Chapter 4
| Wireless Settings
Radio Settings
– 73 –
Refer to RADIUS Settings above for information on RADIUS configuration.
WPA3 Enterprise Transition — Allows WPA3 and WPA2 clients to access
the network. Encryption options and the use of Protected Management
Frames (PMF) are negotiated with each client before allowing access to the
network.
Refer to RADIUS Settings above for information on RADIUS configuration.
WPA3 Enterprise 192-bit — WPA3 Enterprise security uses a standard
128-bit encryption. For a network handling more sensitive data, there is
an
option to use 192-bit encryption for additional protection.
Refer to RADIUS Settings above for information on RADIUS configuration.
OWE — Opportunistic Wireless Encryption (OWE) is the WPA3 open
network security that allows users of public Wi-Fi networks to gain secure
access without using a password. OWE provides individual encryption of
data communications between the AP and each client, but does not
provide authentication of user
identities.
PMF — Protected Management Frames (PMF) provide WPA2/WPA3 security for
unicast and multicast management frames between the AP and clients. The
“Optional” setting allows clients that do not support PMF to access the network.
The “Mandatory” setting allows only clients that support PMF to access the
network. (Default: Optional)
802.11k — Provides clients with information on neighbor APs when roaming.
As a client is about to roam from an AP, it sends a request for a “Neighbor
Report” that includes a list of available APs and associated information. The
client can then quickly identify the best AP to which it can roam without having
to scan all channels. (Default: Disabled)
802.11r — Provides a method for fast transition roaming between APs. Before
clients roam to a new AP, the initial handshake and encryption calculations are
performed in advance, which results in a fast hand off without the need for re-
authentication. (D
efault: Disabled)
802.11v — Provides information to associated clients that facilitates the
overall improvement of the wireless network. Also helps clients to improve
battery life by setting the idle period. (Default: Disabled)
Radius MAC Auth — The MAC address of the associating station is sent to a
configured RADIUS server for authentication. (Default: Disabled)
Dynamic Authorization — The Dynamic Authorization Extensions (DAE) to
RADIUS enable a server to disconnect or change the authorization of clients
that are already connected to the network.
(Default: Disabled)