WLAN Configuration

WLAN configuration can be performed on home wireless routers, standalone APs, or centralized wireless LAN controllers. The exact interface varies by vendor, but the core ideas remain the same: configure network addressing, SSID, security, VLAN mapping, and verification.

By the end of this module, you should be able to:

• Identify common home wireless router settings.
• Explain basic wireless setup options.
• Describe NAT, QoS, and port forwarding in small networks.
• Outline WLAN creation on a wireless LAN controller.
• Explain how WPA2-Enterprise uses RADIUS.
• Troubleshoot common wireless connection and performance problems.

A home or small-office router is usually configured through a web interface. Basic access steps are:

1. Connect to the router by Ethernet or default Wi-Fi.
2. Open the router's management IP address in a browser.
3. Log in with administrative credentials.
4. Change default passwords immediately.
5. Save and test changes after configuration.

Do not leave default administrator credentials in place.

Common basic settings include:

• router LAN IP address,
• DHCP server range,
• subnet mask,
• DNS settings,
• time zone and device name,
• firmware update settings.

The router LAN IP often becomes the default gateway for local clients.

Important wireless settings include:

• SSID or network name,
• wireless band selection,
• channel or automatic channel selection,
• security mode,
• Wi-Fi password or enterprise authentication settings,
• guest network settings,
• transmit power when supported.

Use strong encryption, preferably WPA2 or WPA3. Avoid WEP and weak passwords.

A mesh network uses multiple wireless nodes to extend coverage. Mesh can simplify coverage expansion, but performance depends on placement, backhaul quality, and interference. Wired backhaul is usually more reliable than wireless backhaul when available.

Network Address Translation allows many private IPv4 devices to share one public IPv4 address. In home routers, NAT is commonly enabled by default on the internet-facing connection.

Quality of Service prioritizes important traffic such as voice, video, or conferencing. QoS does not create extra bandwidth, but it can reduce delay and jitter for selected traffic during congestion.

Port forwarding allows inbound traffic from the internet to reach a specific internal device and port. It should be used carefully because it exposes internal services. Only forward ports that are necessary and secure.

A wireless LAN controller (WLC) centrally manages lightweight APs and WLAN settings. Instead of configuring every AP separately, administrators configure SSIDs, security, interfaces, VLAN mappings, and policies on the controller.

A WLC can show joined APs, their operational status, assigned channels, clients, and software version. This helps verify that APs are connected and ready before creating or modifying WLANs.

The general WLC workflow is:

1. Create a WLAN profile and SSID.
2. Assign a WLAN ID or profile name.
3. Map the WLAN to an interface or VLAN.
4. Choose security settings.
5. Enable the WLAN.
6. Test with a wireless client.

WPA2-Enterprise uses 802.1X authentication, typically with a RADIUS server. Instead of one shared Wi-Fi password, users or devices authenticate with individual credentials or certificates.

Common components:

• WLC or AP acting as authenticator,
• RADIUS server,
• user/device identity store,
• client supplicant.

SNMP can be used for monitoring. RADIUS is used for centralized authentication, authorization, and accounting.

When configuring RADIUS, confirm:

• server IP address,
• shared secret,
• authentication and accounting ports,
• reachability between WLC and server,
• correct time settings if certificates are involved.

Wireless clients need valid IP settings. Depending on the design, DHCP may be provided by a router, server, firewall, or the WLC itself. The WLAN VLAN/interface must match the DHCP scope intended for those clients.

If a client cannot connect:

• Confirm the SSID is enabled and visible if it should be broadcast.
• Confirm the client supports the selected security mode.
• Check password, certificate, or 802.1X credentials.
• Verify RADIUS reachability for enterprise WLANs.
• Confirm the client is in range and not blocked by policy.
• Check whether MAC filtering or client limits are applied.
• Verify DHCP is working after association.

If the wireless network is slow:

• Check signal strength and distance from AP.
• Look for interference from nearby networks or devices.
• Verify channel plan and channel width.
• Check AP/client capabilities.
• Identify overloaded APs.
• Test wired network performance to separate wireless issues from upstream issues.
• Update firmware when appropriate.

Firmware updates can fix bugs, improve security, and add device support. Before updating, read release notes, back up the current configuration, schedule downtime if needed, and verify the device after the update.

WLAN configuration includes SSID creation, security selection, VLAN/interface mapping, DHCP planning, and client testing. Home routers combine many functions in one device, while WLCs centralize AP and WLAN management for larger networks.