Roaming Issue

[Saravana_inflow]

Hi. one of customer deploy the AP7632  in three floors. here using totally 15 Access Point. when roaming its not work properly. Eg. first Client connected to the ground floor AP, after he is moving to first floor. in that time client have some disturbing. once if we reconnect its work fine. please Suggest what did i mistake. I shared the Configuratioin backup.

---------------------------------------------------------------------------------------------------------------------------------------------------------------------

!
! Configuration of AP7632 version 5.9.1.2-006R
!
!
version 2.5
!
!
client-identity-group default
 load default-fingerprints
!
ip access-list BROADCAST-MULTICAST-CONTROL
 permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic"
 permit udp any eq 67 any eq dhcpc rule-precedence 11 rule-description "permit DHCP replies"
 deny udp any range 137 138 any range 137 138 rule-precedence 20 rule-description "deny windows netbios"
 deny ip any 224.0.0.0/4 rule-precedence 21 rule-description "deny IP multicast"
 deny ip any host 255.255.255.255 rule-precedence 22 rule-description "deny IP local broadcast"
 permit ip any any rule-precedence 100 rule-description "permit all IP traffic"
!
mac access-list PERMIT-ARP-AND-IPv4
 permit any any type ip rule-precedence 10 rule-description "permit all IPv4 traffic"
 permit any any type arp rule-precedence 20 rule-description "permit all ARP traffic"
!
ip snmp-access-list default
 permit any
!
firewall-policy default
 no ip dos tcp-sequence-past-window
 no stateful-packet-inspection-l2
 ip tcp adjust-mss 1400
!
!
mint-policy global-default
!
wlan-qos-policy default
 qos trust dscp
 qos trust wmm
!
radio-qos-policy default
 admission-control best-effort max-roamed-clients 256
 admission-control best-effort max-airtime-percent 100
 admission-control best-effort reserved-for-roam-percent 120
 accelerated-multicast overflow-policy revert
!
wlan Tamara-SSID
 description 173 Residence
 ssid "173 Residence"
 vlan 1
 bridging-mode local
 encryption-type ccmp
 authentication-type none
 wireless-client inactivity-timeout 54000
 fast-bss-transition
 wpa-wpa2 psk 0 12345678
 data-rates 2.4GHz custom 1 2 5.5 6 9 11 12 18 24 36 48 54 basic-mcs-1s mcs-2s mcs-3s
 data-rates 5GHz custom 6 9 12 18 24 36 48 54 basic-mcs-1s mcs-2s mcs-3s mcs-4s
!
smart-rf-policy default
 group-by area
 group-by floor
 sensitivity custom
 assignable-power 5GHz max 18
 assignable-power 5GHz min 10
 assignable-power 2.4GHz max 18
 assignable-power 2.4GHz min 10
 channel-width 5GHz 80MHz
 smart-ocs-monitoring frequency 5GHz 3
 smart-ocs-monitoring frequency 2.4GHz 3
 smart-ocs-monitoring sample-count 5GHz 3
 smart-ocs-monitoring sample-count 2.4GHz 3
 smart-ocs-monitoring extended-scan-frequency 5GHz 0
 smart-ocs-monitoring extended-scan-frequency 2.4GHz 0
 interference-recovery client-threshold 255
 interference-recovery channel-switch-delta 5GHz 5
 interference-recovery channel-switch-delta 2.4GHz 5
 neighbor-recovery power-threshold 5GHz -75
 neighbor-recovery power-threshold 2.4GHz -75
 coverage-hole-recovery interval 5GHz 15
 coverage-hole-recovery interval 2.4GHz 15
 coverage-hole-recovery coverage-interval 5GHz 5
 coverage-hole-recovery coverage-interval 2.4GHz 5
 interference-recovery channel-hold-time 180
 neighbor-recovery dynamic-sampling retries 2
!
radius-server-policy default
!
!
management-policy default
 telnet
 no http server
 https server
 rest-server
 ssh
 user admin password 1 3e0751ee8ed851b4bdb138bf733e4fcdd5360464943342376b5f333fedba94e0 role superuser access all
 snmp-server community 0 private rw
 snmp-server community 0 public ro
 snmp-server user snmptrap v3 encrypted des auth md5 0 admin123
 snmp-server user snmpmanager v3 encrypted des auth md5 0 admin123
!
event-system-policy default
!
profile ap7632 default-ap7632
 autoinstall configuration
 autoinstall firmware
 crypto ikev1 policy ikev1-default 
  isakmp-proposal default encryption aes-256 group 2 hash sha 
 crypto ikev2 policy ikev2-default 
  isakmp-proposal default encryption aes-256 group 2 hash sha 
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 crypto ikev1 remote-vpn
 crypto ikev2 remote-vpn
 crypto auto-ipsec-secure
 crypto load-management
 crypto remote-vpn-client
 interface radio1
  wlan Tamara-SSID bss 1 primary
  aggregation ampdu max-aggr-size tx 55535
  antenna-mode 3x3
 interface radio2
  channel 161ww
  data-rates custom 6 9 12 18 24 36 48 54 basic-mcs-1s mcs-2s
  wlan Tamara-SSID bss 1 primary
  antenna-gain 15.0
  aggregation ampdu max-aggr-size tx 65535
  antenna-mode 3x3
  antenna-diversity
  airtime-fairness prefer-ht weight 10
 interface bluetooth1
  shutdown
 interface ge1
 interface vlan1
  ip address 192.168.101.3/23
  ip dhcp client request options all
 use firewall-policy default
 use client-identity-group default
 virtual-controller management-interface ip address 192.168.101.3/24
 rf-domain-manager capable
 logging on
 service pm sys-restart
 router ospf
 traffic-shape class 1 rate 1000 Mbps
 traffic-shape total-bandwidth 1000 Mbps
 traffic-shape enable
 adoption-mode controller
!
rf-domain default
 location "Bruntton Road"
 contact Tamara
 timezone Asia/Calcutta
 country-code in
 use smart-rf-policy default
 channel-list dynamic
!
ap7632 B4-2D-56-8A-88-7C
 use profile default-ap7632
 use rf-domain default
 hostname Near-Kitchen
 interface vlan1
  ip address 192.168.101.4/24
!
ap7632 B4-2D-56-8A-92-6D
 use profile default-ap7632
 use rf-domain default
 hostname First-Floor-Master-Room
 interface vlan1
  ip address 192.168.101.5/24
!
ap7632 B4-2D-56-8A-99-07
 use profile default-ap7632
 use rf-domain default
 hostname First-Floor-Kids-Room
 interface vlan1
  ip address 192.168.101.6/24
!
ap7632 B4-2D-56-8A-99-61
 use profile default-ap7632
 use rf-domain default
 hostname 2nd-Floor-Guest-Bed-Room
 interface vlan1
  ip address 192.168.101.7/24
!
ap7632 B4-2D-56-8A-9B-78
 use profile default-ap7632
 use rf-domain default
 hostname MZ-Floor-Cabin-2
 interface vlan1
  ip address 192.168.101.8/24
!
ap7632 B4-2D-56-8A-9C-6D
 use profile default-ap7632
 use rf-domain default
 hostname Gnd-Floor-Room-1
 interface vlan1
  ip address 192.168.101.9/24
!
ap7632 B4-2D-56-8A-9D-BC
 use profile default-ap7632
 use rf-domain default
 hostname Server-Room
 interface vlan1
  ip address 192.168.101.3/24
 virtual-controller
 rf-domain-manager capable
 adoption-mode controller
!
ap7632 B4-2D-56-8A-9D-CB
 use profile default-ap7632
 use rf-domain default
 hostname Gym
 interface vlan1
  ip address 192.168.101.10/24
!
ap7632 B4-2D-56-8A-9D-DF
 use profile default-ap7632
 use rf-domain default
 hostname MZ-Floor_Cabin-1
 interface vlan1
  ip address 192.168.101.11/24
!
ap7632 B4-2D-56-8A-9D-E9
 use profile default-ap7632
 use rf-domain default
 hostname ap7632-8A9DE9
 interface vlan1
  ip address 192.168.101.12/24
!
ap7632 B4-2D-56-8A-9D-FD
 use profile default-ap7632
 use rf-domain default
 hostname Master-Room-Entrance
 interface vlan1
  ip address 192.168.101.18/24
!
ap7632 B4-2D-56-8A-9E-11
 use profile default-ap7632
 use rf-domain default
 hostname First-Floor-Kids-Play-Room
 interface vlan1
  ip address 192.168.101.14/24
!
ap7632 B4-2D-56-8A-9E-89
 use profile default-ap7632
 use rf-domain default
 hostname ap7632-8A9E89
 interface vlan1
  ip address 192.168.101.15/24
!
ap7632 B4-2D-56-8A-D7-C8
 use profile default-ap7632
 use rf-domain default
 hostname Gnd-FLoor-Sitting-Area
 interface vlan1
  ip address 192.168.101.16/24
!
ap7632 B4-2D-56-8A-DA-84
 use profile default-ap7632
 use rf-domain default
 hostname Gnd-Floor_Room-2
 interface vlan1
  ip address 192.168.101.17/24
!
!
end
 

[ckelly]

In the AP’s main Profile, for the radios, you have this

interface radio2
  channel 161ww
  data-rates custom 6 9 12 18 24 36 48 54 basic-mcs-1s mcs-2s
  wlan Tamara-SSID bss 1 primary
  antenna-gain 15.0
  aggregation ampdu max-aggr-size tx 65535
  antenna-mode 3x3
  antenna-diversity
  airtime-fairness prefer-ht weight 10

• Do you REALLY have a 15dBi gain antenna attached to these APs?
• Also, the 7632 is not a 3x3 AP.  It’s 2x2.
• You have also enabled antenna diversity, which is not needed and should be disabled as per best practices.
• I’d suggest not using an 80MHz wide channel.  Use 20MHz or 40MHz
• If AP coverage is good, recommend using these data rate settings
  • data-rates 5GHz custom basic-12 18 basic-24 36 48 54 basic-mcs-1s mcs-2s

On the 2.4GHz radio, you have:

 interface radio1
  wlan Tamara-SSID bss 1 primary
  aggregation ampdu max-aggr-size tx 55535
  antenna-mode 3x3

• Again, remove the 3x3 antenna-mode setting.
• Again, if AP coverage is good, recommend these data rate settings:
  • data-rates 2.4GHz custom basic-12 basic-24 36 48 54 basic-mcs-1s mcs-2s
                 

In the SmartRF Policy, you have:

smart-rf-policy default
 group-by area
 group-by floor
 sensitivity custom
 assignable-power 5GHz max 18
 assignable-power 5GHz min 10
 assignable-power 2.4GHz max 18
 assignable-power 2.4GHz min 10
 channel-width 5GHz 80MHz
 smart-ocs-monitoring frequency 5GHz 3
 smart-ocs-monitoring frequency 2.4GHz 3
 smart-ocs-monitoring sample-count 5GHz 3
 smart-ocs-monitoring sample-count 2.4GHz 3
 smart-ocs-monitoring extended-scan-frequency 5GHz 0
 smart-ocs-monitoring extended-scan-frequency 2.4GHz 0
 interference-recovery client-threshold 255
 interference-recovery channel-switch-delta 5GHz 5
 interference-recovery channel-switch-delta 2.4GHz 5
 neighbor-recovery power-threshold 5GHz -75
 neighbor-recovery power-threshold 2.4GHz -75
 coverage-hole-recovery interval 5GHz 15
 coverage-hole-recovery interval 2.4GHz 15
 coverage-hole-recovery coverage-interval 5GHz 5
 coverage-hole-recovery coverage-interval 2.4GHz 5
 interference-recovery channel-hold-time 180
 neighbor-recovery dynamic-sampling retries 2

• Recommend changing the channel width to 20 or 40MHz
• Recommend changing the sensitivity from “custom” and just use “medium” setting.

In the WLAN Profile, you have:

wlan Tamara-SSID
 description 173 Residence
 ssid "173 Residence"
 vlan 1
 bridging-mode local
 encryption-type ccmp
 authentication-type none
 wireless-client inactivity-timeout 54000
 fast-bss-transition
 wpa-wpa2 psk 0 12345678
 data-rates 2.4GHz custom 1 2 5.5 6 9 11 12 18 24 36 48 54 basic-mcs-1s mcs-2s mcs-3s
 data-rates 5GHz custom 6 9 12 18 24 36 48 54 basic-mcs-1s mcs-2s mcs-3s mcs-4s

• Recommend disabling the ‘fast-bss-transition’ setting.  This might be the cause of the problem your clients are having roaming.  Some clients do not properly handle 802.11r.

[Christoph_S]

In addition to the above, here’s an article with some settings you may want to look at:

Recommended settings

Moreover, try grouping APs by floor per this article:

Group APs by floor

If trying this, please remove the ‘group-by area’ setting from the smart-rf policy. 

I noticed that you’ve configured on channel on the 5GHz radio in the AP profile used by all APs: 

 interface radio2
  channel 161ww
  data-rates custom 6 9 12 18 24 36 48 54 basic-mcs-1s mcs-2s
  wlan Tamara-SSID bss 1 primary

Please remove this setting and have smart-rf handle channel distribution per what is configured in the smart-rf rf policy. 

[RobertZ]

Please upgrade to WiNG 5.9.6.0 and retest, we addressed many client connectivity issues in previous releases. 

WiNG 5.9.6.0-007R Release Notes

5.9.6.0.007R

[vanelm]

Also start with default rates before tuning. I think basic-mcs-1s is too optimistic for your environment..

Misha