How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

[mkretzer]

How can we enable WPA2 and WPA3 for our upgraded AP130 APs? We can only choose WPA2 (which we have), WPA3 (where WPA2 will no longer work, correct?) or Auto (where WPA1 works which we do not want)

[samantha_lynn]

Hi Markus, I heard back from our engineering team on this and they recommended enabling WPA3, and then turning on Transition mode.

This Transition Mode will offer WPA3, but if that isn't compatible with the end user client device, then it will switch to WPA2.

Here is a clipping from the Wifi alliance reviewing this feature, in case you're interested:

WPA3-SAE Transition Mode

• When WPA2-PSK and WPA3-SAE are configured on the same BSS (mixed mode), PMF shall be set to capable (MFPC bit shall be set to 1, and MFPR bit shall be set to 0 in the RSN Capabilities field in the RSNE transmitted by the AP)

• When WPA2-PSK and WPA3-SAE are configured on the same BSS (mixed mode), the AP shall reject an association for SAE if PMF is not negotiated for that association

• A WPA3-SAE STA shall negotiate PMF when associating to an AP using WPA3-SAE Transition Mode

[samantha_lynn]

Thanks for letting me know, I've submitted that feature request for you now. Please don't hesitate to check in with me for updates on this request later on.

[mkretzer]

Sure! That sounds great! Please submit!

[samantha_lynn]

We might be able to have an either or auto selection for WPA2 or WPA3 on one SSID, but I'd have to ask our engineering team to be sure. Did you want that feature request submitted?

[mkretzer]

Ok. Is having WPA2 and WPA3 on the same SSID technically possible?