This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

WPA3 connection without transition mode

WPA3 connection without transition mode

AnonymousM
Valued Contributor II

‎10-15-2019 07:26 PM

I have an AP630 using HiveOS 10.0r7a. I am able to select WPA3 as an Authentication type and then disable transition mode. The result is the AP beacons the AKM type as SAE only. I have tried to connect mobile devices that have passed the WFA WPA3 certification, but I am unable to connect these mobile devices. I tried on 3 different mobile devices that passed the WFA certification for WPA3, but all 3 devices failed. Has anyone successfully connected a device using WPA3 and if so, what was that device?

0 Kudos
11 REPLIES 11

AnonymousM
Valued Contributor II

‎10-21-2019 05:30 PM

Your Wireshark display filter is incorrect. Try: wlan.addr==<MAC address> for the 2 WiFi addresses I provided. I just tried it and it worked on both captures.

0 Kudos

samantha_lynn
Esteemed Contributor III

‎10-21-2019 05:26 PM

Thank you for that data but unfortunately the first set of data (packet capture and tech data) did not contain that MAC address at all. You can see this in the packet capture if you run the filter: eth.addr == <MAC address>. In the second set of data, the packet capture had no data with that MAC address and the tech data saw two probes from that client, but no authentication attempts or failures. Would you be able to replicate again and pull tech data immediately after replicating? You can search for the MAC in the tech data to be sure we captured the event.

0 Kudos

AnonymousM
Valued Contributor II

‎10-21-2019 05:16 PM

Hello Sam,

I sent 2 emails to the communityhelp@aerohive.com email.

  1. Subject: WPA3 failure 1 of 2 = WiFi network configured with WPA3 with Transition mode OFF. The Auth Key Management within the RSN only contains SAE. The phone fails to connect.
  2. Subject: WPA3 failure 2 of 2 = WiFi network configured with WPA3 with Transition mode ON. The Auth Key Management within the RSN contains both PSK and SAE. The phone SUCCESSFULLY connects using SAE.

 

Both emails have the the tech data from the AP and a WiFi capture. I used the same phone for both tests (Samsung Galaxy S10 running Android 9). I included the MAC address of the phone in both emails.

0 Kudos

AnonymousM
Valued Contributor II

‎10-18-2019 05:29 PM

Thank you Sam! I will send you the tech data early next week at communityhelp@aerohive.com

and reply to this thread once I sent the email.

0 Kudos

samantha_lynn
Esteemed Contributor III

‎10-18-2019 04:56 PM

This guide reviews how to collect tech data via the HiveManager GUI: https://thehivecommunity.aerohive.com/s/article/How-to-download-tech-data-in-HiveManager

 

And this guide covers how to get tech data from the CLI of the AP, in case that's easier: https://thehivecommunity.aerohive.com/s/article/Collecting-Tech-Data-via-CLI

0 Kudos
GTM-P2G8KFN