topic Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want) in Aerohive Migrated Content

How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

mkretzer — Tue, 11 Jun 2019 14:04:17 GMT

How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

samantha_lynn — Tue, 11 Jun 2019 22:03:44 GMT

I'm afraid you can have either WPA2 or WPA3, but not both at the same time on the same SSID. If you'd like, I can submit a feature request to have that option added to a later release if possible?

Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

mkretzer — Tue, 11 Jun 2019 22:09:07 GMT

Ok. Is having WPA2 and WPA3 on the same SSID technically possible?

Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

samantha_lynn — Wed, 12 Jun 2019 01:58:56 GMT

We might be able to have an either or auto selection for WPA2 or WPA3 on one SSID, but I'd have to ask our engineering team to be sure. Did you want that feature request submitted?

Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

mkretzer — Wed, 12 Jun 2019 02:00:33 GMT

Sure! That sounds great! Please submit!

Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

samantha_lynn — Wed, 12 Jun 2019 02:33:05 GMT

Thanks for letting me know, I've submitted that feature request for you now. Please don't hesitate to check in with me for updates on this request later on.

Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

samantha_lynn — Wed, 12 Jun 2019 17:34:51 GMT

Hi Markus, I heard back from our engineering team on this and they recommended enabling WPA3, and then turning on Transition mode.

This Transition Mode will offer WPA3, but if that isn't compatible with the end user client device, then it will switch to WPA2.

Here is a clipping from the Wifi alliance reviewing this feature, in case you're interested:

WPA3-SAE Transition Mode

• When WPA2-PSK and WPA3-SAE are configured on the same BSS (mixed mode), PMF shall be set to capable (MFPC bit shall be set to 1, and MFPR bit shall be set to 0 in the RSN Capabilities field in the RSNE transmitted by the AP)

• When WPA2-PSK and WPA3-SAE are configured on the same BSS (mixed mode), the AP shall reject an association for SAE if PMF is not negotiated for that association

• A WPA3-SAE STA shall negotiate PMF when associating to an AP using WPA3-SAE Transition Mode

Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

mkretzer — Wed, 12 Jun 2019 17:36:45 GMT

Nice. But this does not work with WPA Enterprise correct?

Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

samantha_lynn — Wed, 12 Jun 2019 19:20:15 GMT

That is correct, there isn't a transition mode option for Enterprise. Did you want me to update the feature request to have this brought to the Enterprise SSIDs as well if possible?

Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

mkretzer — Fri, 14 Jun 2019 04:12:13 GMT

Yes definitely as we mainly use Enterprise! Thank you!

Re: How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

samantha_lynn — Fri, 14 Jun 2019 17:50:07 GMT

Thank you for letting me know, I've adjusted the feature request for you at this time.