How to limited AP Coverage range?

[younes82]

Hi,

We need to setup an office with complete wireless network. I just want to know that how can i limited coverage range that outside our office nobody can't see our wireless network. I want to know how can i config my AP that don't visible to outside users?

Please guide.

Thanks.

[marce1000]

 - Basically you can't ; the idea is that the  wireless authentication schemes are strong enough for no one else to use a SSID not intended to be used but for intended intranet users , 

 M.

[marce1000]

 - Adding : also note that in the modern world , the question has no relevance anymore , because you will always have 'outside users' in your building (visitors , ....) with mobiles (e.g.)

 M.

[ammahend]

as marce1000 mentioned you cannot control free propogation, however there are few steps you can take like make data rate high may be 24 mbps, make radio Tx power low may be start with1mW and go lower to higher. use a survey tool or there are many free App on android to check signal boundary and adjust Tx power till you get somewhat close to where you want to be 

[MHM Cisco World]

Add secuirty to wlan 

The simple one is use l2 psk and write psk in paper so all user in your site know password and other not.

Other solution 

Ap cell size 

https://www.ciscopress.com/articles/article.asp?p=2186207&seqNum=2

By change ap rf parameter you can decrease size of ap cell to be small that only need ap can connect.

MHM

[Leo Laohoo]

1.  Minimize the Tx power

2.  Use high-speed data rates (Disable 1- to 11 Mbps and enable 12 Mbps and up).

3.  Attenuation is a friend.

4.  Use "low-e" glass

[JPavonM]

For the "can't see" out of office then check for high block materials, something difficult if the office is not under renovation.

For the "can't connect" out of the office space, limit the basic/mandatory rates much more than @Leo Laohoo  said to 24Mbps, and support 12- and 18-Mbps, that would prevent distant clients to connect, but will allow already connected clients to go beyond.

Attenuate AP's signal by reducing TX Power and moving AP to an office room to gain wall attenuation.

Then test, test and test, and you could have your wanted clients not connecting at all places.

[Rich R]

The things the others suggested are things you could try but I'm with Marce on this - it's pointless, a waste of time.  Get the coverage right (wireless site survey) to minimise to spill outside your building but never assume that others cannot access your wireless and therefore ensure that it is properly secured.

[Haydn Andrews]

As others have said, TX power, Data rates, RX-SOP can help reduce the cell sizes but as WIFI uses the laws of free space path loss you cant control where it propogates to to within a building.

That being said there are things you can do if your prepared to spend money:

RF attinuating paint/ Window Films can be applied to attinuate the signal to levels where its un-useable outside the building but be aware this normally also affects LTE getting into the building so everyones phones stop working.

Directional antennas could also be used to push the signal into the building

buying the surounding areas and fencing them off so people cant get close enough

At the end of the day, your better off using security to protect your network, Corporate SSIDs using 802.1x (ideally EAP-TLS)

WPA3

Guest access restricted to an untrusted segment of the network

If the consurns is more people using the guest after hours from the carpark then there is also SSID scheduling