SSID, BSSID, ESSID and IBSS Explained for the Network+ Exam

Four wireless identifiers, similar names, and a genuine risk of muddling them on exam day. They are actually straightforward once you see that two are names and one is an address.

SSID is the network's name. BSSID is a specific radio's MAC address. ESSID is the same name shared by several access points so you can roam.

SSID — Service Set Identifier

The human-readable network name, up to 32 characters, that appears in your device's list of available networks. "CoffeeShop-Guest", "HOME-A4B2". It is case sensitive, and it is broadcast in beacon frames roughly ten times a second so clients can find the network.

SSIDs are not unique. Nothing stops two unrelated networks using the same name, which is exactly what an evil twin attack exploits.

BSSID — Basic Service Set Identifier

The MAC address of the access point's radio. Unlike the SSID, it is genuinely unique and it identifies one specific radio rather than a network.

Two details matter here. An access point with both 2.4 GHz and 5 GHz radios has a different BSSID for each band, even though both advertise the same SSID. And an AP broadcasting multiple SSIDs — corporate, guest, IoT — uses a different BSSID for each, usually incrementing the last octet.

So a single physical access point commonly presents six or more BSSIDs. When a site survey lists dozens of BSSIDs in a small office, that is normal, not a rogue AP problem.

ESSID — Extended Service Set Identifier

The name shared across multiple access points that together form one logical network. Every AP in the building broadcasts the SSID "Corp-WiFi", each with its own BSSID, and clients roam between them without noticing.

Strictly, SSID is the name and ESSID is that name applied across an extended service set. In everyday use — and often on exams — the terms are used interchangeably. The distinction to hold: ESS implies multiple APs; BSS is one.

IBSS — Independent Basic Service Set

An ad hoc network: devices talking directly to each other with no access point at all. Laptops forming a peer-to-peer link, for example. There is no infrastructure, no central coordination, and generally weaker security — many enterprise policies disable ad hoc mode outright.

The related term is Wi-Fi Direct, a more modern peer-to-peer arrangement used for printing, casting, and file transfer.

The Service Set Hierarchy

Term	Meaning	Access points
IBSS	Ad hoc, device to device	None
BSS	One access point and its clients	One
ESS	Multiple APs sharing one SSID	Two or more

The identifier for a BSS is the BSSID. The identifier for an ESS is the ESSID. That mapping is the cleanest way to keep them straight.

Hiding the SSID Is Not Security

Disabling SSID broadcast is a perennial "hardening" suggestion and it is close to worthless. The name still appears in probe requests, association frames, and other management traffic, all of which are unencrypted. Any wireless analyzer reveals a hidden SSID within seconds of a client connecting.

Worse, it has a real cost: clients configured for a hidden network actively probe for it everywhere they go, broadcasting the network name in airports and coffee shops, which makes those devices easier to target with a spoofed AP. Treat SSID hiding as obscurity with a downside, and rely on WPA3 or WPA2-Enterprise instead.

The Attacks These Terms Enable

• Evil twin. A rogue AP broadcasting a legitimate SSID with a different BSSID, usually at higher signal strength so clients prefer it. Same SSID, different BSSID is the detection signature, which is precisely why BSSID matters operationally.
• Rogue access point. Any unauthorized AP on the network, often installed innocently by an employee wanting better coverage.
• Deauthentication attack. Forged deauth frames knock clients off their AP so they reconnect — conveniently to the attacker's evil twin. WPA3 and 802.11w management frame protection defend against this.
• Karma-style attacks. Responding to whatever network name a client probes for, which is what makes hidden SSIDs counterproductive.

Network+ (N10-009) Exam Tips

• SSID is the name; BSSID is the AP radio's MAC address. The core distinction.
• ESSID means the same SSID across multiple APs, enabling roaming.
• IBSS is ad hoc — no access point.
• One AP can have several BSSIDs — one per band and per SSID.
• Hiding the SSID is not a security control. Expect a question where this is the wrong answer.
• Same SSID with an unexpected BSSID indicates an evil twin.
• Related wireless material: channels, bands, roaming standards 802.11k/v/r, and site surveys.

Security+ and PenTest+ Angles

Security+ (SY0-701) covers evil twin and rogue AP detection, why WPA3 or WPA2-Enterprise beats a pre-shared key, and wireless as an attack surface generally.

PenTest+ (PT0-003) covers the offensive use: enumerating BSSIDs with airodump-ng, standing up an evil twin, capturing handshakes, and deauthentication to force reconnection — all of which require explicit authorization in the rules of engagement.

Key Takeaways

• SSID = the network name. BSSID = the access point radio's MAC address.
• ESSID = one SSID shared by multiple APs, which is what makes roaming possible.
• IBSS = ad hoc, with no access point involved.
• One physical AP usually has many BSSIDs — per band and per broadcast SSID.
• Hiding an SSID provides no real security and makes clients noisier elsewhere.
• Same SSID with a different BSSID is the evil twin signature.

Related reading: RSSI · Bluetooth attacks