A modern office is unimaginable without a stable wireless connection that covers all work areas, including meeting rooms and breakout areas. Employees need to move freely around the building with laptops and tablets without losing connection to corporate servers and video conferences. A standard router, even the most powerful, cannot provide coverage over a large area without "dead zones" and sudden connection drops when moving from one room to another.
The solution to the problem is creation seamless Wi-Fi network, which technically represents a single logical structure of multiple access points. To the user, it appears as a single network to which the device connects once, and the system automatically switches the client between access points without interrupting the session. In this article, we'll examine the architecture of such a network, select the right equipment, and configure roaming protocols.
The main goal of implementing such an infrastructure is transparency for the end user. They shouldn't notice that their phone has switched from an access point in the hallway to one in their office. This requires careful frequency planning, power settings, and the use of standards. IEEE 802.11r/k/vIgnoring these nuances will result in devices "clinging" to a distant access point while ignoring the closest one, which will dramatically reduce overall network performance.
Planning and audit of premises
Before purchasing equipment, it's important to conduct a detailed audit of the premises. Concrete or brick walls with rebar can block the signal, while drywall partitions transmit it much better. Also, consider sources of interference, such as microwave ovens, Bluetooth devices, and nearby Wi-Fi networks. It is critical to plan the placement of access points so that the coverage area of each one overlaps with its neighbors by approximately 15-20%.
Professional design utilizes specialized software that creates heatmaps. These tools allow for virtual placement of access points and visualization of radio wave propagation. Without such planning, there's a high risk of purchasing unnecessary equipment or, conversely, leaving entire areas uncovered.
It's important to determine the number of potential clients per access point in advance. In an office with a high workspace density (open space), the airtime load will be significantly higher than in a warehouse. Density of placement The choice of Wi-Fi standard and the number of required channels dictates the choice of devices.
- 📐 Measure the area and mark the wall materials on the floor plan.
- 📡 Analyze the channel load of neighboring networks using a scanner.
- 👥 Estimate the maximum number of simultaneously connected devices.
- 🔌 Determine the installation locations of the access points, taking into account access to LAN cables and power supply.
⚠️ Attention: Avoid placing access points in close proximity to metal structures, elevator shafts, or strong electromagnetic radiation sources, as this will create unpredictable shadows and signal reflections.
Selection of architecture and equipment
Bundling regular consumer routers, even from the same manufacturer, is absolutely not suitable for seamless roaming in an office. This setup often leads to IP address conflicts and a lack of synchronization between devices. The only viable solution for businesses is to use a controller-based architecture or cloud-based management systems, such as Ubiquiti UniFi, MikroTik CAPsMAN or TP-Link Omada.
In this system, all access points operate in "thin client" mode (Fit AP), receiving settings from a central controller. This allows for uniform management of SSIDs, passwords, and security policies for the entire network. The controller is also responsible for load balancing, evenly distributing clients among the access points.
When choosing equipment, it is worth focusing on the standard Wi-Fi 6 (802.11ax), which provides better performance in high-density environments thanks to OFDMA technology. It is also important that access points support Power over Ethernet (PoE 802.3af/at), which will eliminate the need to install separate 220V sockets under the ceiling.
What is the difference between Mesh and Controller System?
In home mesh systems, access points often communicate with each other over the air (backhaul), which reduces speed. In office controller systems, all access points are connected by cable to a switch, and the controller merely manages them, ensuring maximum speed and stability.
Setting up seamless roaming (802.11r/k/v)
The most important technical component of creating a seamless network is properly configuring roaming protocols. These protocols allow client devices to quickly and seamlessly switch between access points. Without support for these standards, the device will cling to a signal until the very end, even if the speed drops to zero, ignoring the nearest access point.
Protocol 802.11k (Radio Resource Measurement) helps the device find the best point to connect to by providing a list of neighboring points with their channels. The protocol 802.11v allows the network to send commands to the device to move to another point if the current one is overloaded. And the standard 802.11r (Fast BSS Transition) speeds up the re-authorization process, which is critical for VoIP telephony and video calls.
To activate these features in the controller settings, you must enable the corresponding options in the wireless network profile. However, it's important to remember that some older devices may not work correctly with 802.11r, so compatibility testing may be necessary in hybrid environments.
- 🚀 802.11r: Provides fast session handover without full password rechecking.
- 🗺️ 802.11k: Provides the client with a map of nearby access points for quick searching.
- ⚖️ 802.11v: Allows the network to control the client by offering to move to a less crowded frequency.
- 🔒 WPA2/WPA3: Be sure to use modern encryption standards to protect your corporate data.
⚠️ Attention: Enabling 802.11r can cause connection issues on very old devices (such as old printers or barcode scanners). These devices are often assigned a separate guest network or SSID without fast roaming support.
Optimization of frequencies and channels
Proper frequency allocation is the key to high network speed. The 2.4 GHz band is heavily congested and has only three non-overlapping channels (1, 6, 11). In office environments, it is recommended to use this band only for IoT devices or legacy clients, with the transmit power set to a minimum.
The main load should fall on the range 5 GHz (or 6 GHz in Wi-Fi 6E), where multiple channels are available and interference is reduced. When configuring the controller, you should disable channel widths of 40 MHz and higher in the 2.4 GHz frequency, leaving only 20 MHz to minimize interference.
The transmit power of access points should be individually configured. Too high a power setting will result in huge coverage areas, and roaming will be poor (the device will "see" a distant access point better than a nearby one). The transmit power of adjacent access points on the same channel should be reduced to avoid co-channel interference.
| Parameter | 2.4 GHz band | 5 GHz band | Recommendation |
|---|---|---|---|
| Channel width | 20 MHz | 40/80 MHz | Maximum width for speed |
| Power (Tx Power) | Low / Min | Medium / High | Balance for the cellular structure |
| Channels | 1, 6, 11 | 36, 40, 44, 48... | Checkerboard planning |
| Purpose | IoT, old devices | Laptops, smartphones | 5 GHz Priority |
☑️ Checking channel settings
Configuring VLANs and Security
In a corporate environment, it's critical to separate traffic from different departments and device types. This is achieved using technology VLAN (Virtual Local Area Network). For example, traffic from the accounting department, guests, and IoT sensors should be routed through different virtual networks, even if they use the same physical cables and access points.
Configuration is performed at the switch and Wi-Fi controller level. Each SSID (network name) is assigned its own VLAN ID. This not only improves security but also allows for different firewall rules and speed limits (QoS) to be applied to different user groups.
It is better to use a standard for employee authentication 802.1x (WPA2-Enterprise), which requires a domain account login and password instead of a shared password. This allows for immediate disabling of terminated employees and logging of who connected to the network and when.
⚠️ Attention: Access point and controller management interfaces should be placed in a separate, isolated VLAN. Never leave admin panels accessible from a guest Wi-Fi network or from the internet without a VPN.
Network diagnostics and monitoring
An engineer's job doesn't end after the network is deployed. A monitoring system must be implemented to track access point status, channel load, and error rates. Modern controllers have built-in dashboards, but in-depth analysis may require external tools.
A site survey should be conducted periodically with operating devices to ensure that the actual coverage matches the design. Furniture, people, and even air humidity can affect radio wave propagation, so fine-tuning may be required.
Pay close attention to the controller logs: they may show unauthorized access attempts, rogue access points (unauthorized routers connected by employees), and DHCP server issues. Network stability depends on constant monitoring.
Frequently Asked Questions (FAQ)
Is it possible to create seamless Wi-Fi using standard routers from different manufacturers?
No, this is technically impossible. Fast roaming protocols (802.11r/k/v) require deep integration and synchronization between access points, which can only be achieved by devices from the same vendor running under a common controller.
How many access points are needed for one office?
The number depends on the area, wall materials, and user density. On average, for an office with plasterboard walls, one business-class access point is sufficient for 100-150 square meters or 30-50 active users.
Why doesn't my phone switch to a nearby access point?
Most often, the problem lies in the transmit power (Tx Power) setting. If the far end of the range is too loud, the phone locks onto it. Another possible cause is the lack of support for 802.11k/v standards on the client device.
Do I need a separate server for the Wi-Fi controller?
Not necessarily. Many modern systems (such as Ubiquiti UniFi or TP-Link Omada) allow you to use a cloud-based controller or a software controller installed on a regular PC or even a Raspberry Pi. Hardware controllers are required for very large networks.