If you are studying for CWAP, or you just want to understand 802.11 at the frame level the way an analyst has to, the best free resource I know is a blog called mrn-cciew at mrncciew.com, written by Rasika Nayanajith. Nothing else free comes close for protocol depth. He opens real packet captures and walks every field of every frame, the work most courseware skips because it is hard to do well. This is not a beginner on-ramp and I will tell you who it is not for. But if you are leveling up toward analyst-grade Wi-Fi, you need to know this site exists and you need to know how to drive it.
First, the credit, because it matters. mrn-cciew is Rasika Nayanajith’s work, not mine and not WLAN Pros’. The “mrn” in the domain is his initials. He is CWNE #153 and a 2x CCIE, and he started the blog in 2012 as his own CCIE Wireless study journal. It grew into one of the most referenced free study archives in the certification community. Rasika has also presented at #WLPC, so this is a member of our own community giving away serious work for free, the kind of thing I will champion every time I see it.
What it actually holds
The site is a deep archive, hundreds of posts built up since 2012 and still going. The categories that earn it its reputation are the certification study notes and the frame analysis.
- CWNP study notes: CWNA, CWSP, and especially CWAP, the Certified Wireless Analysis Professional track. The CWAP notes are the flagship.
- Frame-by-frame 802.11 breakdowns: the MAC header field by field, management frames (Beacon, Probe, Auth, Association, Deauth), control frames (RTS/CTS, Block Ack, PS-Poll), data frames, and the security exchanges including the 4-Way Handshake and CCMP/AES.
- Wireshark and PCAP walkthroughs: real captures, read field by field. This is the signature strength of the whole site.
- Cisco wireless config: a long history of controller and CCIE Wireless material.
The frame analysis is the part to remember. Most study material tells you a Beacon carries certain information elements. Rasika opens the Beacon in a capture and shows you every field, what it is, and why it matters. That is analyst work, and it is the work CWAP actually tests.
Evergreen, and where to check the date
Here is the honest part, and it is the part that protects you. The site has two distinct eras, and you need to know which one you are reading.
The 802.11 protocol mechanics are evergreen. The MAC header anatomy, the three frame classes, the Beacon-Probe-Auth-Association exchange, the 4-Way Handshake logic, all of that is structurally unchanged since the 802.11-2012 baseline the foundational posts were written against. Those posts are accurate study material today. The pedagogy of opening a real frame and reading every field does not age at all.
The heaviest, most-linked study content dates to 2013 and 2014, the 802.11n and 802.11ac era. That predates 6 GHz, OFDMA, MLO, Wi-Fi 7, and WPA3. Rasika has added newer posts on Wi-Fi 7, MLO, and 6 GHz, so the modern material is there. But for current-standard specifics, lean on the recent posts and the current CWNP objectives, not the 2014 notes. Learn the durable frame mechanics from the old posts. Get your 6 GHz, Wi-Fi 7, and WPA3 detail from the new posts and the current blueprint.
The Cisco content carries the same warning, stronger. The peak controller posts cover AireOS-era hardware, and Cisco’s current wireless line is the Catalyst 9800 on IOS-XE, a different UI and a different config model. Read the older walkthroughs as concept references, never as a live click-path on current gear. A 2013 GUI is not what you are looking at in 2026.
How to drive it
The working path takes about a minute to learn.
Start at the CWAP study-notes index. It is a structured table of contents that maps the CWAP material to individual deep-dive posts. For a protocol learner, it is the best single entry point on the site.
Navigate by certification or by topic using the category sidebar: CWAP, CWNA, CWSP, the Cisco tracks, and standards tags. Pull everything on one subject at once.
Use the frame-analysis posts as a Wireshark companion. Open your own capture, find the matching post, and read every field alongside the real packet. This is where the site is worth more than most paid courseware. It answers “what is this field and why do I care” at a level the courses gloss over.
Pair it with formal study, do not substitute it. The blog explains the why at the packet level. The official CWNP guide tracks the current exam blueprint. Use both. Cross-check anything on 6 GHz, Wi-Fi 7, or WPA3 against the current objectives rather than the older posts.
Who should use it, and who should not
This site is strongest for CWAP candidates. If you are working toward CWAP, treat it as your free companion to the curriculum. It is also strong for anyone learning 802.11 at the packet level, for Wireshark and PCAP learners who want theory tied to real frames, and for Cisco WLAN engineers who want the controller config history.
Who should not start here? A newcomer wanting a gentle Wi-Fi 101. This site is dense and certification-grade. It assumes you already know you are studying frames and you already have the fundamentals. If you are brand new to Wi-Fi, get your bearings somewhere gentler first, then come here when you are ready to go deep. And if you only need current-standard specifics in one place, current CWNP material plus the recent posts will serve you better than the 2013 core.
Why this one is worth your time
I do not point my community at things I have not looked at. The reason mrn-cciew matters is that it is real analyst work given away for free by a practicing engineer who earned the credentials the hard way. Rasika built it as his own study journal and then left it up for everyone who came after. That is the same instinct that built #WLPC: practitioners making the whole community smarter.
It also lowers the cost of getting good. Frame analysis is the skill that separates people who can read Wi-Fi from people who can only describe it, and it is the skill most study material undersells because it takes real work to teach. Rasika did the work. The frames are free to capture, and now the field-by-field explanation is free to read.
You can keep studying CWAP from the guide alone and hope the frame fields click. Or you can open a capture in Wireshark, pull up the matching mrn-cciew post, and read the protocol at the level the exam actually tests. Go try it. Start at the CWAP index. Then tell me which frame finally made sense once you saw every field of it on the page.