HCIP-WLAN study plan
HCIP-WLAN · Give each week a clear focus.
8 weeks · About 7 hours per week
WLAN Networking and CAPWAP Principles (AP-AC architecture, CAPWAP tunnel establishment, AP onboarding)
Describe the AP-AC split-MAC architecture and state which functions stay on the AP versus the AC
Diagram the CAPWAP control and data tunnel establishment sequence from AP discovery to Join response, naming each message type
Explain how an AP obtains an AC address (DHCP option 43, DNS, static, broadcast) and rank the discovery methods by typical priority
Compare IPv4 and IPv6 CAPWAP transport and identify which ports and protocols carry control versus data traffic
Your checkpoint
A one-page hand-drawn CAPWAP onboarding sequence diagram annotated with every message name, port, and the decision point where an AP falls back to the next AC discovery method
WLAN Networking and CAPWAP Principles (AP-AC architecture, CAPWAP tunnel establishment, AP onboarding) & WLAN High Availability and WLAN AC Deployment (VRRP hot standby, dual-link backup, AC virtualization)
Trace how AP entries move through the states an AC tracks (fault, idle, config, download, normal) and what triggers each transition
Explain AP onboarding failures caused by image mismatch, certificate mismatch, and license exhaustion, and state the first check for each
Describe VRRP-based AC hot standby: how the backup AC learns AP state and what happens to CAPWAP tunnels at failover
Distinguish AC virtualization (multiple ACs presented as one) from VRRP hot standby in terms of capacity and failover behavior
Describe dual-link backup for APs that can reach two ACs and when it is preferred over VRRP
Your checkpoint
A comparison table of VRRP hot standby, dual-link backup, and AC virtualization covering failover trigger, AP tunnel behavior, capacity use, and one scenario where each is the right choice
WLAN Air Interface and Roaming (802.11 frames, 802.11k/v/r, roaming optimization, band steering)
Identify the fields of the 802.11 MAC header and classify management, control, and data frame subtypes by their function
Explain the probe, authentication, association, and 4-way handshake exchange in order, naming the frame types involved
Describe how 802.11k neighbor reports, 802.11v BSS transition management, and 802.11r fast BSS transition each reduce roaming time
Explain band steering and load balancing decisions an AC makes and the client behaviors that defeat them
Diagnose a sticky-client roaming complaint by choosing which frame captures and counters to inspect
Your checkpoint
A annotated ladder diagram of one full client join and one roam (including 802.11r if the client supports it), with a short note on the time cost of each step
WLAN Security (WEP/WPA/WPA2/WPA3, 802.1X, Portal and MAC authentication, RADIUS, PKI)
Compare WEP, WPA, WPA2, and WPA3 on encryption, integrity, and key management, and state the specific weakness each successor fixes
Walk through 802.1X EAP authentication between supplicant, authenticator, and RADIUS server, naming the EAP methods common in enterprise WLAN
Explain Portal authentication and MAC authentication flows, including when each is appropriate and how they are bypassed or triggered
Describe the role of PKI and certificates in WLAN (AP identity, portal HTTPS, WPA2/WPA3-Enterprise server validation) and what fails when a certificate expires
Your checkpoint
A security decision matrix mapping five deployment scenarios (guest, enterprise office, IoT, high-security, legacy device) to recommended authentication and encryption with one-line justification each
WLAN Fundamentals and Standards (802.11 PHY/MAC, RF basics, WLAN architecture) & WLAN QoS and WLAN Optimization (WMM, air interface control, channel and power planning, interference mitigation)
Map 802.11 PHY generations (a/b/g/n/ac/ax) to their bands, channel widths, and headline modulation schemes
Explain WMM access categories and how EDCA parameters differ for voice, video, best effort, and background
Calculate a 2.4 GHz and 5 GHz channel plan for a given floor with a stated co-channel reuse target
Describe how transmit power, channel width, and CCI/ACI affect throughput and how to mitigate each type of interference
Explain air interface control features such as rate limiting, multicast-to-unicast conversion, and dynamic load balancing
Your checkpoint
A channel and power plan for a two-floor office (state your assumptions) with a paragraph justifying channel reuse distance, chosen widths, and the WMM policy for voice
WLAN QoS and WLAN Optimization (WMM, air interface control, channel and power planning, interference mitigation) & WLAN O&M and Troubleshooting (eSight/WLAN Planner, AP/AC upgrade, common fault diagnosis)
Describe the workflow of WLAN Planner from site survey input to simulated coverage output and what it cannot replace
List the steps of an AP and AC software upgrade and the pre-checks that prevent a failed upgrade
Build a fault-isolation order for an AP that will not come online, from physical layer to AC-side logs
Explain how to read AC-side client and AP statistics to distinguish signal problems from configuration problems
Describe what eSight-style management platforms monitor and how alarms map to root causes
Your checkpoint
A troubleshooting runbook of at least six fault scenarios (AP offline, client cannot associate, authentication failure, poor throughput, roaming failure, upgrade failure), each with symptom, first check, and likely root cause
WLAN Interworking and Application Scenarios (WLAN with wired networks, IoT/CloudCampus WLAN, location services) & WLAN Fundamentals and Standards (802.11 PHY/MAC, RF basics, WLAN architecture)
Describe how WLAN integrates with wired networks: VLAN mapping, AP management versus service VLANs, and DHCP relay placement
Explain CloudCampus WLAN architecture and how cloud-managed APs differ operationally from AC-managed APs
Describe WLAN location services: what data is collected, which positioning methods are used, and the accuracy limits
Explain how IoT traffic is carried over WLAN infrastructure and the segmentation concerns it raises
Review WLAN architecture options (centralized, distributed, cloud) and match each to a deployment size
Your checkpoint
A one-page architecture recommendation for a mid-size campus covering VLAN design, management model, and whether location services are feasible, with reasons
WLAN Fundamentals and Standards (802.11 PHY/MAC, RF basics, WLAN architecture) & WLAN Networking and CAPWAP Principles (AP-AC architecture, CAPWAP tunnel establishment, AP onboarding) & WLAN Air Interface and Roaming (802.11 frames, 802.11k/v/r, roaming optimization, band steering) & WLAN Security (WEP/WPA/WPA2/WPA3, 802.1X, Portal and MAC authentication, RADIUS, PKI) & WLAN QoS and WLAN Optimization (WMM, air interface control, channel and power planning, interference mitigation) & WLAN High Availability and WLAN AC Deployment (VRRP hot standby, dual-link backup, AC virtualization) & WLAN O&M and Troubleshooting (eSight/WLAN Planner, AP/AC upgrade, common fault diagnosis) & WLAN Interworking and Application Scenarios (WLAN with wired networks, IoT/CloudCampus WLAN, location services)
Re-derive the CAPWAP onboarding sequence and roaming ladder diagram from memory and correct any gaps
Re-take a timed mixed-domain practice set and log every miss by domain
Revisit the three weakest domains using your own runbook and matrices rather than re-reading notes
State the key differentiator for each of the eight domains in one sentence each
Your checkpoint
A one-page personal cheat sheet covering all eight domains plus a list of remaining weak points with a plan to close each
Milestones
Week 2: Can draw the full CAPWAP join sequence and explain VRRP hot standby failover without notes
Week 4: Can explain WPA3 improvements over WPA2 and trace an 802.1X exchange end to end
Week 6: Can produce a channel plan and diagnose an AP-offline fault using the runbook
Week 8: Scores at or above target on a timed mixed-domain set and has a written list of remaining weak points