Skip to main content

Documentation Index

Fetch the complete documentation index at: https://wiki.netgraph-connect.com/llms.txt

Use this file to discover all available pages before exploring further.

Fast Transition (802.11r) is designed to optimise roaming between access points through faster handoffs and pre-authentication. While beneficial in enterprise settings with VoIP and video calls, it can create problems on guest networks with a diverse device mix — older Android phones, non-updated iOS devices and IoT equipment. These devices may not fully support or expect 802.11r behaviour, leading to connection failures and authentication issues.

​
Problem symptoms

When Fast Transition is enabled on a guest WLAN, several issues can occur:
  • Android devices may fail to connect or get stuck during association.
  • Some devices connect and then immediately disconnect.
  • Authentication attempts may loop without success, especially on open or web-auth networks.
  • Devices may fall back to 802.11b/g mode or display authentication errors.

​
Why does it happen?

The root causes include:
  • Some devices incorrectly implement 802.11r or don’t recognise Fast Transition features.
  • Guest networks typically use open or web-auth security rather than PSK/EAP, which complicates FT behaviour.
  • Inconsistent 802.11r support across device types creates unpredictable behaviour.
  • Older clients may ignore FT information elements and fail to negotiate properly.
Disable 802.11r (Fast Transition) on guest and public WLANs unless you have a controlled client environment. Enable it only for secure WPA2-Enterprise or WPA3-Enterprise networks used internally for employee Wi-Fi.

​
Summary

While Fast Transition offers roaming benefits, disabling it on guest SSIDs improves device compatibility, reduces authentication errors and ensures a smoother onboarding experience for everyone.

Improving captive-portal detection for iOS

DHCP Addr. Required on Cisco WLC guest SSIDs.

MAC randomization in Apple products

iOS 18 / macOS 15 MAC handling for the same fleet.

Support checklist

The full triage path for guest-access incidents.

Sign In Module issues

Module-specific failure modes.