Many companies swap in a new Fortinet AP, run a speed test, and call it a day. However, being so black-and-white about it like that can keep your network in a state of underperformance. Fine-tuning the specifics is common with any enterprise WiFi access point (WAP) when it comes to aligning with your real-world demands.
More specifically, AP handoff is a crucial angle, as it controls how and when devices move between access points. This article walks through enabling AP handoff in FortiGate and several other important steps along the way.
Key Takeaways:
- AP handoff must be manually enabled on Fortinet APs
- High transmit power is the most common reason handoff fails, keeping devices locked to the wrong AP
- Coverage zones between adjacent Fortinet APs should overlap by roughly 20% for clean transitions
- Transmit power tuning is an iterative process that requires walking the floor and adjusting until handoff triggers correctly
- Devices without 802.11r support will not roam seamlessly and will drop connection briefly before reconnecting to the next AP
What is Fortinet AP Handoff and Why Does It Matter?
For some added clarity, AP handoff is the automatic transition of a device from one access point to another. However, this is only happens once a signal drops below a minimum connection threshold.
Here are a handful of highlights about AP handoff that you should take with you:
- It’s a feature that must be manually enabled
- Multiple access points need to be present and configured within the same network for handoff to function
- WiFi access points initiate the handoff, pushing the client to the next unit
- Note that device compatibility plays a role here, as older hardware without 802.11r support won’t roam seamlessly between Fortinet APs
Another angle I don’t want to overlook is the fact that your network handles the switch between APs on its own. This keeps the connection alive without requiring the user to deal with a manual connection.
While you might think this is only relevant to large-scale enterprises, that isn’t the case. Sometimes it can be more about building layout than actual size. From warehouses, multi-floor offices, to any multi-zone space, a poorly configured AP can lead to some noticeable problems.
How to Enable AP Handoff on Fortinet Access Points
For those working with Fortinet wireless access points, I have exactly what you need to set up AP handoff with ease. Your starting point will be inside FortiGate, where you’ll find Wi-Fi and Switch Controller within the FortiAP Profiles section.
Select the profile tied to your access points, and toggle the AP Handoff setting on within the configuration. If you don’t have this setting turned on, the Fortinet APs have no instruction to act on a weakening signal. I’ve also put together a brief, actionable step-by-step list on how to get this set up with your hardware.
Step by Step: Enabling AP Handoff in FortiGate
I’ve also put together a brief, actionable step-by-step list on how to get this set up with your hardware. Check it out below and feel free to use it as a reference point when you’re ready to dive in.
- Step 1: Open FortiGate and navigate to Wi-Fi and Switch Controller
- Step 2: Open FortiAP Profiles and select the relevant profile
- Step 3: Enable AP Handoff
- Step 4: Save and apply
However, we aren’t done just yet, as this is where you transition to broadcast power tuning for your roaming setup. Aside from AP handoff setup, I’m also going to make sure you don’t run into any roadblocks bouncing from one AP to the next.
Why Broadcast Power Makes or Breaks Your Roaming Setup
Before I get into specifics, I want to lay out the important detail that access points broadcast in a circle. That means that higher transmit power comes with a wider coverage zone, one that can easily extend further than intended.
“Every building is different. Brick walls, metal roofing, or just a wide-open warehouse, it has to be tuned to your environment”
If the power is set too high on your Fortinet access points, connected devices might never experience enough of a signal drop to fall below the handoff threshold. In short, devices won’t automatically switch to the next access point.
An easy fix for this is reducing power until adjacent coverage zones overlap, roughly by 20%. This gives devices a clean signal to transition without staying tethered to the wrong AP.
Setting Transmit Power Manually
Your first step here is to manually set transmit power to 1 dBm. This will significantly reduce the coverage radius and create the right conditions for handoff to trigger when it should. Give the table below a quick overview, as it covers every angle you need to consider when setting up AP handoff.
| Setting Category | Configuration |
|---|---|
| AP Handoff | Enabled via FortiAP Profiles in FortiGate |
| Transmit Power | Manually set to 1 dBm as a starting point |
| Coverage Zone Overlap | Roughly 20% between adjacent APs |
| Handoff Threshold | Approximately negative 75 dBm |
| 802.11r Support | Required for seamless roaming on client devices |
Keep in mind that every environment is different, so the right power setting for an open warehouse won’t be the same for a walled office corridor. It’s important to understand that this is an iterative process that comes with a little trial and error. Set a power level, walk the floor, observe where handoff triggers, and adjust accordingly. Repeat the process until your transition point lines up correctly.
Let’s Wrap This Up
Getting AP handoff where it needs to be requires three main things: enabling the feature, tuning transmit power, and verifying handoff triggers where it should. Skipping any one of those steps leaves the others without the foundation they need to work properly. To get more of a visual, hands-on look at this process, I highly suggest checking out our video on the topic in the video below.
It covers these core concepts and includes several other helpful tidbits and examples for added context. If you’d like to work with us directly on this, our team is here if and when you need us. One phone call and we can make sure you’re on the right path with Fortinet AP handoff.
Frequently Asked Questions
What is AP Handoff on a Fortinet Access Point?
AP handoff is the automatic process of pushing a connected device to the next access point once the signal drops below a minimum threshold.
Why Isn’t My Fortinet AP Handing Off to the Next Unit?
Transmit power is likely too high. When the coverage zone is too wide, devices never drop below the handoff threshold and stay locked into the original AP.
Does AP Handoff Need to Be Manually Enabled on Fortinet Access Points?
Yes, it must be turned on inside the FortiGate, under WiFi and Switch Controller, within the FortiAP Profiles section.
What Happens if My Devices Don’t Support 802.11r?
They will hold their connection until the signal is lost, drop for a few seconds, and reconnect rather than transitioning cleanly.
How Much Coverage Zone Overlap Should My Fortinet APs Have?
Roughly 20%; enough for a clean transition without keeping devices tethered to the wrong AP.
