@cmr wrote: The other thing to be aware of is radio power levels, smaller devices often cannot raise their power level above ~17dBm so to ensure that the AP can hear them when they can hear the AP you should keep maximum power restricted to this or below.  This. I've had really good luck with balancing the AP transmit level to the approximate level of my wireless devices. I run 15dbm on my MR42s and devices roam just fine from device to device. I'd work on surveying the AP power levels and coverage before bothering with 802.11r. ... View more

If possible you really want to go the Radius way.   When using NPS, you can pretty easy use MFA through Microsoft 365 with AD sync. I also see this is as a big plus. ... View more

To me, it's a best practice to create mirror rules by default. Otherwise the unblocked side can try to initiate some traffic, and I don't like that. ... View more