TKIP restrictions AP38xx

[Ronald_Dvorak]

Hi,

could someone please exlpain this in more detail....

https://extremeportal.force.com/ExtrArticleDetail?an=000074411

Symptoms Poor date transfer performance on the AP-3825
Clients seeing slow throughput speeds

Cause
Release Noted (9.15.05 😞 AP38XX supports TKIP but with the following restrictions due to new Wi-Fi Alliance certification requirements:
1. Only available for Legacy rates; not supported with 11n nor 11ac rates
2. Mix configuration of AES and TKIP on one radio is not supported; for example, configuring multiple VNS with mixed types of TKIP and AES on one AP radio is not allowed.

###################################################

Q1: Does it apply only to "WPAv1 TKIP only" or also if I run "WPAv1 auto / WPAv2 auto"

Q2:"Mix configuration of AES and TKIP on one radio is not supported....not allowed"
If that is not supported and not allowed I assume the GUI will not allow such configuration.

Q3:If the GUI allows a mixed configuration what are the values for "Poor date transfer...slow throughput speeds"?

Q4: So if my customer has some TKIP only devices i.e. inventory scanner and like to replace the APs the only thing I'd sell them is the AP37xx series as this new cert requirement doesn't affect this model - correct ?

-Ron

[Ronald_Dvorak]

Sorry I don't get it... it's no mix of TKIP AES on one radio.

So you mean I'd have one "WPAv1 auto / WPAv2 auto" WLAN service on radio#2 but no other WLAN service on radio#2.
I'd then have my AES-only WLAN services on radio#1.

Is that correct ?

[Doug]

Ron,

I'm going to clean up that knowledge document. I will post the link once i'm finished. I hope it makes things a bit more clear. Thank you for your additional questions.

[Ronald_Dvorak]

OK, so some work for my weekend.
Move all TKIP services to radio#2 and the AES-only to #1 🙂

Thanks,
Ron

[Doug]

Q1: Does it apply only to "WPAv1 TKIP only" or also if I run "WPAv1 auto / WPAv2 auto"

Ans: Applies to Auto or TKIP

Q2:"Mix configuration of AES and TKIP on one radio is not supported....not allowed"
If that is not supported and not allowed I assume the GUI will not allow such configuration.

Ans: GUI will allow you to configure it without an error, we will work on getting a popup notification or it's possible WPA-TKIP/Auto will be removed at some point.

Q3:If the GUI allows a mixed configuration what are the values for "Poor date transfer...slow throughput speeds"?

Ans: 54Mbps is what typically is seen on the Intel clients

Q4: So if my customer has some TKIP only devices i.e. inventory scanner and like to replace the APs the only thing I'd sell them is the AP37xx series as this new cert requirement doesn't affect this model - correct ?

Ans: You can still use the 38xx but only one service can have TKIP enabled. No other wlan-services should have TKIP or Auto.