Legacy PHY - FHSS, DSSS, HR-DSSS, ERP
The PHY layers from 802.11-1997 through 802.11g-2003 are the foundation of modern 802.11. Understanding them matters for CWNA exam prep, troubleshooting mixed-mode networks, and understanding why protection modes exist in every modern AP operating in the 2.4 GHz band.
The transmitter hops between 79 channels (1 MHz each) in the 2.4 GHz band according to a pseudo-random hopping sequence. Both transmitter and receiver must be synchronised to the same sequence - the Hop Index is carried in Beacon frames. Data is transmitted on each frequency for a short dwell time (20–400 ms) before hopping to the next.
Because any narrowband interferer only affects the signal during the fraction of time spent on that frequency, FHSS is inherently resistant to narrowband interference. It was the original 802.11 PHY alongside DSSS.
Each data bit is multiplied by an 11-chip Barker sequence before transmission. Each chip is transmitted at 11 Mchips/sec, spreading the signal across a 22 MHz bandwidth - 11× wider than the data rate alone would require. The receiver correlates the received signal with the same Barker sequence to recover the original bits, achieving a processing gain of approximately 10.4 dB.
The Barker code {+1,-1,+1,+1,-1,+1,+1,+1,-1,-1,-1} has excellent autocorrelation properties - the receiver can reliably distinguish signal from noise even at very low SNR. This gave DSSS superior range compared to FHSS.
CCK (Complementary Code Keying) replaces the 11-chip Barker sequence with 8-chip complex codewords selected from a 64-codeword set. At 5.5 Mbps, 4 bits per symbol chip are encoded using DQPSK + CCK-16. At 11 Mbps, 8 bits per symbol chip use DQPSK + CCK-256. The same 22 MHz bandwidth and 11 Mchips/sec chipping rate is maintained - the increased throughput comes from the higher information density in each chip rather than wider bandwidth.
802.11b remains backward compatible with DSSS (1/2 Mbps) via optional PBCC (Packet Binary Convolutional Coding). The long preamble (192 µs) ensures legacy DSSS STAs can detect the channel busy. Short preamble (96 µs) provides efficiency gains in pure-b networks.
| Rate | Modulation | Chips |
|---|---|---|
| 1 Mbps | DBPSK + Barker | 11-chip |
| 2 Mbps | DQPSK + Barker | 11-chip |
| 5.5 Mbps | DQPSK + CCK-16 | 8-chip |
| 11 Mbps | DQPSK + CCK-256 | 8-chip |
Instead of one wide carrier (DSSS/FHSS), OFDM divides the channel into 64 orthogonal subcarriers, each only 312.5 kHz wide. 52 subcarriers carry data (48 data + 4 pilot). Because each subcarrier has a very long symbol period (3.2 µs) relative to its narrow bandwidth, it is highly resistant to multipath - the key advantage over spread spectrum in reflective indoor environments.
802.11a-1999 defined the same OFDM structure (64-point FFT, 312.5 kHz subcarrier spacing) still used in every subsequent generation. 802.11n doubled it to 40 MHz (128-point FFT), 802.11ac to 80 MHz, and 802.11ax narrowed each subcarrier to 78.125 kHz for 4× more frequency resolution.
802.11g brought OFDM to the 2.4 GHz band. The ERP (Extended Rate PHY) defines three mandatory sub-PHYs: ERP-OFDM (54 Mbps, same OFDM parameters as 802.11a), ERP-DSSS/CCK (11 Mbps, mandatory backward compat with 802.11b), and optional ERP-PBCC.
The critical operational issue: when 802.11b clients are present in the BSS, the AP must enable Protection Mode - adding CTS-to-self (or RTS/CTS) before every HT/ERP-OFDM frame. This overhead reduces effective 802.11g throughput from ~22 Mbps to ~11 Mbps in mixed b/g networks.
An 802.11b STA associates → AP sets NonERP_Present bit in ERP IE (IE 42) in Beacons. This signals to all ERP STAs that protection mode is required. All OFDM transmissions must be preceded by a CTS-to-self at a basic (DSSS/CCK) rate so 802.11b STAs can hear it and set their NAV.
Pure 802.11g network: short slot time = 9 µs. Mixed b/g network: long slot time = 20 µs. The AP advertises the required slot time in Beacon frames. Using long slot time in a dense network significantly increases contention overhead.
In 2025, 802.11b clients are rare - but 802.11g is not. Any client advertising only 802.11g rates (without HT/VHT/HE capabilities) in its Association Request triggers legacy protection considerations in the AP. More importantly, the AP's basic rate set determines which legacy rates all clients must support. If the AP includes 1 and 2 Mbps in its basic rate set, it must use those rates for certain management frames - increasing overhead. Removing 1/2/5.5/11 Mbps from the basic rate set and setting 12 Mbps as minimum is a common enterprise optimisation for pure 5 GHz/6 GHz deployments.
IFS Timing Comparison - Legacy vs Modern
| PHY | SIFS | Slot Time | DIFS | PIFS | Airttime (DIFS + 1 slot) |
|---|---|---|---|---|---|
| FHSS (802.11) | 28 µs | 50 µs | 128 µs | 78 µs | 178 µs |
| DSSS / HR-DSSS (b) | 10 µs | 20 µs | 50 µs | 30 µs | 70 µs |
| OFDM 5 GHz (a) | 16 µs | 9 µs | 34 µs | 25 µs | 43 µs |
| ERP-OFDM (g) short slot | 10 µs | 9 µs | 28 µs | 19 µs | 37 µs |
| ERP-OFDM (g) long slot | 10 µs | 20 µs | 50 µs | 30 µs | 70 µs |
| HT-OFDM (n) 5 GHz | 16 µs | 9 µs | 34 µs | 25 µs | 43 µs |