WiFi 漫遊與切換 (802.11r/k/v)：企業部署指南

802.11r (Fast BSS Transition)

一種 WiFi 標準，透過快取 PMK 金鑰 (PMK-R0 和 PMK-R1) 來減少漫遊期間的驗證開銷，從而免除完整的 802.1X EAP 重新驗證需求。

用於跨基地台快速無線用戶端切換的 IEEE 修正案。

802.11k (Radio Resource Measurement)

一種為用戶端設備提供最佳化鄰近 AP 回報清單的標準，可免除漫遊期間耗時的全頻譜掃描。

可實現智慧網路偵測與鄰近 AP 回報的 IEEE 修正案。

802.11v (BSS Transition Management)

一種允許網路控制器根據通道負載、訊號強度和網路拓撲，建議或導引用戶端設備漫遊至特定基地台的標準。

允許網路導引戶端與進行電源管理的 IEEE 修正案。

Sticky Client (黏性用戶端)

儘管用戶端設備已移動到訊號品質與吞吐量顯著更佳的 AP 附近，卻仍持續連接著距離遙遠、訊號微弱之基地台的現象。

導致效能下降的常見無線用戶端行為。

Mobility Domain (行動網域)

共用同一個行動網域識別碼 (MDID) 和金鑰分發架構的基地台邏輯群組，可在用戶端漫遊期間實現快速金鑰交換。

802.11r 快速 BSS 切換所需的配置參數。

Passpoint (Hotspot 2.0)

一種產業標準，可使用 EAP-TLS 設定檔和行動網路漫遊憑證，自動將裝置安全地導入到 WPA2/WPA3-Enterprise 網路中。

用於自動化企業存取的 WiFi 聯盟標準。

What is the difference between 802.11k, 802.11v, and 802.11r in enterprise WiFi roaming?

802.11k provides neighbor reports so the client only scans known adjacent AP channels rather than sweeping the entire RF spectrum. 802.11v (BSS Transition Management) allows the network to steer sticky clients toward uncongested frequency bands and closer access points. 802.11r (Fast BSS Transition) eliminates the full 802.1X/RADIUS or 4-way PSK handshake during handoff by caching encryption keys on neighboring APs, reducing roaming latency from 200-1200 ms down to under 50 ms.

Why do legacy or non-compliant client devices struggle with 802.11r Fast BSS Transition?

Older client chipsets or operating systems that lack standard 802.11r support can misinterpret the Mobility Domain Information Element (MDIE) advertised in AP beacon frames and probe responses, causing association failures or connection refusal. Best practice is to enable adaptive 802.11r or maintain a secondary legacy SSID without FT for legacy barcode scanners, printers, and older IoT hardware while reserving FT for modern mobile devices and VoIP handsets.

How does fast roaming prevent captive portal re-authentication prompts in guest networks?

Without centralized session management, each AP handoff treats the roaming guest as a new unauthenticated client, repeatedly triggering the captive portal mini-browser sheet. Enterprise guest platforms like Purple synchronize MAC authentication state and session tokens across the entire mobility domain or wireless controller cluster in real time. When the guest roams between APs, the target AP immediately verifies the active token with Purple, bypassing the captive portal seamlessly.

What is the difference between 802.11r FT over-the-Air and FT over-the-DS?

In FT over-the-Air, the client communicates directly with the target AP using Fast Transition Authentication frames over the wireless RF medium before breaking its connection with the original AP. In FT over-the-DS (Distribution System), the client tunnels its FT authentication frames through the currently associated AP across the wired ethernet backbone to the target AP. While FT over-the-DS allows authentication without switching RF channels, FT over-the-Air is far more widely supported by client device drivers and operating systems.

What RSSI thresholds and RF overlap parameters optimize roaming and eliminate sticky clients?

Reliable roaming requires a cell boundary overlap of approximately 15% to 20% between adjacent APs, typically designed around -65 dBm to -67 dBm for 5 GHz and 6 GHz voice/video coverage. When a client received signal strength indicator (RSSI) drops below -70 dBm to -72 dBm, 802.11v BTM steering frames prompt the device to initiate a handoff. Setting transmit power symmetrically between APs and clients prevents asymmetric links where a client can hear an AP but the AP cannot hear the client low-power transmissions.