A Comprehensive Guide to Wi-Fi Roaming

In today’s hyper-connected world, seamless Wi-Fi connectivity is a critical requirement for both individuals and businesses. As users move through spaces covered by multiple Wi-Fi access points (APs), the ability to maintain uninterrupted connections is essential. This is where Wi-Fi Roaming comes into play. In this blog, we'll dive into the various types of Wi-Fi roaming techniques, explore their high-level functionalities, and understand their importance in ensuring seamless connectivity.

What is Wi-Fi Roaming?

Wi-Fi roaming refers to the ability of a wireless device, like a smartphone or laptop, to automatically switch from one access point (AP) to another within the same network without losing its connection. This process allows you to move freely within a large area, such as an office building, shopping mall, or airport, while maintaining an uninterrupted connection to the internet or internal network services.

Why is Wi-Fi Roaming Important?

Seamless Connectivity:

Roaming ensures that your device remains connected to the network as you move from one location to another. Without it, you would experience frequent disconnections and the need to manually reconnect to the network each time you move out of an AP's range.

User Experience:

For applications like VoIP calls, video conferencing, or online gaming, even a brief disconnection can lead to significant disruptions. Roaming helps maintain a smooth user experience by transitioning between APs without noticeable interruptions.

Optimized Network Performance:

Roaming allows for better distribution of devices across multiple APs, preventing any single AP from becoming overloaded. This optimizes the overall performance of the wireless network, ensuring faster speeds and lower latency for all users.

Enterprise and Large-Scale Networks:

In large-scale environments like corporate offices, universities, or hotels, a single AP cannot cover the entire area. Roaming enables devices to switch between multiple APs, providing consistent coverage across vast spaces.

How Does Wi-Fi Roaming Work?

Scanning:

As you move, your device continually scans for available APs. This scanning is either passive, where the device listens for AP signals, or active, where the device sends out probes to discover APs.

Roaming Decision:

Based on signal strength, quality, and other factors, the device decides when to switch from its current AP to a new one. Factors influencing this decision include Received Signal Strength Indicator (RSSI), AP load, and configured thresholds.

Authentication:

Once the device selects a new AP, it must authenticate itself. This process varies depending on the network's security protocols (e.g., WPA2, WPA3). In some cases, the device can use cached credentials to speed up the process.

Reassociation:

The device disassociates from the old AP and reassociates with the new one. This reassociation is quick, often happening in milliseconds, to minimize any perceived disconnection.

Handover:

During the handover, the device transfers the active session (e.g., a video call or file download) to the new AP. In a well-optimized network, this handover is seamless, with no noticeable impact on the user.

Types of Roaming:

1. Basic Roaming

What is Basic Roaming?

Basic Roaming is the simplest form of Wi-Fi roaming and also known as “Layer-2 Roaming”. It occurs when a client device (like a smartphone, laptop, or tablet) moves out of the range of one AP and connects to another AP with a stronger signal within the same wireless network.

How Basic Roaming Works:

• RSSI Threshold: As the client device moves, it continuously monitors the Received Signal Strength Indicator (RSSI) of the connected AP. When the RSSI drops below a certain threshold (e.g., -75 dBm), the device begins scanning for a stronger signal from another AP.
• Authentication Process: Once the device identifies a new AP with a stronger signal, it initiates the re-authentication process, which includes the full WPA2 four-way handshake. This process involves:
• IP Address Consideration: The client may also need to renew its IP address, especially if the network’s DHCP server has issued a different IP range for the new AP.
• Reconnection Delay: This process may cause a brief disconnection, typically lasting a few hundred milliseconds, which could disrupt real-time applications like video calls or streaming.

Example:

Consider a person walking through an office building while on a VoIP call. As they move farther from the current AP, the signal weakens, and their device begins the re-authentication process with a nearby AP. This could result in a brief glitch in the call.

PCAP Analysis:

• Decreasing signal strength (RSSI) of the initial AP.
• Authentication frames exchanged between the client and the new AP.
• The four-way handshake for establishing a new encrypted session.
• Possible DHCP renewal requests.

2. PMKID Caching Roaming

What is PMKID Caching?

PMKID Caching is a method designed to speed up the re-authentication process when a client device roams back to an AP it has previously connected to within the same session.

How PMKID Caching Works:

• Pairwise Master Key Identifier (PMKID): When a client first connects to an AP, a Pairwise Master Key (PMK) is generated and associated with a PMKID, which is stored by both the client and the AP.
• Roaming Process:

Example:

Imagine you are moving back and forth between your office and a meeting room, each covered by different APs. With PMKID caching, when you return to your office, your device reconnects to the original AP almost immediately without going through the full authentication process again.

PCAP Analysis:

• A quicker re-association process.
• The exchange of PMKID instead of a full authentication handshake.
• Absence of a new four-way handshake, indicating faster re-connection.

3. Preauthentication

What is Preauthentication?

Preauthentication is a proactive roaming method that allows a client to authenticate with neighbouring AP's before the actual roaming event occurs, reducing the delay during the transition.

How Preauthentication Works:

• Proactive Authentication: While still connected to the current AP, the client starts the authentication process with one or more neighbouring APs.
• Pre-authentication Frames: The client exchanges pre-authentication frames with the neighbouring APs. If successful, the APs store the client's credentials for a future association.
• Seamless Handoff: When the client eventually roams to one of the preauthenticated APs, it can skip the full authentication process, resulting in a faster and more seamless transition.

Example:

In a large conference room with multiple APs, preauthentication ensures that your device can roam seamlessly between different APs as you move around, without losing your connection.

PCAP Analysis:

• Preauthentication frames sent by the client to multiple neighboring APs while still connected to the current AP.
• Absence of authentication delays when the client finally roams to a preauthenticated AP.

4. OKC (Opportunistic Key Caching)

What is OKC?

Opportunistic Key Caching (OKC) is a technique that allows a client to roam between APs in the same network without performing a full re-authentication, by sharing keying material across APs.

How OKC Works:

• Key Caching Across APs: When a client connects to an AP, a master key is generated. This key is cached and shared among other APs in the network.
• Opportunistic Reconnection: As the client roams, the new AP can use the cached key to quickly authenticate the client without needing to perform the full WPA2 four-way handshake again.
• Reduced Latency: This significantly reduces the time needed to roam, making the process almost seamless.

Example:

In a corporate environment with a large number of APs, OKC allows employees to move freely around the office without experiencing dropped connections, even during high-bandwidth activities like video conferencing.

PCAP Analysis:

• The initial full authentication and key exchange when the client connects to the first AP.
• Subsequent re-associations with other APs using cached keys, without a full authentication handshake.

5. Fast Roaming (802.11r)

What is Fast Roaming (802.11r)?

Fast Roaming, introduced under the IEEE 802.11r standard, is designed to reduce the time it takes for a client to roam between APs by streamlining the authentication process.

How Fast Roaming Works:

• Fast BSS Transition (FT): Fast Roaming allows clients to transition between Basic Service Sets (BSS) within the same Mobility Domain (a group of APs) with minimal delay.
• Mobility Domain Information: The APs share a Mobility Domain Identifier (MDID), allowing the client to roam with pre-established security contexts.
• Key Caching and Handoff: During the initial connection, the client and AP establish a set of keys that can be reused when roaming. The handoff process involves only a few packets, significantly reducing the latency.

Example:

Fast Roaming is particularly useful in environments where uninterrupted service is critical, such as hospitals or large event spaces. For instance, medical staff moving between different wings of a hospital can rely on Fast Roaming to maintain continuous connectivity for real-time data access.

PCAP Analysis:

• The initial association and key exchange process during the first connection.
• Reduced packet exchange during subsequent roaming events within the same Mobility Domain, indicating a faster handoff.

6. 802.11k (Radio Resource Management)

What is 802.11k?

802.11k is a standard that enables clients to gather and share information about the radio environment with the AP, facilitating more intelligent and efficient roaming decisions.

How 802.11k Works:

• Neighbor Reports: The client can request a list of nearby APs (Neighbor Reports) from the current AP. This list includes details such as signal strength, channel, and load.
• Optimized Roaming Decisions: With this information, the client can make more informed decisions about when and where to roam, reducing the likelihood of connecting to a congested or distant AP.
• Improved Handoff: This results in faster and more reliable handoffs, as the client can anticipate and prepare for the transition.

Example:

In a densely populated office building with multiple APs, 802.11k ensures that your device always connects to the best available AP, improving overall network performance and user experience.

PCAP Analysis:

• Neighbour report requests and responses between the client and the AP.
• Roaming decisions based on the received neighbour reports, resulting in more efficient hand offs.

7. 802.11v (Wireless Network Management)

What is 802.11v?

802.11v is a standard that provides advanced wireless network management features, including the ability for APs to assist clients in making roaming decisions based on network conditions.

How 802.11v Works:

• Network-Assisted Roaming: APs can send BSS Transition Management (BTM) requests to clients, suggesting when and where they should roam based on factors like load balancing and signal strength.
• Client Steering: This helps prevent congestion on specific APs and ensures that clients are evenly distributed across the network.
• Improved QoS: By enabling the network to guide client roaming decisions, 802.11v helps maintain a higher quality of service (QoS) throughout the network.

Example:

In a stadium with thousands of users connected to the Wi-Fi, 802.11v helps distribute clients more evenly across available APs, preventing any single AP from becoming overloaded and maintaining a good user experience.

PCAP Analysis:

• BSS Transition Management requests and responses.
• Client decisions to roam based on these network-assisted recommendations, leading to better load balancing.

8. CCKM (Cisco Centralized Key Management)

What is CCKM?

Cisco Centralized Key Management (CCKM) is a proprietary fast-roaming technology developed by Cisco to minimize roaming time by allowing clients to roam between APs without re-authenticating each time.

How CCKM Works:

• Centralized Key Storage: CCKM centralizes key management in a wireless LAN controller (WLC), which stores the keys for all associated clients.
• Fast Roaming Process: When a client roams, the WLC handles the re-authentication process almost instantaneously by providing the required keys to the new AP.
• Security and Speed: This allows clients to maintain a secure connection while reducing the handoff time to just a few milliseconds.

Example:

In environments such as airports or large corporate campuses with Cisco infrastructure, CCKM ensures that users can move around without experiencing drops in their connections, which is especially important for time-sensitive applications like VoIP.

PCAP Analysis:

• Initial key exchange and storage handled by the WLC.
• Rapid re-authentication during roaming events, with the WLC providing the necessary keys to the new AP.

Conclusion:

Wi-Fi Roaming is a critical aspect of modern wireless networks, especially in environments where users frequently move between different APs. Understanding the various types of roaming techniques, from Basic Roaming to advanced methods like Fast Roaming (802.11r) and Cisco's CCKM, is essential for network professionals who want to ensure seamless connectivity and an optimal user experience.

Each roaming technique addresses different needs and scenarios, whether it's reducing the time needed to reconnect to an AP, minimising disruptions during handoffs, or optimizing the use of network resources. By analyzing these processes in detail through tools like PCAP, network administrators can better understand and troubleshoot roaming issues, ensuring a reliable and efficient wireless network.

—----------------------------------------------------------------------------------------------------------------------------

If anyone has more insights or additional information or if there are any points I might have missed, please let me know. Additionally, I encourage you to check out my blogs and share your thoughts or findings. Your input is highly valued in expanding our understanding of these exciting new technologies