Why connectivity strategies for smart MDUs matter

According to the Wireless Broadband Alliance (WBA), connectivity strategies for smart MDUs now favour fully-managed models to mitigate interference and security risks.

Facility directors and network architects face operational parallels between modern high-rises and industrial plants. Both manage high device density, legacy cabling constraints, and the need to secure granular access for diverse stakeholders.

The WBA has released a technical paper, Connectivity Strategies for Smart Multi-Dwelling Units (MDUs), detailing how property owners can move from chaotic and unmanaged networks to fully-managed enterprise-grade infrastructure.

Rapid market expansion is driving this transition. Approximately 25 percent of the US population lives in MDUs of four or more units. Shipments of Wi-Fi access points to the sector are forecast to more than double, rising from 1.2 million units in 2025 to 2.6 million by 2030.

The paper documents a move from the “unmanaged” model (where tenants install consumer-grade routers) to a centralised architecture mirroring campus deployments. In unmanaged setups, poor coordination causes channel overlap and security vulnerabilities, as “each router makes independent channel decisions.”

Tiago Rodrigues, President and CEO of the WBA, argues that this infrastructure must be “centralised orchestrated rather than an afterthought” to provide predictable performance and investment optimisation. 

The architecture of control

The WBA advocates for a “fully-managed Wi-Fi” approach. This model assigns infrastructure responsibility to property management or a Managed Service Provider (MSP) rather than the end-user. Deployment relies on an on-site Distribution Point Unit (DPU) combined with an Edge Compute Unit (ECU).

The DPU terminates the Wide Area Network (WAN) connection, such as fiber-to-the-basement, while the ECU handles local management tasks. This configuration executes containerised services on-site, including Radio Resource Management (RRM). Processing data locally reduces latency and dependence on cloud connectivity for real-time network optimisation.

For brownfield sites, whether residential complexes or older manufacturing facilities, rewiring often proves cost-prohibitive. The paper points to bridging technologies that use existing infrastructure.

Standards such as MoCA (Multimedia over Coax Alliance) and G.hn allow IP data transmission over existing coaxial cabling or telephone lines. This enables operators to extend gigabit connectivity to endpoints without invasive construction, turning legacy copper into a functional backhaul for modern access points (APs).

Addressing the ‘multi-admin conundrum’ for smart MDUs

Shared environments struggle to grant access rights to different stakeholders (e.g. property owners, maintenance staff, and tenants) without compromising security. The WBA terms this the “multi-admin conundrum”. Secure, role-based access is a defining requirement for supporting the ecosystem of owners, operators, and contractors.

The paper recommends the User Services Platform (USP), also known as TR-369. Developed by the Broadband Forum, USP is a multi-controller protocol that includes “built-in role-based access controls to restrict access to the underlying API data models.” This standard allows a maintenance vendor to access specific device diagnostics without gaining visibility into a tenant’s personal data traffic.

VLANs (Virtual Local Area Networks) enforce security segmentation. In a fully-managed environment, a single Service Set Identifier (SSID) covers the entire property. Operations teams use Multi-Pre-Shared Key (MPSK) or dynamic VLAN assignment to isolate devices at Layer 2. While a tenant’s smart thermostat and laptop share the same physical network as the building’s security cameras, the traffic streams remain logically separate.

The IoT protocol stack

Non-Wi-Fi protocols integrate into this stack, as no single radio technology suits complex facilities. Operational technology leaders must often integrate low-power, long-range sensors alongside high-bandwidth video feeds.

Wael Guibene, Platform Architect at Silicon Labs and project co-leader, explains that the “path forward lies in the convergence of Wi-Fi and Thread through Matter,” creating a unified ecosystem where devices coexist across protocols.

• LoRaWAN: LoRaWAN suits “vertical sprawling complexes” and subterranean levels. Its ability to penetrate thick concrete aids water leak detectors and asset tracking in hard-to-reach utility rooms, though low throughput limits it to small data payloads.

• Wi-Fi HaLow: Based on the IEEE 802.11ah standard, HaLow operates in sub-1 GHz frequencies. It provides better range than standard Wi-Fi and fits building management systems, such as HVAC monitoring and access control, where standard 2.4 GHz signals struggle.

• Matter: Matter acts as a unifying standard for IoT interoperability but carries current limitations. Specifically, Matter 1.4 lacks necessary features for multi-dwelling contexts, such as “bulk onboarding” and role-based access control (RBAC) hierarchies. For Matter to work in enterprise-scale MDUs, it must support “onboarding over WPA3-Enterprise / Passpoint” and handle bulk operations without requiring factory resets.

Future-proofing smart MDUs with Wi-Fi 7 and WPA3

Wi-Fi 7 (IEEE 802.11be) introduces 320 MHz channels and Multi-Link Operation (MLO), increasing throughput and reducing latency. Market data indicates that Wi-Fi 7 is expected to overtake Wi-Fi 6 in MDU deployments by 2027. However, the 6 GHz band, utilised by Wi-Fi 6E and Wi-Fi 7, mandates WPA3 security.

The paper warns that “older devices can linger” in residential settings, and a strict WPA3 mandate could lock out legacy hardware. While a “WPA3-Personal Transition mode” exists to support both WPA2 and WPA3 devices, field deployments show that some older WPA2-only devices fail to connect to mixed-mode networks.

The standard WPA3-Personal protocol (SAE) breaks the traditional method used for MPSK in WPA2. In WPA2, the Pre-Shared Key (PSK) effectively determined the encryption key, allowing the network to identify the user based on the password used. In WPA3, the SAE handshake decouples the password from the final key derivation, meaning the network cannot easily determine which password was used to assign the correct VLAN. The industry currently relies on proprietary workarounds until a standardised “per-device/per-group WPA3 password” solution is finalised. 

Saurabh Mathur, VP of Product Management at RUCKUS Networks, emphasises that resident expectations have shifted. “MDU residents no longer judge their building’s connectivity by whether they can get online,” Mathur says, noting that they increasingly expect “intelligent, AI-driven networks that anticipate congestion.”

Operational financials

Asset owners weigh Capital Expenditure (CapEx) against Operating Expenditure (OpEx) when upgrading infrastructure. Unmanaged Wi-Fi incurs minimal CapEx but carries hidden costs in reputation damage and troubleshooting overhead. Convergence can shift connectivity from a cost center into a “strategic, revenue-generating asset supporting premium SLA-based services.”

Fully-managed Wi-Fi requires “significant upfront investment” in enterprise APs, switches, and controllers. The centralised model reduces operational friction.

Automated integration with Property Management Systems (PMS) allows for zero-touch provisioning: when a lease is signed, the system automatically generates credentials, and when a lease ends, access is revoked. This automation reduces helpdesk tickets and ensures that “outdated access credentials” do not remain active.

George Hechtman, Project Leader, describes the current state of many buildings as a “complex mishmash of technologies at odds with each other.” High density and device diversity “necessitate a carefully planned, methodically executed infrastructure.”

Following this release, the WBA will commence a second phase in Q1 2026 to develop a ‘Smart Living Technical Blueprint’ to provide validated deployment models for MDUs.

See also: IoT Expo 2026 Day 2: Scaling connectivity pilots into global production networks

Want to learn more about the IoT from industry leaders? Check out IoT Tech Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and is co-located with other leading technology events including AI & Big Data Expo and the Cyber Security Expo. Click here for more information.

IoT News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.