Wi-Fi Roaming: Association, 802.11r/k/v, and Sticky Clients

Wi-Fi roaming is the process by which a wireless client moves its association from one access point (AP) to another within the same network without the user having to reconnect manually. The critical fact to internalize for the N10-009 exam: the client decides when to roam, not the network. APs can nudge, assist, and speed up the handoff — that is exactly what 802.11k, 802.11v, and 802.11r do — but the roaming decision itself lives in the client’s wireless driver. Most real-world roaming problems, including the infamous “sticky client,” trace back to that fact.

BSS, ESS, BSSID, and ESSID: the vocabulary of roaming

A single AP and the clients associated to it form a Basic Service Set (BSS). Each AP radio identifies its BSS with a BSSID — a unique identifier derived from the radio’s MAC address. If you’re reading controller logs and see each AP radio tagged with a distinct MAC-format value even though every AP broadcasts the same network name, you’re looking at BSSIDs.

When multiple APs are configured with the same network name — the Service Set Identifier (SSID) — and wired into a common distribution system, together they form an Extended Service Set (ESS). The shared name across the ESS is sometimes called the ESSID. The ESS is what makes roaming possible: a client can drop its association with one BSSID and pick up another BSSID advertising the same SSID, keeping its network session alive as it moves through a building.

So the hierarchy is: one radio = one BSS (identified by BSSID); many APs sharing an SSID = one ESS. Deploying multiple APs with an identical SSID and matching security settings is the baseline requirement for roaming — but as you’ll see below, it is not sufficient for seamless roaming.

How a client joins an AP: the association sequence

Before any data flows, a client and AP exchange a specific frame sequence. The exam expects you to know the order:

1. Probe request / probe response — the client actively scans by sending probe requests (or passively listens for beacons); APs answer with probe responses advertising their capabilities.
2. Authentication request / authentication response — a legacy 802.11 exchange (open system authentication in modern networks; the real security handshake happens afterward with WPA2/WPA3).
3. Association request / association response — the client formally joins the BSS and receives an Association ID.

Only after association (and the 802.1X/PSK key handshake, on secured networks) can the client pass traffic. A client that loses its connection entirely is disassociated — it must complete this join process again before it can communicate. When a client roams within an ESS, it performs a reassociation with the new AP, which is faster than joining from scratch but still involves re-running the security key exchange — and that key exchange is precisely the delay that fast roaming standards attack.

Sticky clients: the most common roaming failure

A sticky client is a device that clings to its current AP long after a closer AP with a far better signal is available. Symptoms: a handset or laptop shows a weak signal and poor throughput while standing directly under a healthy AP; packet captures show the device still talking to a distant AP for many seconds after moving. VoIP handsets and mobile carts on hospital or warehouse floors are the classic victims — a 10–15 second delay before switching APs will freeze a barcode scanner or drop a Wi-Fi call outright, even when the wireless site survey shows coverage, channel plan, and overlap are all correctly designed.

Why does it happen? Client drivers roam based on their own thresholds (typically triggered when the Received Signal Strength Indicator, or RSSI, degrades past some floor), and many are conservative: as long as the current link limps along, they stay put. The infrastructure can counter this in two complementary ways:

• Raise the minimum RSSI threshold on the APs. When an associated client’s signal falls below this value, the AP refuses to keep servicing it (or actively disassociates it — the same AP-initiated disconnect behavior examined in Wi-Fi disconnect troubleshooting), forcing the client to look for a better AP. A threshold set very low effectively lets sticky clients stay stuck.
• Enable 802.11k and 802.11v so the infrastructure can tell the client where to go and when — covered next.

If a scenario describes a client hanging onto a distant AP with k/v disabled and a minimum RSSI set too low, the fix is the combination: enable 802.11k/v and raise the RSSI threshold.

802.11r, 802.11k, and 802.11v: the fast-roaming trio

These three amendments work together but solve different pieces of the handoff problem:

Amendment	Common name	What it does	Problem it solves
802.11r	Fast BSS Transition (FT)	Lets the client complete the security key negotiation with the target AP before leaving the current one	The re-authentication delay on each roam (critical for VoIP/Wi-Fi calling)
802.11k	Neighbor Reports / radio resource measurement	AP hands the client a list of nearby candidate APs and their channels	Client wastes time scanning every channel to find roam targets
802.11v	BSS Transition Management	Network can suggest (or direct) that a client move to a specific better AP	Sticky clients that won’t roam on their own

802.11r (Fast BSS Transition) is the answer whenever a scenario describes roaming latency — brief audio dropouts on every handoff, mid-call gaps as a handset crosses AP boundaries. Without FT, every roam on an 802.1X network repeats a full authentication exchange, which can take hundreds of milliseconds to seconds. With FT, the key material is pre-established, so the client transitions in tens of milliseconds.

802.11k shortens the discovery phase: instead of going off-channel to probe every channel, the client asks its current AP for a neighbor report and scans only the listed candidates.

802.11v addresses the decision phase: a BSS Transition Management request from the controller tells a client “AP X on channel Y would serve you better,” steering devices that would otherwise stick.

A useful exam discrimination: if two areas of a building have identical RF design but one area’s APs lack 802.11k/v support, clients roaming among the older APs will hand off more slowly — they must discover and choose targets entirely on their own, without neighbor reports or transition guidance.

How the N10-009 exam tests this

• Vocabulary identification: a log or capture shows each AP radio identified by a MAC-based value → BSSID; several APs unified under one shared network name → ESS/ESSID; a client that lost its connection and must rejoin before communicating → disassociated.
• Frame-order questions: which sequence a client uses to discover and join an AP → probe, then authentication, then association.
• Latency-on-every-roam scenarios: handsets experience brief dropouts each time they move to a new AP → enable 802.11r fast BSS transition; the amendment that completes key negotiation with the new AP before leaving the old one is 802.11r.
• Sticky-client scenarios: a device stays on a distant AP despite a nearby stronger one, and the question notes 802.11k/v are disabled and/or minimum RSSI is set very low → enable k/v and raise the RSSI association threshold. Freezing scanners or dropped calls between coverage zones despite good signal usually point to slow client-driven handoff, not coverage gaps.

The r/k/v letters swap places in distractors constantly — practice questions are the fastest way to nail them down.

Roaming questions sit in the Network Implementation domain — the full N10-009 study guide shows where they fit in a complete study plan.

Quick reference

• BSSID = per-radio identifier based on the AP radio’s MAC address; SSID = the human-readable network name; ESS = multiple APs sharing one SSID for roaming.
• Join sequence: probe request/response → authentication → association; a disassociated client must rejoin before passing traffic.
• Roaming is always client-decided; the network can only assist or push.
• 802.11r = Fast BSS Transition: pre-negotiates keys with the next AP → fixes roam latency (VoIP dropouts).
• 802.11k = neighbor reports → faster discovery of roam candidates.
• 802.11v = BSS transition management → network steers sticky clients to better APs.
• Minimum RSSI thresholds force weak clients off an AP; set too low, they enable sticky-client behavior.
• Same SSID + same security on every AP is required for roaming, but seamless handoff needs r/k/v and sane RSSI thresholds. See also Wi-Fi signal strength for how RSSI values map to usable coverage.