Wi-Fi REFERENCE

SERIES

TM

802.11a/b/g Demystified
802.11 Frame Format
Frame Control

802.11 Access Point & Client Interaction

802.11 Open Association Process
Probe Request Probe Response ACK
Station

Infrastructure BSS and Distribution System

AP

To DS From DS

Station 1

Frame Duration Ctrl ID

Address 1

Address 2

Address 3

Seq

Address 4

Frame Body

FCS

Protocol

Type

Subtype

To DS

From DS

MF

Retry

Pwr Mgt

MD

Prot Frame

Order

Authentication Request ACK Authentication Response ACK Association Request ACK Association Response ACK

Ethernet Distribution System (DS)

AP

Station 2

Duration/ID Field
bit 0

Depending on bits 14-15 (most significant) this field is defined one of three ways:
bit 15 0

Protocol Field = 00 Type & Subtype Field

00 = Management 0000Association Request 0001Association Response 0010Reassociation Request 0011Reassociation Response 0100Probe Request 0101Probe Response 1000Beacon 1001Announcement Traffic Indication Message (ATIM) 1010Disassociation 1011Authentication 1100Deauthentication 1101Action (used for 802.11h & QoS) 01 = Control 1000Block Acknowledgement Request (used for QoS) 1001Block Acknowledgement (used for QoS) 1010Power Save (PS) Poll 1011Request to Send (RTS) 1100Clear to Send (CTS) 1101Acknowledgment (ACK) 1110Contention Free (CF) End 1111CF-end + CF-ACK 10 = Data 0000Data 0001Data + CF-ACK 0010Data + CF-Poll 0011Data + CF-ACK + CF-Poll 0100Null Data 0101CF-ACK 0110CF-Poll* 0111CF-ACK + CF-Poll* 1000QoS Data 1001QoS Data + CF-ACK 1010QoS Data + CF-Poll 1011QoS Data + CF-ACK + CF-Poll 1100QoS Null* 1110QoS CF-Poll* 1111QoS CF-ACK + CF-Poll* 11 = Reserved
* No data transmitted.

Wireless Medium Access via Distributed Coordination

Carrier Sense Multiple Access DCF: All devices coordinate the medium Station 1 Station 2 Tx Frame Rx ACK DIFS DIFS Contention Window Backoff Tx Frame SIFS Rx ACK Tx ACK Collision Avoidance Carrier Sense Multiple Access

Network Allocation Vector (Duration)

0 0 0 0 0 0 0 0 0 0 0 0 0 0 1

Connection Free Period (CFP) Frames

AID (Range: 12007) 1 1

BSS: Basic Service Set is a group of stations communicating through an Access Point (AP) Probe Request: Packet requesting Information about available APs in range Probe Response: Packet from APs responding to a Probe Request w/BSS information ACK: Packet sent to acknowledge a received packet

SIFS Tx ACK DIFS AP Rx Frame Station 1 Time SIFS: Short Interframe Space DIFS: DCF Interframe Space

Power Save-Poll Frames

Rx Frame Station 2

Address 1 Field
Used by the receiver.

DCF: Distributed Coordination Function CSMA/CA: Carrier Sense Multiple Access/Collision Avoidance

Address 2 Field Address 3 Field

Used by the transmitter. Used by the receiver for filtering.

Data Rate/Modulation
Spreading Method Data Rate (Mbps) 802.11a 802.11b 802.11g 1 DSSS 2 5.5 CCK DQPSK 11 6 BPSK 9 12 QPSK 18 OFDM 16-QAM 24 36 64-QAM 48 54 Modulation DBPSK DQPSK
DSSS: Direct Sequence Spread Spectrum (Barker Code) CCK: Complementary Code Keying OFDM: Orthogonal Frequency Division Multiplexing DBPSK: Differential Binary Phase Shift Keying DQPSK: Differential Quadrature Phase Shift Keying BPSK: Binary Phase Shift Keying QPSK: Quadrature Phase Shift Keying 16-QAM: 16 Point Quadrature Amplitude Modulation 64-QAM: 64 Point Quadrature Amplitude Modulation

To DS & From DS Fields

To DS = 0
Sequence Number

Sequence Number (Seq No) Field

Fragment Number

To DS = 1
Data frames transmitted from a wireless station in an infrastructure network to the DS. Frames within a distribution system.

From DS = 0 From DS = 1

Address 4 Field

Additional addressing used to traverse the Distribution System.

All Management and Control frames. Data frames within IBSS (never Infrastructure data frames). Data frames received from the DS for a wireless station in an infrastructure network.

Frame Body Field

5GHz 2.4GHz

This is also known as the data body or packet payload. Higher level protocols and/or user application data reside in this field (length can be 02312 bytes).

All Other Frame Control Fields

More Fragments (MF) 1 = additional fragments to follow 0 = last frame Retry 1 = this packet is a retransmission 0 = this packet is not a retransmission Protected Frame (Prot Frame) 1 = the frame is protected with link layer security such as WEP or WPA/2 0 = the frame is transmitted as clear text More Data (MD) 1 = indicates to the stations the AP has at least one frame buffered for the station 0 = no buffered packets in the AP for the station Order 1 = strict ordering supported 0 = strict ordering not supported Power Management (Pwr Mgt) 1 = station is in power save mode 0 = station is active (out of power save mode)

Frame Check Sequence (FCS) Field

The FCS is often referred to as the cyclic redundancy check (CRC). It allows stations and APs to check the integrity of received frames. QoS: Quality of Service IBSS: Independent Basic Service Set 802.11h: Defines dynamic frequency selection (DFS) for spectrum management and transmit power control (TPC) for power management in the 5GHz band.

To maintain 802.11 operation in the presence of both 11b and 11g clients, Request-to-Send/ Clear-to-Send (RTS/CTS) frames are sent by 11g devices at CCK rates prior to sending OFDM data.

Spread Spectrum Techniques

DSSS/CCK Conceptual Original Signal
Amplitude Spreader
DSSS/CCK

Original signal is spread with code words to create a wider band signal, then recovered at the receiver with a correlation process.

OFDM Conceptual

Transmission data is spread across 52 concurrent subcarriers within the channel. Subcarrier signal peaks occur at neighboring subcarrier nulls, providing orthogonality. Amplitude

802.11 Frequency Bands

ISM 900MHz 802.11
TV FM Radio

Channels & Capacity

ISM: Industrial, Science & Medical UNII: Unlicensed National Information Infrastructure
Space Exploration

Transmitted Signal
Amplitude Noise

Recorrelated Signal
Amplitude Correlation
DSSS/CCK

ISM 2.4-2.5GHz 802.11b/g

Fixed Satellite

UNII Bands 5.1-5.8GHz 802.11a

Fixed Satellite

802.11b/g

11 channels are available in the U.S. for 802.11b/g

Ch#

10

11

2.4GHz ISM Band

Noise Frequency Frequency

3KHz

300GHz
Ch# 1 Only 3 channels are non-overlapping.

Frequency

Frequency

11

Transmit Mask
(not to scale)

Power

Transmit Mask
0dBr -30dBr -50dBr
(not to scale)

Power
-20dBr -28dBr -40dBr

Transmit Spectrum Mask

(an example)

Transmit Signal Spectrum

0.3125 MHz

Subcarrier Plan

Pilot Subcarriers

Glossary
802.11A group of wireless networking standards set by the Institute of Electrical and Electronics Engineers (IEEE), commonly referred to as Wi-Fi, but were previously known as WLAN. 802.11aA supplement to the IEEE 802.11 specification that describes radio transmissions at a frequency of 5GHz and data rates of up to 54Mbps. 802.11bA supplement to the IEEE 802.11 specification that describes radio transmissions at a frequency of 2.4GHz and data rates of up to 11Mbps. 802.11gA supplement to the IEEE 802.11 specification that describes radio transmissions at a frequency of 2.4GHz and data rates of up to 54Mbps. 802.11eAn IEEE standard that adds Quality of Service (QoS) functionality and multimedia support to existing 802.11b, 802.11g, and 802.11a. 802.11iAn IEEE standard that hardens the security mechanisms for 802.11 networks. The 802.11i standard included improvements in key management, user authentication using 802.1X, and the data integrity of headers. 802.11nA task group of the IEEE 802.11 committee whose goal is to define a standard for high throughput speeds of at least 100Mbps on wireless networks. 802.1XA standard for port-based authentication first used in wired networks, that has been adapted for use in Wi-Fi networks. 802.1X provides a framework for authenticating users and controlling their access to a protected network with dynamic encryption keys that protect data privacy. Wi-Fi or WLAN AP (Access Point)A small to medium capacity Wi-Fi device (13 radios) that connects wireless devices/users to another network. Wi-Fi or WLAN ArrayA medium to high capacity device (416 radios) that connects wireless devices/users to another network. The Wi-Fi/ WLAN Array differs from an Access Point in that it usually contains an embedded Switch, Router, and AP controller that acts as a seamless extension of the wired network over the basic connectivity provided by Access Points. SSID (Service Set Identifier)A unique 32-character network name, or identifier, that differentiates one wireless LAN from another. All access points and clients attempting to connect to a specific WLAN must use the same SSID. The SSID can be any alphanumeric entry up to a maximum of 32 characters. Wi-FiShort for wireless fidelity. A term developed by the Wi-Fi Alliance to describe wireless local area network (WLAN) products that are based on the Institute of Electrical and Electronics Engineers (IEEE) 802.11 standards.

802.11a
Ch#

23 channels are available in the U.S. for 802.11a

36 40 44 48 52 56 60 64

149 153 157 161

5GHz UNII Band

-22 MHz

-11 MHz

Center Frequency

+11 MHz

+22 MHz

Frequency

-30

-20

-11 -9

fc

+9 +11 +20 +30

Frequency

-26 -21

-7

fc

+7

Frequency

+21 +26

All 23 channels are non-overlapping.

100 104 108 112 116 120 124 128 132 136 140

Channel Allocation
2.4GHz Channel Allocation
Frequency Channel fc (MHz) U.S. EU Japan 1 2412 X X X 2 2417 X X X 3 2422 X X X 4 2427 X X X 5 2432 X X X 6 2437 X X X 7 2442 X X X 8 2447 X X X 9 2452 X X X 10 2457 X X X 11 2462 X X X 12 2467 X X 13 2472 X X 14 2484 X

Wireless Capacity Comparison

802.11a Capacity 23 channels x 54Mbps = 1242Mbps of RF capacity
54Mbps per channel

5GHz Channel Allocation

Frequency Channel fc (MHz) U.S. EU Japan 184 4920 X 188 4940 X 192 4960 X 196 4980 X 208 5040 X 212 5060 X 216 5080 X 36 5180 X X X 40 5200 X X X 44 5220 X X X

Frequency Channel fc (MHz) U.S. EU Japan 48 5240 X X X 52 5260 X X X 56 5280 X X X 60 5300 X X X 64 5320 X X X 100 5500 X X 104 5520 X X 108 5540 X X 112 5560 X X 116 5580 X X

Frequency Channel fc (MHz) U.S. EU Japan 120 5600 X X 124 5620 X X 128 5640 X X 132 5660 X X 136 5680 X X 140 5700 X X 149 5745 X 153 5765 X 157 5785 X 161 5805 X

802.11g Capacity 3 channels x 54Mbps = 162Mbps of RF capacity

54Mbps per channel

802.11b Capacity 3 channels x 11Mbps = 33Mbps of RF capacity

11Mbps per channel

23 channels

3 channels

3 channels

805.497.0955 800.947.7871 [email protected] www.xirrus.com

2007 Xirrus. All Rights Reserved. Wi-Fi is a trademark of the Wi-Fi Alliance.

P1.v3