TechKnowSurge
Cisco CCNA 1.11 CompTIA Network+ 2.3 Cisco CCST Networking 3.2 Cisco CCNA 5.9 Cisco CCNA 5.10 CompTIA A+ Core 2 2.2 Cisco CCST Cybersecurity 2.4
VideoNetworkFree

Wireless

Wireless LANs operate at Layer 2 using access points that function similarly to hubs, introducing collision management, network identification, and encryption as core considerations. This content covers CSMA/CA, SSIDs, and the critical need to secure wireless traffic against interception.

Complete this video to capture a CTF flag worth 1 point.

About this video

Wireless networking operates at Layer 2 of the OSI model and, while it shares concepts like MAC addresses with Ethernet, its behavior differs in significant ways. A wireless access point serves as the central communication hub for all connected devices, meaning traffic cannot flow directly between clients — every transmission passes through the access point. Because the access point functions like a hub rather than a switch, only one device can transmit at a time, and performance degrades as more devices compete for airtime. Devices operating at slower speeds or greater distances from the access point can drag down throughput for the entire network, since faster devices must wait until slower transmissions complete. To manage the inherent collision risk of a shared wireless medium, wireless LANs use Carrier Sense Multiple Access with Collision Avoidance, or CSMA/CA. Before transmitting, a device listens to confirm the channel is idle and then announces its intent to send. If a collision does occur, both affected devices wait a random backoff interval before reattempting, reducing the chance of repeated collisions. Each access point also broadcasts a Service Set Identifier, or SSID, which is the network name visible when scanning for available connections. A single access point can broadcast multiple SSIDs, allowing it to serve different logical networks simultaneously. Because wireless signals propagate outward in all directions, any device within range can receive and read that traffic. This broadcast nature makes wireless networks inherently more exposed than wired connections, where traffic travels along a physical path between specific endpoints. Encrypting all traffic between clients and the access point is therefore a fundamental security requirement, not an optional enhancement. Unencrypted wireless traffic exposes credentials, session data, and any other sensitive information to passive interception by anyone in the vicinity, making strong encryption the primary safeguard for wireless LAN deployments.

What you'll learn

What's covered

Wireless LANs Overview

Aligned to

Cisco CCNA
1.11 Describe wireless principles
5.9 Describe wireless security protocols
5.10 Configure and verify WLAN within the GUI using WPA2 PSK
CompTIA Network+
2.3 Given a scenario, select and configure wireless devices and technologies.
Cisco CCST Networking
3.2 Differentiate between Wi-Fi, cellular, and wired network technologies
CompTIA A+ Core 2
2.2 Compare and contrast wireless security protocols and authentication methods.
Cisco CCST Cybersecurity
2.4 Set up a secure wireless SoHo network

Key terms

Carrier Sense Multiple Access with Collision Avoidance
CSMA/CA
A network access method used in wireless half-duplex environments where devices listen before transmitting and announce intent to transmit in order to avoid collisions before they occur.
Wireless Access Point
WAP
A device that allows wireless devices to connect to a wired network using Wi-Fi.
Media Access Control
MAC
A sublayer of the Data Link layer that controls how devices on a network gain access to a medium and transmit data.
Service Set Identifier
SSID
The network name broadcast by a wireless access point that clients use to identify and connect to a specific Wi-Fi network. SSIDs can be up to 32 characters long and are transmitted in beacon frames; networks may be configured to suppress SSID broadcasting for limited obscurity.
Encryption
The process of converting readable data into an unreadable format using an algorithm and key to prevent unauthorized access.
Collision Domain
A network segment where data packets can collide with each other when transmitted simultaneously.

Transcript

Wireless as a Layer 2 Technology

Wireless is also a layer 2 technology that's commonly used. It is different than Ethernet. It still uses things like MAC addresses, but it operates a little differently.

Wireless LANs use some sort of access point to communicate. Devices talk directly to this access point, and then communication could happen through the access point to these different devices. And so now we have a wireless LAN, where devices are connected all through a LAN using this wireless access point.

Because it has to go through all the same access point, and this access point is limited in the amount of transceivers it has, it acts more as a hub. So for every connection it makes, or when it's talking to a device, other devices can't talk at that same time, and so it acts more as a hub.

What's even worse is sometimes this device right here, as it's communicating to this device, this device might be on the clear on the other end and not hear that this device is communicating. So there can be some issues where two devices are trying to talk at the same time and cause this interruption.

And the further a machine gets out from that area — because there's a very limited range that wireless has — the further this device goes out, the more problems it causes with the other device. So if this device is talking at maybe 1 megabit per second, even if this machine had a 300 megabit per second connection to this wireless access point, it would have to stop and wait for this device before it could communicate, because this device is talking at 1 megabit per second.

So wireless is not always the ideal way to set up, but it sure is convenient. It allows us to have just a single access point and then be able to, without connecting into anything, use our equipment anywhere we go within our buildings. And so wireless access is really commonly used. It has some drawbacks.

CSMA/CA

Now, as we mentioned, this acts as a hub, so multiple devices could talk at the same time. So what do they use? They use carrier sense multiple access. There are multiple devices accessing this, and it's going to sense to see if anybody else is talking. And then what it's going to do is announce that I am going to talk before it tries to communicate. So it will send out a message before it tries to communicate, letting others know that it's going to talk, and then provided that there's no collision with that, then it will talk. So all the communication can happen with these different devices, while trying to limit the amount of collisions that happen.

Of course, there's still going to be collisions. If there is a collision, there's going to be some sort of backoff algorithm that happens between the two devices that had the collision. They'll both wait a random amount of time, and one will try to start communicating before another because it waits for a random amount of time to communicate. So wireless uses CSMA/CA to facilitate that communication.

SSIDs

An access point will have some sort of SSID, or service set identifier, or an access point could actually have multiple SSIDs. What it is is something that gets broadcasted out that says I'm available and this is the name. So it's essentially the name of the wireless connection. So this could get broadcasted out that this is — we'll just call this AP access.

And then when you get onto your device and you look or scan for what networks are out there, then it will come up with the name of a network. Well, that name of that network is the SSID, or service set identifier.

Encryption

Now, one of the problems with wireless access points and wireless LANs is that everything gets broadcasted out, so everybody can see everybody's traffic. There isn't really a way you can put something in a direction. You can put signal in a direction the best you can, but anybody that's in that vicinity will be able to read that data and take a look at that data. So the reason for that is, since it's being broadcasted out all around the device and not just in a single direction, you need to somehow implement some sort of security.

So more so than any other communication, you need to have your wireless access point secure, and you need to take your wireless networks and make sure that they are encrypted. So there are lots of different ways to implement this security, but the key to this is you need to encrypt that information that's going from your clients to your access point. Otherwise, anybody will be able to see that traffic, and if there's some sort of sensitive information that's going across those lines, then any of those devices are going to be able to see that traffic and be able to take a look and see what's happening. Especially if usernames or passwords are going across in clear text, that could be a real problem there. So yeah, encrypt your wireless LAN traffic.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →