802.11r with iPhones

Hi,

Just wondering if anybody has used 802.11r (FT) with iPhones, iPads and MacOS. I have problem sometimes where these lost connection and they couldn't connect until I reboot the devices (iphones, not the router). If so, do you have any solutions...

Please explain better your setup.... did you have multiple AP with same SSID and your iPhones fails when going from on site to another?

802.11r (FT), so yes, I have multiple AP with same SSID and password. And I have already explained, "I have problem sometimes where these lost connection and they couldn't connect until I reboot the devices (iphones, not the router)" .

Hi there
I have set up the 802.11r in my network and I didn't see any problem with iPhone, BUT now I am really not sure I was really using a valid 802.11r since the AP SSID are different. Does 802.11r require that the SSID are the same (with same authentication also)?

My understanding is that it must. Try doing a file transfer (windows file copy or smb file copy) and move from the first AP towards the 2nd, the file tranfer should continue although the speed should slow down. If 802.11r is not enabled, the file copy should fail. Below is the file transfer when it's working. My iphone (or rather everybody else's iphone and ipad) roamings works but seems to have problem if the devices goes to "sleep" and then come back on, or if they are away outside the range for some time and then come back within range.. I think the Apple devices try to do a "FT" whereas the AP decides that they need to do a full authentication, and that caused the problem.

I have set same SSID and password, but I can confirm that it is not working. The SSID correctly report FT (with WiFi analyzer on Android), but there is no roaming, Android client keep the connection to the AP till very low and bad signal, then it just drop and reauthenticate with the new. Can I take the chance to ask one thing? Is it enough the LUCI page for configuring a working 802.11r or some manual addiction via UCI are required? One doubt I have is that I have multiple SSID on the same radio, wondering if it could be a problem

1 Like

Do a screenshot of BOTH your router/AP configuration. specifically,
Interface Configuration -> Wireless Security , the configuration from 802.11r Fast Transition onward. Maybe another set of eyes will help. Please note that both AP should be on the same LAN and I use the LAN interfaces instead of the WAN.

Hi
Thank you for the help :slight_smile:
This is the screenshot I have taken from one of the WiFi, on one of the (3) AP I want to configure in FT

Also this is the /etc/config/wireless portion of this SSID

    config wifi-iface
    option device 'radio0'
    option mode 'ap'
    option ssid 'MenionWiFi'
    option network 'lan'
    option encryption 'psk2'
    option key 'xxxxxxxxx'
    option ieee80211r '1'
    option nasid 'C8D7192337CD'
    option mobility_domain 'e6e6'
    option r1_key_holder 'C8D7192337CD'
    option pmk_r1_push '1'
    option disassoc_low_ack '1'
    list r0kh 'C8:D7:19:23:37:CD,C8D7192337CD,8a7fcc976ed1691ff2809e1f39c16996'
    list r0kh 'C8:D7:19:23:37:CF,C8D7192337CF,8a7fcc976ed1691ff2809e1f39c16996'
    list r0kh 'C4:6E:1F:08:9D:0B,C46E1F089D0B,8a7fcc976ed1691ff2809e1f39c16996'
    list r0kh 'C6:6E:1F:08:9D:0C,C66E1F089D0C,8a7fcc976ed1691ff2809e1f39c16996'
    list r0kh 'A4:2B:B0:D9:4B:39,A42BB0D94B39,8a7fcc976ed1691ff2809e1f39c16996'
    list r0kh 'A6:2B:B0:D9:4B:38,A62BB0D94B38,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'C8:D7:19:23:37:CD,C8:D7:19:23:37:CD,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'C8:D7:19:23:37:CF,C8:D7:19:23:37:CF,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'C4:6E:1F:08:9D:0B,C4:6E:1F:08:9D:0B,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'C6:6E:1F:08:9D:0C,C6:6E:1F:08:9D:0C,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'A4:2B:B0:D9:4B:39,A4:2B:B0:D9:4B:39,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'A6:2B:B0:D9:4B:38,A6:2B:B0:D9:4B:38,8a7fcc976ed1691ff2809e1f39c16996'

One think I want to double check: the MAC address in the R0k/Rk strings are the MAC address of the WiFi interfaces and NOT the MAC address of the AP's LANs right?
And yes, all the AP are on the same network and subnet, they can perfectly ping each other.

Do the other screenshot, I would compare them side by side to see if there are any mistakes. It's likely typo mistakes if any.

Here you have it:

and the config:

config wifi-iface
    option device 'radio0'
    option mode 'ap'
    option ssid 'MenionWiFi'
    option network 'lan'
    option encryption 'psk2'
    option key 'xxxxxxxxx'
    option disassoc_low_ack '1'
    option ieee80211r '1'
    option nasid 'C46E1F089D0B'
    option mobility_domain 'e6e6'
    option r1_key_holder 'C46E1F089D0B'
    option pmk_r1_push '1'
    list r0kh 'C8:D7:19:23:37:CD,C8D7192337CD,8a7fcc976ed1691ff2809e1f39c16996'
    list r0kh 'C8:D7:19:23:37:CF,C8D7192337CF,8a7fcc976ed1691ff2809e1f39c16996'
    list r0kh 'C4:6E:1F:08:9D:0B,C46E1F089D0B,8a7fcc976ed1691ff2809e1f39c16996'
    list r0kh 'C6:6E:1F:08:9D:0C,C66E1F089D0C,8a7fcc976ed1691ff2809e1f39c16996'
    list r0kh 'A4:2B:B0:D9:4B:39,A42BB0D94B39,8a7fcc976ed1691ff2809e1f39c16996'
    list r0kh 'A6:2B:B0:D9:4B:38,A62BB0D94B38,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'C8:D7:19:23:37:CD,C8:D7:19:23:37:CD,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'C8:D7:19:23:37:CF,C8:D7:19:23:37:CF,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'C4:6E:1F:08:9D:0B,C4:6E:1F:08:9D:0B,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'C6:6E:1F:08:9D:0C,C6:6E:1F:08:9D:0C,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'A4:2B:B0:D9:4B:39,A4:2B:B0:D9:4B:39,8a7fcc976ed1691ff2809e1f39c16996'
    list r1kh 'A6:2B:B0:D9:4B:38,A6:2B:B0:D9:4B:38,8a7fcc976ed1691ff2809e1f39c16996'

As mentioned there are 3 AP in the mesh. You see 6 MAC because these APs are dual band, so I wanted to set the FT between 2.4/5 Ghz radio also

Use either 5 Ghz or 2.4 Ghz, not both in the same domain (its suppose to work). I've attached mine. I use Archer C7 optimized firmware but I've tested with standard firmware. Make sure you update the full wpad. Make sure the formats are all correct. Copy and paste as much as possible instead of typing.

My third AP is an Archer C7 as well, the other are a WDR3600 and a Linksys EA4500.
The 2.4 and 5 are in the same ESS (same SSID) but I have read it should work
The differences are that I run hostapd full instead of wpad full, but wpad should be a OpenWRT/LEDE way to compile the same hostapd source together with wpa_supplicant to provide a smaller image, and that I have more SSID on the same radio....
I will try to switch to wpad-full and overnight disable the other SSID and check
Meanwhile thanks

Are you using LAN or LAN interface ? I'm using LAN , too lazy to put the WAN interface into the LAN zone. Also, I locked down on all optional values. Including Cipher. I checked. I'm using wpad full and also., I do have other SSID with FT disabled. My understanding is that you can have 2.4 and 5Ghz in same SSID but I don't see the benefits and so I've one SSID and mobility domain for 2.4 and another for 5Ghz.

The 3 AP use only LAN, same network and subnet. Only the EA4500 use WAN towards my ISP for providing internet connection. If you need to use the WAN port as a 5th LAN port, there is no need to bridge/put WAN in LAN, in is enough to set the WAN VLAN id to the same of the LAN VLAN

Change your Cipher to AES.

Ok, I will try this also

Have you changed the default of disalloc_low_ack peraphs?

I unselected that option. Couldn't remember why I did that. :slight_smile:

can you paste the /etc/config/wireless relevant section from you AP?

I have implemented the suggested modification, but still I cannot roam
But it could be a client issue, I will try with a Windows laptop and others.
Bye