Home Router LAN and WLAN Configuration


  • A home router provides a one-box solution for networking
    • WAN port facilitates Internet access
    • Client devices can connect to the local network via:
      • the RJ45 LAN ports
      • or the appliance’s access point functionality

Service Set ID

The service set ID (SSID) is a simple, case-sensitive name by which users identify the WLAN.

  • factory configuration uses a default SSID that is typically based on the device brand or model
  • change it to something more recognizable and not confusing with nearby networks
    • don’t use an SSID that reveals personal information
  • Disabling broadcast of the SSID prevents any stations not manually configured to connect to the name you specify from seeing the network
    • provides a margin of privacy at the expense of configuration complexity
    • does not secure the network
      • SSID can still be detected using packet sniffing tools and Wi-Fi analyzers

Encryption Settings

  • The encryption or security option allows you to set the authentication mode
  • set the highest standard supported by the client devices that need to connect
  • Select WPA3
    • If necessary, enable compatibility support for WPA2 (AES/CCMP) or even WPA2 (TKIP)
      • enabling compatibility weakens the security because it allows malicious stations to request a downgraded security type
  • Assuming personal authentication, enter a strong passphrase to use to generate the network key

Disabling Guest Access

  • Most home routers automatically configure and enable a guest wireless network
  • Clients can connect to this and access the Internet without a passphrase
    • guest network is usually isolated from the other local devices though
  • Use the option to disable guest access if appropriate

Changing Channels

  • For each radio frequency band (2.4 GHz, 5 GHz, and 6 GHz),
    • there will be an option to autoconfigure or select the operating channel
  • If set to auto-detect,
    • the access point will select the channel that seems least congested at boot time
  • As the environment changes, you may find that this channel selection is not the optimum one
  • can use a Wi-Fi analyzer to identify which channel within the access point’s range is least congested