TKIP restrictions AP38xx


Userlevel 7
Hi,

could someone please exlpain this in more detail....

https://gtacknowledge.extremenetworks.com/articles/Solution/Poor-performance-on-the-3825i-or-any-38x...

Symptoms Poor date transfer performance on the AP-3825
Clients seeing slow throughput speeds

Cause
Release Noted (9.15.05 ): AP38XX supports TKIP but with the following restrictions due to new Wi-Fi Alliance certification requirements:
1. Only available for Legacy rates; not supported with 11n nor 11ac rates
2. Mix configuration of AES and TKIP on one radio is not supported; for example, configuring multiple VNS with mixed types of TKIP and AES on one AP radio is not allowed.

###################################################

Q1: Does it apply only to "WPAv1 TKIP only" or also if I run "WPAv1 auto / WPAv2 auto"

Q2:"Mix configuration of AES and TKIP on one radio is not supported....not allowed"
If that is not supported and not allowed I assume the GUI will not allow such configuration.

Q3:If the GUI allows a mixed configuration what are the values for "Poor date transfer...slow throughput speeds"?

Q4: So if my customer has some TKIP only devices i.e. inventory scanner and like to replace the APs the only thing I'd sell them is the AP37xx series as this new cert requirement doesn't affect this model - correct ?

-Ron

5 replies

Userlevel 7
Q1: Does it apply only to "WPAv1 TKIP only" or also if I run "WPAv1 auto / WPAv2 auto"

Ans: Applies to Auto or TKIP

Q2:"Mix configuration of AES and TKIP on one radio is not supported....not allowed"
If that is not supported and not allowed I assume the GUI will not allow such configuration.

Ans: GUI will allow you to configure it without an error, we will work on getting a popup notification or it's possible WPA-TKIP/Auto will be removed at some point.

Q3:If the GUI allows a mixed configuration what are the values for "Poor date transfer...slow throughput speeds"?

Ans: 54Mbps is what typically is seen on the Intel clients

Q4: So if my customer has some TKIP only devices i.e. inventory scanner and like to replace the APs the only thing I'd sell them is the AP37xx series as this new cert requirement doesn't affect this model - correct ?

Ans: You can still use the 38xx but only one service can have TKIP enabled. No other wlan-services should have TKIP or Auto.
Userlevel 7
Sorry I don't get it... it's no mix of TKIP AES on one radio.

So you mean I'd have one "WPAv1 auto / WPAv2 auto" WLAN service on radio#2 but no other WLAN service on radio#2.
I'd then have my AES-only WLAN services on radio#1.

Is that correct ?
Userlevel 7
Ron wrote:

Sorry I don't get it... it's no mix of TKIP AES on one radio.

So you mean I'd have one "WPAv1 auto / WPAv2 auto" WLAN service on radio#2 but no other WLAN service on radio#2.
I'd then have my AES-only WLAN services on radio#1.

Is that correct ?

If you have 2 wlan-services on radio 1 you would not want to have wlan-service 1 set to auto and wlan-service 2 set to tkip.
Userlevel 7
Ron wrote:

Sorry I don't get it... it's no mix of TKIP AES on one radio.

So you mean I'd have one "WPAv1 auto / WPAv2 auto" WLAN service on radio#2 but no other WLAN service on radio#2.
I'd then have my AES-only WLAN services on radio#1.

Is that correct ?

OK, so some work for my weekend.
Move all TKIP services to radio#2 and the AES-only to #1 🙂

Thanks,
Ron
Userlevel 7
Ron wrote:

Sorry I don't get it... it's no mix of TKIP AES on one radio.

So you mean I'd have one "WPAv1 auto / WPAv2 auto" WLAN service on radio#2 but no other WLAN service on radio#2.
I'd then have my AES-only WLAN services on radio#1.

Is that correct ?

Ron,

I'm going to clean up that knowledge document. I will post the link once i'm finished. I hope it makes things a bit more clear. Thank you for your additional questions.

Reply