Edge-Core EAP102 - Page 73

Chapter 4 | Wireless Settings
Radio Settings
– 73 –
WPA3 provides more robust password-based authentication called
Simultaneous Authentication of Equals (SAE), which replaces Pre-Share Key
(PSK) in WPA2-Personal. This technology prevents offline dictionary attacks
so that data traffic can be transmitted securely.
 WPA3 Personal Transition — Clients using WPA3 with SAE or clients
using WPA2 with PSK are accepted for authentication. The AP negotiates
the supported authentication and encryption with each client before
allowing access to the network.
 WPA3 Enterprise — An enhanced version of WPA2-EAP security that uses
more robust encryption. Clients must support one of the stronger WPA3
encryption options and use Protected Management Frames (PMF) to be
able to access the network. The use of IEEE 802.1X network access control
and a RADIUS server is required.
Refer to RADIUS Settings above for information on RADIUS configuration.
 WPA3 Enterprise Transition — Allows WPA3 and WPA2 clients to access
the network. Encryption options and the use of Protected Management
Frames (PMF) are negotiated with each client before allowing access to the
network.
Refer to RADIUS Settings above for information on RADIUS configuration.
 WPA3 Enterprise 192-bit — WPA3 Enterprise security uses a standard
128-bit encryption. For a network handling more sensitive data, there is an
option to use 192-bit encryption for additional protection.
Refer to RADIUS Settings above for information on RADIUS configuration.
 OWE — Opportunistic Wireless Encryption (OWE) is the WPA3 open
network security that allows users of public Wi-Fi networks to gain secure
access without using a password. OWE provides individual encryption of
data communications between the AP and each client, but does not
provide authentication of user identities.
 PMF — Protected Management Frames (PMF) provide WPA2/WPA3 security for
unicast and multicast management frames between the AP and clients. The
“Optional” setting allows clients that do not support PMF to access the network.
The “Mandatory” setting allows only clients that support PMF to access the
network. (Default: Optional)
 802.11k — Provides clients with information on neighbor APs when roaming.
As a client is about to roam from an AP, it sends a request for a “Neighbor
Report” that includes a list of available APs and associated information. The
client can then quickly identify the best AP to which it can roam without having
to scan all channels. (Default: Disabled)