Update 02.09.2020: use Luci-app-dawn instead and enable 802.11r, v and k using the CLI:
uci set wireless.default_radio0.ieee80211v=1; uci set wireless.default_radio0.ieee80211k=1; uci set wireless.default_radio0.bss_transition=1; uci commit
Well it is more or less still correct. Remove wpad-basic and install the full wpad (wpad or wpad-full), then enable 802.11r, configure the nas id similar on all devices and set the "Generate PMK locally"-option and you're ready to go.
@zorrua After you click the checkbox next to 802.11r (like you already did) - 802.11r just works right out of the box. Enjoy!
No need to do anything further with any of those additional options. Those advanced options are for advanced configuration and don’t apply for most people after these commits:
# opkg list | grep wpad
wpad - 2019-08-08-ca8c2bd2-4 - This package contains a full featured IEEE 802.1x/WPA/EAP/RADIUS Authenticator and Supplicant
wpad-basic - 2019-08-08-ca8c2bd2-4 - This package contains a basic IEEE 802.1x/WPA Authenticator and Supplicant with WPA-PSK, 802.11r and 802.11w support.
wpad-mesh-openssl - 2019-08-08-ca8c2bd2-4 - This package contains a minimal IEEE 802.1x/WPA Authenticator and Supplicant (with 802.11s mesh and SAE support).
wpad-mesh-wolfssl - 2019-08-08-ca8c2bd2-4 - This package contains a minimal IEEE 802.1x/WPA Authenticator and Supplicant (with 802.11s mesh and SAE support).
wpad-mini - 2019-08-08-ca8c2bd2-4 - This package contains a minimal IEEE 802.1x/WPA Authenticator and Supplicant (WPA-PSK only).
wpad-openssl - 2019-08-08-ca8c2bd2-4 - This package contains a full featured IEEE 802.1x/WPA/EAP/RADIUS Authenticator and Supplicant
wpad-wolfssl - 2019-08-08-ca8c2bd2-4 - This package contains a full featured IEEE 802.1x/WPA/EAP/RADIUS Authenticator and Supplicant