are the first line of defense, where access to a network is either granted or denied.
controls what devices are allowed to the network by using acl and nac.
are open areas where other devices can communicate with another. in ad hoc bss, two comps can communicate solely with each other. in infrastructure, access points are left open.