for a long time, and since the air is shared and only one talks at a time, it delays everyone else on the same AP. The fix is not to boost power forever (power is limited and the signal must travel both ways) but to add another AP closer to where people actually sit. Companies have a whole discipline for this – the site survey: you walk the building with a signal meter (a phone app will do), map the signal strength room by room and place APs and channels by the map. You read the strength as RSSI in dBm – a negative number where closer to zero is better: −50 dBm is excellent, around −67 dBm is the practical threshold for a reliable connection (calls, video), −80 dBm is just a bar on the display. But strength alone is not enough – what matters more is SNR, i.e. how far your signal rises above the surrounding noise. A strong signal in a noisy band is like shouting in a pub; you want a margin of roughly 20–25 dB for the transfer to run briskly. How to connect the APs and how a client moves between them – that is the next two modules.

Step by step

  1. Close to the AP: a strong signal, full speed. No problem yet.
  2. Behind walls the signal fades (reinforced concrete and water worst; 2.4 GHz passes better than 5). The transfer crawls.
  3. The sneaky part: a slow client transmits for long – and on the shared air it delays everyone on the AP.
  4. The fix is not ‘more power’ but another AP closer to the people. How to connect them → next modules.

Roaming between APs

NBMOBAP1AP2RINTERNETAP1 and AP2: the same SSID

You have two APs – one in the living room, one upstairs. How does the phone ‘switch’ between them as you walk the stairs? The key trick: both APs broadcast the same SSID (with the same password), so from the phone’s view it is one network. The switching decision is made by the client itself: it keeps measuring signal strength, and when the current AP weakens while it ‘hears’ a stronger one elsewhere, it reconnects – that is called roaming. A well-built network does it fast enough that a call or video never drops. Because both APs bridge into the same network, the client keeps the same IP – only the ‘air’ its frames fly through changed. The client can be helped with the decision, and three amendments exist for that: with 802.11k the AP sends it a list of neighboring APs (no blind scanning), 802.11v can suggest it move elsewhere (or politely nudge it off a congested AP) and 802.11r speeds up the switch itself by not redoing the whole password handshake – crucial for calls. A related trick is band steering: the AP deliberately answers reluctantly on 2.4 GHz so that a device capable of 5 GHz ends up in the faster band. In the simulator roaming is live: in the ‘Wi-Fi roaming and mesh (demo)’ task, drag the phone across the canvas and watch the dashed link re-home to the nearer AP by itself.

Step by step

  1. Both APs broadcast the same SSID with the same password → to the client it is one network.
  2. The phone sits on AP2 – a strong signal, all fine. Meanwhile it keeps measuring what it hears around.
  3. You walk away: AP2 fades, AP1 sounds stronger. The decision is the client’s alone.
  4. Roaming: the phone re-homes to AP1 – same network, same IP. Try it live in the ‘Wi-Fi roaming and mesh (demo)’ task: drag the phone across the canvas.

Mesh vs repeater

NBMOBAP1AP2RINTERNETcable = no compromise

Adding an AP is easy as long as a cable runs to it – that is always the best option (full speed, no compromises). What if you cannot run a cable? Two wireless options, and the difference matters. A repeater is a simple parrot: whatever it hears, it repeats on the same channel. But that occupies the air twice – once receiving from the client, once relaying to the router – so real throughput drops to roughly half. Mesh is smarter: a cable-less AP builds its own wireless backhaul (a backbone link) to the upstream AP, typically on a dedicated band/radio, so it hurts the client air far less, and more nodes can join a network that finds its own paths. In the simulator you switch both modes right on the AP – and you will see the difference in link cost: a repeater costs 2× (exactly the tax for halving throughput), while a mesh backhaul gets no surcharge at all, because it does not eat the client air.

Step by step

  1. The best uplink for an extra AP is a cable: full speed, the air stays for the clients.
  2. A repeater repeats everything on the same channel → occupies the air twice → it halves throughput.
  3. Mesh: the AP builds its own wireless backhaul, typically on a dedicated band – hurting clients far less.
  4. In the simulator you switch an AP’s uplink to mesh/repeater – a repeater costs 2× (the tax for halved throughput), a mesh backhaul carries no surcharge.

▶ Open in the simulator

Lesson 5: Antennas and MIMO

Antennas and AP placement

NBMOBAP1AP2RINTERNETomni: all around

Where the signal goes is set not just by power but mainly by the antenna. Types: an omnidirectional (omni) radiates all around itself (like candlelight) – the typical home one; a directional one concentrates the signal into a narrow beam one way and comes in several forms – a panel/patch (a room, a corridor), a sector antenna (a wedge, say 90° from a building corner) and a Yagi/dish (a narrow long-range beam for a building-to-building link). An antenna’s strength is given as gain in dBi – a comparison against an imaginary perfect ball that shines equally in every direction (an isotropic radiator). The catch: higher gain adds no energy, it only redistributes it – it flattens the signal ‘doughnut’ sideways at the cost of reach up and down. +3 dBi roughly doubles the power in a given direction but takes it away elsewhere. How ‘wide’ that beam is is called the beamwidth. That is why an AP hangs on the ceiling in the middle of the room, not upright in a corner. And mind the physics: a ceiling AP needs power – PoE solves it (power over the data cable, from the Switch-in-depth course): one Ethernet carries data and current, no socket at the ceiling. Practical rules: put the AP higher and central, away from metal, mirrors and water (a boiler, an aquarium), and confirm the layout with a site survey – by measuring, not guessing.

Step by step

  1. An omni antenna shines all around – ideal in the middle of a room for even coverage.
  2. A directional antenna focuses the signal into a narrow beam – a building link or a long corridor.
  3. Gain (dBi) adds no energy – the total transmit power is fixed (and capped by regulation); the antenna just redistributes it, flattening it sideways at the cost of up/down reach. So put the AP on the ceiling, not upright in a corner.

MIMO, streams and beamforming

NBMOBAP1AP2RINTERNET1×1: one stream

On a router you read ‘AX3000’ or ‘4×4’ – what is that? Newer Wi-Fi can send several data streams at once using multiple antennas; it is called MIMO (Multiple-In, Multiple-Out). The notation 2×2, 3×3, 4×4 means the number of transmit × receive chains (antennas). Each pair handles one spatial stream – the streams do not mix like a collision, because each travels to the receiver along a slightly different path (wall reflections) and a multi-antenna receiver can mathematically untangle them; so 4×4 = up to four streams at once = roughly four times the throughput of one. The catch: the weaker end sets the speed – if the router is 4×4 but the phone is only 2×2, it runs at 2×2 (phones usually have 1–2 antennas for space and battery). Two clever techniques on top: beamforming – the AP aims energy straight at the client instead of all around (like a flashlight rather than a candle), so the signal is stronger at the edge; and MU-MIMO (Multi-User) – the AP talks to several clients at once on different streams instead of making them queue (Wi-Fi 5 did it only toward clients, Wi-Fi 6 both ways and together with OFDMA). The point: the ‘higher number’ on the box is mostly about more devices at once, not a record for one phone.

Step by step

  1. One antenna = one stream. The base MIMO builds on.
  2. MIMO 4×4: more antennas = more spatial streams at once ≈ more throughput. But the weaker end sets it (a phone is often 2×2).
  3. Beamforming: the AP aims energy straight at the client (a flashlight, not a candle) – stronger signal where you read it.
  4. MU-MIMO: the AP talks to several clients at once on different streams – a shorter air queue (Wi-Fi 6 both ways, with OFDMA).

▶ Open in the simulator

Lesson 6: The whole path over wireless

The home all-in-one

NBMOBAP1AP2RINTERNET1 box = 5 roles

By now you can decode the box people call ‘the router’ at home – in reality it is five devices in one. It is a router (routing between the home network and the internet, doing NAT – Course 4), an AP (broadcasting Wi-Fi, happily both the main and a guest SSID), a switch (those four LAN ports on the back), a firewall (making sure nothing walks in uninvited from outside) and a DHCP server (handing out addresses – Course 1). That is why a home network is so easy to set up: one box, one config, everything talks. And that is also why, when ‘the internet is down’, it pays to know which of the five roles is misbehaving – Wi-Fi (AP), addresses (DHCP), translation (NAT), or the line to the provider. In the simulator, the examples include the Home network / homelab topology – open it and try to spot those roles inside the box.

Step by step

  1. The home ‘router’ = router + AP + switch + firewall + DHCP in one box.
  2. The AP role serves the air (guest SSID too), the DHCP role hands out addresses. The LAN ports = the switch role.
  3. Outward the router with NAT role works, and the firewall makes sure nothing walks in uninvited.
  4. Open the Home network / homelab example in the simulator and try to spot the five roles in the box.

From phone to web: the whole path

NBMOBAP1AP2RINTERNETjoined: SSID + password + DHCP

The final ride: you open a website on your phone and we walk the whole path, now with everything you know about wireless. The phone is connected (beacon → association → password → DHCP), the frames in the air ride encrypted with WPA2/WPA3, and the phone honors CSMA/CA – waiting until the air is free. The AP bridges the frame from air to cable (the SSID decided which network/VLAN it belongs to). From there it is pure classics from the previous courses: DNS resolves the name, the router does NAT and sends the packet to the provider, HTTPS protects the content all the way to the server. The reply returns along the same path and the last hop again flies through encrypted air. Notice the main point of this whole course: wireless replaced only the first hop – everything else (addresses, DNS, NAT, routing, encryption) stayed exactly as you learned it. Wi-Fi is not a different network; it is the same network with a different medium.

Step by step

  1. The phone is joined: beacon → association → password → DHCP. It has an address, gateway and DNS.
  2. The request flies through the air encrypted (WPA2/WPA3) and the phone honors CSMA/CA – talking once it is free.
  3. The AP bridges the frame onto the cable – the SSID picked the network/VLAN. From here it is classic Ethernet.
  4. The router does NAT and sends the packet to the internet; DNS already resolved the name, HTTPS protects the content.
  5. The reply returns along the same path. The course’s point: wireless replaced only the first hop – you know the rest.

▶ Open in the simulator