Digi IX20 - Page 332

Wi-Fi Configurea Wi-Fi accesspoint with personal security
IX20 User Guide
332
n
psk2sae: UsesWPA2-PSK/WPA3-AESmixed mode. Wi-Fi clients that support WPA2 and
WPA3 are able to authenticate.
n
sae: Uses WPA3 Personal mode. All Wi-Fi clientsmust support WPA3 to be able to
authenticate.
(config network wifi ap new_AP)> encryption type psk2sae
(config network wifi ap new_AP)>
6. (Optional) Determine whether to prevent clientsthat are connected to this accesspoint from
communicating with each other:
(config)> network wifi ap digi_ap isolate_clients true
(config)>
See Isolate Wi-Fi clients for information about how to prevent clients connected to different
access points from communicating with each other.
7. Set the password that clients will use when connecting to the accesspoint:
(config network wifi ap new_AP)> encryption key_type password
(config network wifi ap new_AP)>
where key_typevaries depending on the selection for encryption type, above:
n
If type is set to psk, key_typeis key_psk.
n
If type is set to mixedpsk, key_typeis key_mixedpsk.
n
If type is set to psk2, key_typeiskey_psk2.
n
If type is set to psk2sae, key_typeis key_psk2sae.
n
If type is set to sae, key_typeis key_sae.
For example, if type is set to psk2sae, set key_psk2sae to the appropriate password:
(config network wifi ap new_AP)> encryption type psk2sae
(config network wifi ap new_AP)> encryption key_psk2sae abcd1234
(config network wifi ap new_AP)>
Note The encryption key type must correspond to the configured encryption type. If you set an
encyrption key type that does not correspond to the configured encryption type, you will not
be able to save the configuration.
8. (Optional) Set the amount of time to wait before changing the group key.
The group key is shared by all in clients of the accesspoint, and after a client has
disconnected, it will be able to use the group key to decrypt broadcast packets until the key is
changed.
(config network wifi ap new_AP)> encryption group_rekey value
(config network wifi ap new_AP)>
where value is any number of days, hours, minutes, or seconds, and takes the format number
{d|h|m|s}.
For example, to set group rekey interval to ten minutes, enter either 10m or 600s: