In the third of the 7-part series of Enterprise Wi-Fi Myths, Senior Project Engineer and Wi-Fi specialist Mark Rigby helps us understand why ‘default configuration’ is not always the best choice.
Myth 3 of 7: Default Configuration is fine
The belief that default wireless configuration is “fine” or optimal for most Wi-Fi networks is a common myth that can lead to poor network performance, security vulnerabilities, and inefficiencies. While default settings may allow your network to function, they are rarely optimised for your specific environment or usage needs. Let’s understand more about some of the default settings and why they are not always the best option.
Default SSID and Security Settings Are Insecure
Misconception: The default SSID (network name) and security settings are good enough for most users.
Reality: Default SSIDs often use the manufacturer’s name (e.g., “Netgear,” “Linksys”), which makes your network easily identifiable to attackers who can target known vulnerabilities associated with specific routers or access points (APs). Moreover, the default Wi-Fi security settings may be outdated, often relying on weaker encryption protocols such as WPA2 or even WEP in older routers.
Impact: Using the default SSID makes your network an easy target, and default passwords (if not changed) are widely available online. Insecure settings can lead to data breaches, unauthorised access, and man-in-the-middle attacks. For optimal security, you should always configure your Wi-Fi with a unique SSID and use WPA3 encryption, which offers stronger protection.
Channel Settings Are Not Optimised for Your Environment
Misconception: The router or AP will automatically choose the best channel for performance.
Reality: Most access points default to automatic channel selection, which may not always choose the best channel, especially in crowded environments like apartment buildings where there are many overlapping Wi-Fi networks. In the 2.4 GHz band, AP’s often default to channel 6, which is one of the most congested channels. In the 5 GHz band, many devices default to channels that might overlap with neighbouring networks, causing interference.
Impact: Default channel settings can lead to interference, congestion, and poor performance due to channel overlap with nearby networks. By manually selecting a less congested channel or using a Wi-Fi analyser tool, you can significantly improve your network’s speed and stability.
Transmit Power May Be Too High or Too Low
Misconception: Default transmit power settings (signal strength) are fine for all situations.
Reality: Many routers default to maximum transmit power, which may seem like a good thing, but in practice, it can cause problems such as excessive signal overlap, interference, and inefficient roaming. High transmit power can also cause your device to “hear” far-away clients, increasing contention and slowing down the network. Conversely, some routers may default to low transmit power, which might not provide sufficient coverage for large homes or offices.
Impact: Improper transmit power settings can lead to dead zones, poor roaming, and interference with neighbouring networks. It’s important to adjust the transmit power to match the physical size and needs of your environment. Reducing power can help eliminate overlap, while increasing it can provide better coverage in larger areas.
No QoS (Quality of Service) Configuration
Misconception: Default settings will handle traffic prioritisation effectively.
Reality: Many AP’s come with Quality of Service (QoS) features disabled or set to a basic level by default. QoS helps prioritise critical traffic such as video calls, gaming, or VoIP over less time-sensitive traffic like file downloads or streaming video. Without proper configuration, bandwidth-intensive applications can monopolise network resources, causing latency and buffering for other users.
Impact: With no QoS or poor prioritisation, time-sensitive applications (e.g., video conferencing or gaming) may suffer from high latency and packet loss, especially when multiple devices are competing for bandwidth. Enabling and configuring QoS based on your network’s needs can significantly improve the performance of critical applications.
2.4 GHz and 5 GHz Band Mismanagement
Misconception: The default configuration of both the 2.4 GHz and 5 GHz bands will automatically balance traffic efficiently.
Reality: Many routers default to enabling both bands, but they may not be set up to optimise traffic distribution. Band steering, which encourages devices to use the faster and less congested 5 GHz band, is often disabled by default. As a result, many devices will remain connected to the slower and more crowded 2.4 GHz band.
Impact: Without proper band management, devices that could benefit from the faster speeds of the 5 GHz band may stay on the 2.4 GHz band, leading to slower speeds, interference, and network congestion. Enabling band steering or manually managing which devices connect to which band can optimise performance, especially in environments with mixed device capabilities.
The Underlying network is flawed
Misconception: It’s the Wi-Fi’s fault the network is terrible.
Reality: The terms Wi-Fi and internet have become interchangeable when discussing network issues. Whilst it can sometimes be due to poor RF configuration and design, the wired infrastructure and internet bandwidth have an equal share in the perceived experience. The wired backbone needs to be able to support the wireless demand, whilst shared services such as DHCP and DNS need to be configured correctly to avoid issues.
Impact: Misconfigured and poorly designed wired networks and shared services can cause havoc for administrators, where the end client is complaining of poor Wi-Fi when the issue is anything but that.
No Guest Network or Segmentation by Default
Misconception: A single Wi-Fi network is sufficient for all devices, including guests.
Reality: Most routers do not enable guest networks by default, and even when they do, guest networks often lack proper isolation from the main network. This means visitors or lesser-trusted devices have access to the same network resources as your personal or business devices, increasing the risk of security vulnerabilities.
Impact: Without a guest network, your personal or business devices are exposed to security threats from potentially infected guest devices. Enabling and properly configuring a guest network with network isolation ensures that guest devices cannot access sensitive resources on the main network, providing better security and privacy.
Outdated Firmware and Lack of Updates
Misconception: The router’s default firmware is up-to-date and provides optimal performance.
Reality: Routers often ship with firmware that is outdated, and firmware updates that provide critical security patches and performance improvements are not applied automatically in many cases. Default configurations typically leave auto-updates disabled or may require manual intervention.
Impact: Using outdated firmware can leave your network vulnerable to security exploits and performance issues. Regular firmware updates are essential to protect your network from new threats and ensure that it performs optimally. Always check for the latest firmware and enable automatic updates if possible.
No Traffic Monitoring or Logging
Misconception: The default configuration will provide sufficient insight into network performance and security.
Reality: Wireless networks may not enable traffic monitoring or logging by default, meaning you have no visibility into what’s happening on your network. This can prevent you from diagnosing performance issues or identifying suspicious activity.
Impact: Without traffic monitoring, you may not realise when a specific device is consuming excessive bandwidth, or when an unauthorised device has connected to your network. Enabling monitoring or logging can help you maintain better control over network performance and security.
Conclusion: Default Wireless Configuration is Not Optimal
The idea that default wireless settings are fine is a myth that can lead to poor performance, security vulnerabilities, and inefficiencies in your Wi-Fi network. Routers and access points are often shipped with generic configurations that are designed to work out of the box, but they are rarely optimised for your specific environment, usage patterns, or security needs.
Do you need support with a Wi-Fi issue?
Whether it’s speed issues, dropouts, blackspots or challenges onboarding new users and devices – sometimes all you need is a fresh pair of eyes.
Get a free Q&A session with an Ideal Wi-Fi Specialist.
