I found that. I don’t entirely understand why both rules are necessary. The way I understand it if Default Authenticate on the interface is yes then the default match should be allow therefore the first rule is unnecessary. Or am I missing something?
Basically I have two APs in my house. My wifes iPhone seems to be too stupid to switch access points despite having basically unusable signal from the an access point. I just want to setup both APs to drop the connection if it drops below -80 or so.