What is a WLAN?

Published Aug 13, 2026

← All glossary terms Jump to W

A wireless LAN (WLAN) is a local area network in which member devices connect over radio transmissions instead of Ethernet cable, typically through one or more wireless access points. Devices discover and join the network using a shared Service Set Identifier (SSID), the name an access point broadcasts to nearby clients.

Key takeaways

  • A WLAN links devices by radio instead of cable, over a shared SSID.
  • An access point bridges the WLAN to the wired network and internet.
  • WPA2 and WPA3 encryption protect WLAN traffic from eavesdropping.
  • Guest and enterprise traffic can run on separate WLAN routing instances.
  • VOS devices configure a WLAN as a LAN interface sub-category.

On this page: Why it mattersHow it worksTypesWLAN & VersaFAQ

Why is WLAN important?

Wireless LANs remove the constraint that used to define local networking: a device had to be physically wired to reach the network. That matters everywhere from a home office to a branch floor, where running Ethernet to every desk or handheld scanner is expensive or impractical. A WLAN lets any device within radio range join the same local network a wired device would use, without pulling cable.

WLANs also matter because network teams treat them as a distinct traffic class, not an afterthought on the wired network. Guest devices, IoT endpoints, and employee laptops can share access points while staying isolated by policy – separate routing instances, firewall zones, and encryption. Getting segmentation right often decides whether a WLAN is a convenience or an open door, since radio signals do not stop at a building’s walls the way a cable does.

What is a WLAN?

A WLAN is built around one or more wireless access points (APs), each broadcasting a network name – the SSID – that client devices use to find and join it. Devices authenticate to the AP using a security protocol such as WPA2 or WPA3 (older WEP modes still appear in some configurations but are considered insecure), in either personal mode with a shared passphrase or enterprise mode with per-user RADIUS authentication.

Each AP operates its radio on a frequency band, typically 2.4 GHz or 5 GHz, with the band and channel width affecting range and throughput. The AP sits on an interface that connects the WLAN to a routing instance the same way a wired LAN interface would – so a client that joins the WLAN reaches the internet or internal servers exactly as a wired device does.

Types of WLAN

WLANs are commonly distinguished by how clients authenticate and how traffic is segmented, rather than by radio technology. Personal-mode WLANs use a single shared passphrase for all clients – simple to deploy, common for guest and small-office networks. Enterprise-mode WLANs authenticate each user individually against a RADIUS server, giving per-user visibility and revocation without changing a shared key. Guest WLANs are configured as a separate interface for guest-only traffic, kept off the enterprise routing instance so visitor devices cannot reach internal resources.

WLAN & Versa

On a Versa Operating System (VOS) device, a WLAN is configured as a Wireless sub-category of a LAN interface, alongside Wired, Aggregate Ethernet, Layer 2, and VLAN sub-categories. The workflow – available in both Concerto and Director – sets the SSID, broadcast behavior, and security protocol (WEP, WPA/WPA2, or WPA3, in personal or enterprise mode), then a separate Wi-Fi radio configuration sets the frequency band. See Configure Wi-Fi for the Director workflow, which also covers channel, transmission power, and beacon interval.

Once configured, the WLAN interface is assigned to a routing instance – Enterprise for regular traffic, or a dedicated guest instance to keep visitor traffic isolated. In security policy, Wireless LAN is a distinct network security zone alongside Wired LAN, SD-WAN, and Untrust (Internet), letting policy rules treat wireless traffic differently from wired traffic at the same branch.

Frequently asked questions

What is the difference between a WLAN and Wi-Fi?

Wi-Fi is the set of IEEE radio standards a WLAN uses to transmit data wirelessly. A WLAN is the network itself – the access point, SSID, security settings, and connected clients – built using Wi-Fi as its underlying radio technology.

What is an SSID and how does it relate to a WLAN?

The SSID is the network name a WLAN’s access point broadcasts so nearby devices can find and join it. Every device connected to the same WLAN shares that SSID; multiple SSIDs from one AP create multiple logical WLANs on shared hardware.

Is a WLAN the same as a WAN?

No. A WLAN is a local area network reached over radio instead of cable, typically confined to a building or campus. A WAN connects sites across broad geographic distances, usually over broadband, MPLS, or other transport circuits – the two operate at very different scales.

How is a guest WLAN different from an enterprise WLAN?

A guest WLAN is configured as a separate interface tied to a guest-only routing instance, so visitor traffic never mixes with internal enterprise traffic. An enterprise WLAN uses the standard Enterprise routing instance and typically applies stronger authentication, such as WPA2/WPA3-Enterprise with RADIUS.

What security protocols protect a WLAN?

WPA2 and WPA3 are the current standards, each supporting a personal mode with a shared passphrase and an enterprise mode with per-user RADIUS authentication. Older WEP modes are still configurable in some products for legacy compatibility but do not provide adequate protection for modern deployments.

More on WLAN

If you want to learn more, these are sources we trust.

NIST SP 800-153: Guidelines for Securing WLANs IETF RFC 5415: CAPWAP Protocol Specification
NIST’s guidance on securing WLAN deployments, covering access point hardening and authentication for enterprise networks. The IETF standard for centrally provisioning and controlling access points across a WLAN deployment.

If you’re reading about WLAN, these are worth looking at next.

Service Set Identifier Network Wide Area Network
The name a wireless access point broadcasts so client devices can discover and join a WLAN. The VOS configuration object that groups similar interfaces, including WLAN interfaces, under a shared routing instance. The broader network layer WLAN traffic reaches – connecting sites across distance rather than within one building.