WiFi Roaming Policy: What It Is and Why 802.11r Is Needed

Modern wireless networks are no longer just internet access points, but rather complex ecosystems that provide uninterrupted connectivity for dozens of devices. Owners of large apartments or offices often encounter situations where the signal appears to be there, but the connection constantly drops or the speed drops to zero when moving between rooms. This is where wireless networking comes into play. roaming policy WiFi, a technology that manages the process of switching your smartphone or laptop between different access points.

Many users mistakenly believe that Wi-Fi roaming works as easily as cellular networks, where the network automatically "reroutes" the subscriber to the nearest tower. However, in the world of wireless local area networks, things are different: it is the client device that makes the decision to change access points, based on its algorithms and signal thresholds. If the router or controller doesn't have the correct roaming policy configured, the device may be stuck on a distant router with a barely noticeable signal, ignoring a stronger neighboring one.

Understand the intricacies of setting up 802.11r and other rapid migration standards is essential for anyone who wants to build a truly reliable network. Understanding how roaming policy, will allow you to eliminate "dead zones" and ensure a smooth video call or online game, even when actively moving around the house.

Operating principles and basic concept of roaming

The technology is based on a mechanism that allows a client device to maintain an active connection to the network when moving from one access point (AP) coverage area to another. When you walk down the hallway of an office or a large home, the signal strength from your current router decreases. At this point, the device must find an alternative. Roaming policy WiFi — is a set of rules and protocols that dictate the terms of this transition.

The key problem with the traditional approach is latency. The standard reconnection process involves three stages: airborne scanning, authentication, and association. Each stage involves exchanging data packets, which takes time. For regular web surfing, this is unnoticeable, but for VoIP telephony or 4K streaming, even a latency of 200-300 milliseconds leads to connection drops or artifacts.

This is why special standards have been developed, such as IEEE 802.11r, 802.11k And 802.11vThey optimize the process, allowing the device to quickly find a new access point and transmit encryption keys to it before the connection to the old one is physically lost. Seamless roaming is impossible without support for these features on both the router and the client.

It's important to understand the difference between mesh systems and regular routers in repeater mode. In mesh networks, the controller centrally manages clients, forcibly sending them to a more suitable point if the current one is overloaded or the signal is weak. In regular systems, the device often decides when to switch, which can lead to a "sticky client" phenomenon.

• 📡 Scanning: The device constantly monitors the airwaves for stronger signals from other points with the same SSID.
• 🔐 Authentication: fast exchange of security keys without the need for a full handshake with the server.
• 🔄 Reassociation: physical switching of the radio module to a new frequency and channel of the access point.

⚠️ Warning: Enabling the 802.11r (Fast BSS Transition) protocol may cause compatibility issues with older devices released before 2015. If you have legacy devices that no longer connect, try disabling this option or changing the guest SSID to one that does not support fast transitions.

Key protocols: 802.11r, 802.11k, and 802.11v

To roaming policy WiFi For the system to work effectively, it is necessary to use a set of standards, each of which solves its own part of the problem. The most well-known is 802.11r, also known as Fast BSS Transition (FT). Its main purpose is to reduce the time required for re-authentication. Instead of re-entering the entire handshake with the domain controller, the device uses keys received from the current endpoint to quickly authorize the new one.

The second most important element is the standard 802.11k (Radio Resource Management). It allows the access point to provide the client with a list of neighboring access points (Neighbor Report) that could potentially accept a connection. This eliminates the need for the device to spend time scanning all channels, significantly saving battery life and speeding up the search for an alternative. Without 802.11k, the device may search blindly for a network, wasting precious time.

The third component is 802.11v (Wireless Network Management). This protocol allows the network infrastructure to exchange configuration information and help the client improve performance. For example, an access point can send a request BSS Transition Management, recommending that the device move to another point, even if the current signal is still acceptable, but the point itself is overloaded.

Using these three standards together is often called "seamless roaming." However, it's important to remember that support is required on both ends: the router (or controller) and the network adapter on your smartphone or laptop. Modern flagships from Apple, Samsung, and Huawei work seamlessly with this set, but budget devices may ignore some of the recommendations.

Setting up a roaming policy in the router interface

Activation and setup process roaming policy It depends on the hardware vendor. In entry-level home routers, these features are often hidden or absent. In more advanced models, Keenetic, MikroTik or Ubiquiti You need to log into the web interface. Typically, the path looks like this: Wi-Fi Network → Advanced → Roaming or Wireless → Advanced Settings.

The first thing to do is ensure that all access points on your network use the same SSID (network name), encryption type (usually WPA2/WPA3 Personal), and password. If the passwords differ, the device will treat the second access point as a new network and require you to re-enter the password, which will interrupt the connection. It's also critical that wireless channels don't overlap or are configured to auto, but with a planned distribution in mind.

In professional equipment such as Ubiquiti UniFi or MikroTik CAPsMAN, the configuration is done centrally. There, you can set RSSI (signal strength) thresholds at which the controller will start "pushing" the client, forcing it to search for another access point. For example, you can set a rule: if the signal is below -75 dBm, send the client a reconnection request.

Don't forget to check your security settings. Protocol 802.11r It can operate in two modes: Over-the-Air and Over-the-DS. The former is faster but less secure on open networks, while the latter is more secure but requires traffic to pass through a distributed system. For home use, Over-the-Air mode is usually sufficient.

After making changes, be sure to reboot the wireless module or the entire router. Sometimes old settings are cached in clients' memory, causing them to continue to behave as before, ignoring the new rules.

The "sticky client" problem and its solutions

One of the most annoying problems in Wi-Fi networks is the "sticky client" phenomenon. It occurs when a device (often a smartphone or IoT device) continues to cling to a remote access point with a signal strength of -85 dBm, ignoring a new access point with a signal strength of -45 dBm located a meter away. Why does this happen?

The fact is that the Wi-Fi standard was originally designed so that the decision to switch is made solely by the client. The router doesn't have the right to simply turn off the device. It can only gently hint that the connection is poor. Many smartphone manufacturers program their Wi-Fi modules to aggressively lock onto a known network to save battery life by constantly scanning the air.

To combat this in roaming policy WiFi Minimum RSSI threshold mechanisms are implemented. The network administrator sets a value, for example, -72 dBm. If the client's signal drops below this level, the access point sends a deauthentication packet. The device is forced to search for a new access point and, if it finds a stronger signal nearby, connects to it. This is a crude but effective method.

• 📉 Minimum RSSI: Setting the threshold for cutting off weak signals.
• ⏱ Timeouts: reducing the time it takes to wait for a response from a stuck client.
• 🚫 Blocking: Temporarily ban the MAC address of a device if it tries to connect with a signal that is too weak.

⚠️ Caution: Setting the RSSI threshold too high (e.g., -60 dBm) may cause devices in areas with natural signal attenuation (thick walls, bathrooms) to constantly disconnect and become inoperable. Adjust this setting carefully when testing coverage.

Comparison of Mesh systems and traditional controllers

When building a network with roaming support, there is often a choice between specialized controllers (based on UniFi, Omada, MikroTik) and ready-made Mesh systems (Keenetic, TP-Link Deco, Google Nest). Both approaches use roaming policy, but they implement it in different ways.

Controller solutions provide granular control. You can adjust transmitter power for each point individually, define complex load balancing rules, and view detailed analytics. This is the choice for enthusiasts and businesses where stability and flexibility are essential. However, such systems require time to learn and configure.

Mesh systems operate on a plug-and-play principle. They automatically select optimal channels, reassign clients, and often use a dedicated radio channel (backhaul) for communication between nodes, freeing up the primary spectrum for clients. Roaming is configured out of the box and often works even better than in the hands of an inexperienced controller administrator.

The main difference lies in the decision-making logic. In mesh systems, algorithms are often more aggressive in switching clients, since the entire network is unified. In traditional AP (Access Point) systems, each point can operate more autonomously if the controller is unavailable.

Roaming quality diagnostics and testing

How to know if it works roaming policy WiFi on your network? Just walking around with your phone isn't enough. You'll need monitoring tools. On Android, an app is a great solution. Wi-Fi Man from Ubiquiti or Wifi AnalyzerOn iOS, the capabilities are limited due to Apple's policies, but you can use Engineer Mode or specialized Mac utilities such as WiFi Explorer.

During the test, pay attention to the RSSI (signal strength) and SNR (signal-to-noise ratio). Walk along the route where switching typically occurs. Ideally, you should see a smooth change in signal strength, without any sudden drops to zero. If the graph shows a "saw-tooth" (a sharp drop and rise), it means the device disconnected and reconnected, not roamed.

It's also helpful to check your ping time while moving. Run a continuous ping to your gateway (ping 192.168.1.1 -t (on Windows). With ideal roaming, you may notice a slight increase in latency (jitter), but no packet loss (request timeout). Even one or two packet losses indicate a connection failure.

Pay attention to your router logs. Professional equipment has a "System Log" or "Wireless Log" section that records client association and disassociation events. Look for entries for "Deauthenticated" or "Disassociated" with reason codes. Code 3 usually means the access point disconnected the client due to roaming policy.

⚠️ Note: Interfaces and menu item names may vary depending on your router's firmware version. Always consult the manufacturer's official documentation for your specific router model.

Frequently Asked Questions (FAQ)