Wireless LAN Management Traffic

Hi all
My WLAN shows about 90% management traffic in the form of beacons. I am using AirMagnet to analyze the network. My plan is to reduce the number of AP's in that location and disable broadcast of SSID.

Is there anything else I need to do to reduce the management traffic overhead?

Thank you
Who is Participating?
mabutterfieldConnect With a Mentor Commented:
When you were looking at the network with Air magnet, was there any wireless activity?  I'm wondering if perhaps this may be a false positive, and it's showing 90% of traffic is management, but that's because there is little to no data at the time.  

Also, you could fire up a linux box and run wireshark on a wireless interface (not associated, in prom mode)

Try the following filters in wireshark, you'll see exactly what is happening.

Association request frame       wlan.fc.type_subtype == 0
Association response frame wlan.fc.type_subtype == 1
Probe request frame       wlan.fc.type_subtype == 4
Probe response frame      wlan.fc.type_subtype == 5
Beacon frame             wlan.fc.type_subtype == 8
Disassociation frame       wlan.fc.type_subtype == 10
Authentication frame       wlan.fc.type_subtype == 11
DeAuthentication frame       wlan.fc.type_subtype == 12

Maybe it's an idea to get a few high end long range AP's?

Also WEP2+TKIP has way more management traffic than WEP for example but its less secure
dylanitesAuthor Commented:
Do you think broadcasting SSID adds to management traffic? Also does operating both 802.11b/g contribute to the management overhead?

Thank you

WEBINAR: GDPR Implemented - Tips & Lessons Learned

Join the WatchGuard team on Thursday, March 29th as we recount some valuable lessons learned in weighing the needs of a business against the new regulatory environment, look ahead at the two months left before implementation, and help you understand the steps you can take today!

shroomduckConnect With a Mentor Commented:
Yes! Broadcasting the SSID not only consumes power, creates a visible network,  but also creates network traffic, turn off broadcast and just manually configure the point on your users PC's
Disabling the broadcasting of the SSID will not reduce the number of beacons.  Disabling SSID broadcast only removes the ssid from the beacon.  

On most APs, you can change the beacon interval if you wish to reduce the amount of traffic.  

JapyDoogeConnect With a Mentor Commented:
Both b and g will indeed have more management traffic becouse the beacon has to be send at both frequencies.
IronnicaConnect With a Mentor Commented:
If your WLAN shows 90% of management traffic as becon frames, then I am very sure that there is some problem in the settings. I hope your data packet size is not set to too small, coz sometimes for better performance small packetsize produces high throughput, also when number of nodes are high and that to if they are roaming. Because wireless devices like AP have intelligence and so you can increase the minimum threshhold time for a becon to be sent so as to reduce traffic, rather than stopping it, especially if the nodes are not static.
dylanitesAuthor Commented:
Thanks all - I am still troubleshooting this issue. I shall close out for now. Thank you
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.