Mesh vs AP vs Wall-Plate AP: Which Fits Your Hong Kong Home?

2026-10-17 | Buying Guide

Mesh, AP or wall-plate AP? How backhaul, roaming and bands decide the fit.

Introduction: Look at Your Home First, Not the Box

Many customers start with the same question: "Is mesh good?" or "Should I install APs or mesh?" That question cannot be answered on its own, because the answer depends on the home itself: whether every room has an ethernet point, what the walls are made of, where the fibre enters, and how dense the neighbouring networks are. No device type is absolutely better than the others; each fits a different situation. This article explains four roles — router, mesh, AP and wall-plate AP — then two easily confused concepts (backhaul and roaming), then five common Hong Kong home layouts and three frequency bands, giving you a selection framework. The scenario recommendations in this article are all general-principle inferences, and the actual choice should be based on a site survey.

What the Four Are: Router, Mesh, AP, Wall-Plate AP

Router: Connecting and Managing Networks

A router connects and manages different networks — your home local network (LAN) and the internet. In a typical home network, the router is essential: it hands out addresses, performs NAT, runs the firewall, and similar management work. A home can have just one router, but one router alone is often not enough to cover the whole home.

AP: Wireless Access to an Existing Network

An AP (Access Point) is not a router; its role is to provide wireless access to an existing network. A typical AP deployment connects back to the main router over a wired network — the AP uses an ethernet cable to reach the router or a switch, and its Wi-Fi radio focuses on serving client devices. Because it does not depend on another wireless AP as its upstream, a wired AP connection is generally more stable and lower-latency, and can support higher device density. Business-grade APs usually support a central controller, VLANs and roaming standards, making it easier to segment devices by purpose.

Mesh: Multiple Nodes Working as One Coverage

A mesh system consists of multiple nodes that internally function as a group of APs, working together to form unified coverage. Its selling points are whole-home coverage under one network name (SSID), devices switching automatically to the stronger node, centralised app management, and self-healing with dynamic path selection — if one path fails, the system can take another route. One point to note: mesh does not mean no cabling. Mesh nodes can connect wirelessly, but some mesh systems also support wired backhaul. When choosing, check whether the exact model supports wired backhaul and whether the satellite nodes have ethernet ports — some cheaper systems have no ethernet port on the satellite nodes, so switching to wired backhaul later is not even possible.

Wall-Plate AP: An AP That Fits a Wall Box

A wall-plate AP (in-wall AP) is not a separate network role; it is a form factor of AP that fits into a wall box (for example an 86mm wall junction box). It sits flush against the wall, takes up no floor space, and blends in with the interior. It uses the existing in-wall ethernet cable and wall box, and is usually powered by PoE (Power over Ethernet), which carries power and data together, so no separate power cable is needed. Some models provide multiple ethernet ports so wired devices can be connected at the same time; some provide PoE pass-through, but the output power budget varies by model. Antenna, coverage and heat-dissipation specifications all vary by model, so check the exact model's specifications — never assume "all wall-plate APs have a given specification". A wall-plate AP also depends on the existing in-wall cabling and box position, and its coverage is affected by mounting position (wall height, whether furniture blocks it).

Two Easily Confused Concepts: Backhaul and Roaming

Backhaul: A Second Link Beyond the Device Connection

Backhaul and the device connection are two different links and must be understood separately. The device connection is "phone / computer connects over Wi-Fi to the nearest AP"; backhaul is how the AP gets back to the main network — wired backhaul means "AP reaches the switch / router over an ethernet cable"; wireless backhaul means "child AP reaches a parent AP over a wireless link, then joins the existing network". The key difference: a wired AP does not depend on another wireless AP for its upstream connection, while a wireless backhaul link is itself a failure mode that does not exist in a wired setup — if that link degrades, every device under that node is affected. In practice, hybrid arrangements are common: mesh for general coverage, APs for high-demand rooms; or some locations wired and others wireless, combined according to the actual cabling conditions.

Roaming: Mesh Is Not Roaming

Many people treat "mesh" and "fast roaming" as the same thing, but they are two different things. Mesh is how APs talk to each other (wired or wireless); fast roaming is the ability of a client device to move between APs without disconnecting. The two can exist independently: having mesh does not guarantee smooth roaming, and wired APs with the right roaming settings can roam smoothly too. Roaming relies on 802.11k / 802.11v / 802.11r working together with different roles: 802.11k provides neighbour reports that shorten the time a device spends scanning nearby APs; 802.11v lets an AP direct a device to roam to another AP offering a better experience; 802.11r (Fast BSS Transition) compresses the re-authentication handshake, giving latency-sensitive applications such as calls a better connection. Different sources give different baseline figures for how much 802.11r improves latency, so this article states it qualitatively only — it can substantially shorten re-authentication time — and does not quote a single precise figure. One more important point: roaming is ultimately decided by the client device. Some devices (especially older or cheaper ones) are "sticky clients" that cling to the original AP even when its signal is already weak and refuse to roam. That is a common problem that simply changing equipment will not necessarily fix.

Comparison Table: How the Four Compare

How to read this table: every cell needs a "depending on deployment" qualifier. The same option can perform very differently with different placement, backhaul method, wall material and neighbour interference. The table is a starting point for selection, not a performance guarantee.

Five Hong Kong Home Scenarios: How to Choose

The five recommendations below apply the principles above (wired backhaul is more stable, concrete walls attenuate heavily, roaming needs client cooperation, wall-plate APs depend on existing boxes and cabling) to common Hong Kong housing types. They are inferences, not verified Hong Kong measurement conclusions. Each scenario must be confirmed by a site survey; the actual solution should only be decided after inspecting the entry point, sockets, walls and usage habits.

Village House: Multiple Floors, Larger Floor Area, Concrete Slabs Between Floors (subject to site survey)

Consider at least one wired AP per floor; if cabling is impossible, consider wireless-backhaul mesh and accept reduced performance across floors. Do not rely on a single router to penetrate multiple floor slabs — slabs and concrete attenuate signals heavily. On site, check whether each floor has network points, whether cabling can run via the staircase, and where each floor is mainly used. The above is a general-principle inference; the actual choice is subject to a site survey.

Tong Lau (Old Tenement): Thick Walls, Possible Metal-Mesh Plaster, Not Necessarily Ethernet in Every Room (subject to site survey)

First survey whether any usable in-wall cabling or cable routes exist. If wired conditions allow, use wired APs or wall-plate APs; if wireless conditions are constrained, mesh nodes should sit within the same space and not be separated by multiple thick walls. Do not rely on "penetration" alone — thick walls and metal-mesh plaster can attenuate signals heavily. The above is a general-principle inference; the actual choice is subject to a site survey.

Subdivided Flat: Small Area, Many Partitions, Dense Neighbour Networks, Possibly a Single Entry Point (subject to site survey)

Generally, one well-placed router can already cover the flat; the focus should be on band / channel management and reducing interference, not stacking more nodes. More nodes in a small space may interfere with each other. In subdivided flats, pay particular attention to 2.4GHz congestion (see the bands section below) and router placement — do not stuff the router inside a metal cabinet. The above is a general-principle inference; the actual choice is subject to a site survey.

Large Housing Estate: Medium Flat Size, Extremely Dense Neighbour Networks, Concrete Walls, Possibly an Ethernet Point in Every Room (subject to site survey)

If the flat already has an ethernet point in every room, prioritise wired APs / wall-plate APs plus a unified SSID and roaming settings; if there are no points, mesh can be used — preferably a system that supports wired backhaul, so it can switch to wired later. In estate flats, neighbour interference also matters: channel selection and band allocation are often more effective than adding another node. The above is a general-principle inference; the actual choice is subject to a site survey.

Duplex: Two Floors Opened Up, Stairwell Void, Line of Sight Between Floors but a Slab in Between (subject to site survey)

At least one coverage point per floor; wired backhaul between floors is preferable. If only wireless backhaul is possible, place nodes at the stairwell / void edge where there is line of sight, to reduce the number of hops through walls — each extra hop affects performance. The above is a general-principle inference; the actual choice is subject to a site survey.

A site survey generally looks at: entry-point position, whether each room has a network point, wall material and thickness, wall-box positions and counts, power socket positions, neighbour network density, main usage locations (desk / TV / bedroom), and device counts and types. This list is an engineering-common-sense inference, not a research-verified checklist.

Band Allocation: How to Divide 2.4GHz, 5GHz and 6GHz

The qualitative consensus is clear: the higher the frequency, the higher the speed potential, the shorter the coverage, the weaker the wall penetration, and the less the interference. 2.4GHz has the best wall penetration and coverage, but only 3 non-overlapping 20MHz channels (1, 6 and 11), which all nearby networks must share, and it also shares spectrum with Bluetooth, baby monitors, wireless security cameras, microwave ovens and similar devices, which can cause intermittent disconnections and slowdowns. 5GHz is faster with less interference, but its coverage and wall penetration are weaker than 2.4GHz. 6GHz has the cleanest spectrum, the widest channels and the lowest latency, but the weakest wall penetration, and is not suitable for penetrating walls or as backhaul for a large-area mesh system.

Hong Kong 6GHz Needs a Clear Statement: Only 500MHz Is Open

Hong Kong has opened the 6GHz range 5,925–6,425 MHz — that is 500MHz of spectrum, not the full international plan of 5,925–7,125 MHz (about 1,200MHz). The practical consequence is that Hong Kong has only 3 channels of 160MHz, not the 7 available in some other regions. Wi-Fi 6E APs sold in Hong Kong must comply with the HKCA 1081 standard and the compulsory certification scheme, with a maximum output power of 24 dBm EIRP indoors and 14 dBm EIRP outdoors. When buying, confirm the device is a Hong Kong-compliant version rather than a version for another region; that is a verification suggestion following from the regulations, not a verified consequence. As for measured 6GHz coverage distances in Hong Kong homes, the research pack found no Hong Kong measurements, so this article gives no figures such as "measured Hong Kong 6GHz coverage is X metres".

Wall Attenuation: Source Figures Diverge Widely — Trust No Single Number

Different sources estimate wall attenuation very differently; a concrete wall can cause attenuation in the teens to tens of dB, depending on thickness, band and measurement method. For example: one source roughly estimates thin porous walls block about 5%–30%, with thick walls higher; another source, measured in dB, puts concrete walls at teens of dB on 2.4GHz, higher on 5GHz and higher again on 6GHz; yet another source says a solid concrete wall can reduce a 2.4GHz signal by up to about 30 dB. These figures come from different test conditions and cannot be directly converted or averaged, so this article does not merge them into a single "standard attenuation table". The practical conclusion is just one: do not expect Wi-Fi to pass through several concrete walls — put the AP on the side where the signal is needed.

Quick Allocation Reference

Two further notes. First, some router / AP systems offer automatic band steering to help devices pick a band, but the client device ultimately decides — do not treat "automatic band selection" as a guarantee that a device will always join the fastest band. Second, in neighbour-dense environments, setting the 2.4GHz channel width to 20MHz and picking the least-used of channels 1 / 6 / 11 reduces interference; keep the router away from 2.4GHz interference sources such as microwave ovens, cordless phones and baby monitors.

Common Mistakes: Do Not Do These

• Assuming mesh equals roaming. Mesh is how APs communicate; roaming is how devices switch. Buying mesh does not guarantee smooth device roaming; wired APs with correct roaming settings can roam just as well.
• Expecting a single router to penetrate several concrete walls. Reinforced concrete is common in Hong Kong homes and attenuates signals heavily. The right approach is to put the AP on the side where the signal is needed, not to rely on "penetration".
• Putting the router inside a sealed metal weak-current box and closing the door. Metal reflects and absorbs Wi-Fi radio waves, so a sealed metal box will in principle weaken the signal substantially, and it also traps heat. Wi-Fi-transmitting equipment should be moved outside the box; only equipment that does not need to transmit Wi-Fi (such as the ONT or a switch) should stay inside, with an ethernet cable run to an AP at a good position outside the box.
• Placing the router wherever the fibre enters. The fibre entry point is often not the centre of the home — it may be an entrance cabinet, a corner or a storage spot. The ONT can stay at the entry point, with an ethernet cable carrying the connection to a more central, open position; or add an AP at the ideal position.
• Stacking many nodes in a small flat. Small spaces generally do not need multiple nodes; extra nodes may interfere with each other. Sort out band and channel management first, then decide whether a node needs adding.
• Treating a repeater / extender as mesh. A repeater receives and retransmits on the same channel, uses extra airtime, and creates a second network that devices may cling to on a weak signal. Mesh is multiple nodes in one system, one network name, with intelligent switching — the two are different.
• Using 6GHz for cross-room backhaul. 6GHz has the weakest penetration and coverage, and is a poor choice as the backhaul band for a large-area mesh system. Cross-room high-speed needs should use wired backhaul or 5GHz.
• Being careless with security settings. Leaving the router's default admin password unchanged, leaving WPS on, using the same password for admin and Wi-Fi, never updating firmware, handing the main Wi-Fi password to every visitor, and putting all IoT devices on the main network are all common mistakes. Visitors should use a separate guest network (with the isolation option enabled and a different password from the main network); IoT devices should go on a guest network or a separate IoT segment, isolated from the main network; WPS, UPnP and remote management should be switched off unless genuinely needed; firmware should be checked and updated regularly, without cutting power during the update. For encryption, prefer WPA3 Personal; if older devices do not support WPA3, use WPA2 / WPA3 transitional mode. Avoid WEP, WPA Personal, any setting containing TKIP, and no encryption at all. And believing that "hidden SSID" or "MAC address filtering" equals security is a misunderstanding — neither truly prevents unauthorised access.
• Adding another router behind the ISP router with both doing NAT. That is Double NAT, which disrupts online gaming, P2P, access to a home server, port forwarding and remote access. If the ISP device supports bridge mode, set it to bridge mode and let your own router do all the routing; if not, use IP passthrough, or set your own device to AP mode. Before switching, ask the ISP whether bridge mode is supported and whether bundled services such as voice / TV will be affected.

FAQ

I already have a router. Do I need to add APs or mesh?

It depends on coverage and usage. If activity is concentrated near the router and there are not many devices, a single router may be enough. If distant rooms keep disconnecting or are clearly slower, or every floor needs connectivity, consider adding APs or mesh. Before deciding, check the router placement — whether it is stuffed in a metal box, a corner or behind a thick wall; fixing the placement alone often improves things.

Is mesh always better than APs?

No. Mesh wins on easy installation, no cabling and unified management; wired APs win on stability, low latency and freedom from wireless-backhaul links. With pre-wired ethernet, prioritise wired APs or wall-plate APs; without cabling or where cabling is inconvenient, consider mesh; hybrid arrangements are also common — mesh for general coverage, APs for high-demand rooms.

Do wall-plate APs suit every room?

No. A wall-plate AP depends on existing in-wall ethernet cabling and box positions, and its coverage is affected by mounting position. It suits rooms that have a network point and wall box and want Wi-Fi plus wired in one place. Antenna, coverage, PoE pass-through and similar specifications vary by model — check the exact model's specifications when buying.

Why is 6GHz so weak in the next room?

Because 6GHz has the weakest wall penetration, and its signal can attenuate sharply through a wall. That is a physical property of the band, not an equipment fault. The next room should use 5GHz or 2.4GHz, or get a wired AP installed — do not expect 6GHz to penetrate walls.

What should I check before changing equipment?

Entry-point position, whether each room has a network point, wall material and thickness, wall-box positions and counts, power socket positions, neighbour network density, main usage locations, and device counts and types. That information decides which options are feasible; deciding without inspecting the site makes buying the wrong thing easy.

How should visitors and smart-home devices be separated?

Visitors use a separate guest network with the isolation option enabled and a password different from the main network, so visitor devices can only reach the internet and cannot access computers, printers, shared drives and other internal devices on the main network. IoT devices go on a guest network or a separate IoT segment, isolated from the main network; where possible, VLANs give more thorough segmentation. Some smart-home features (such as a phone app controlling devices directly over the LAN) may stop working because of isolation and need cloud relay or a specially opened rule.

Conclusion: Survey First, Then Choose

Mesh, APs and wall-plate APs have no outright winner. The selection order should be: look at the home structure and cabling conditions first, then the backhaul method, then band allocation, and only then the device type. The WiFi-King team has 18 years of experience and provides home Wi-Fi surveys and solution assessments; to get help, see home Wi-Fi repair for the service, or Wi-Fi solution to plan wired and wireless networks together. Remember: any solution should be based on a site survey — do not decide from a comparison table alone.

免費上門勘查及報價 | 收費指南