Settings for WPA3 Personal with SAE and H2E

WPA3 Personal with SAE and H2E— Network access is allowed to any client that knows the pre-shared key (PSK).

Note

ExtremeCloud IQ Controller supports both SAE and H2E on 2.4 GHz and 5 GHz radios. For 6 GHz radios, we only support H2E.

Configure the following privacy settings:

Protected Management Frames — Management Frames are the signaling packets used in the 802.11 wireless standard to allow a device to negotiate with an AP. PMF adds an integrity check to control packets being sent between the client and the access point. Valid values are:
- WPA3 - Personal (SAE and H2E). Setting is Required. Requires that all devices use PMF format. This could result in older devices not connecting.
- WPA3 - Compatibility:
  - Enabled. Supports PMF format but does not require it.
  - Required. Requires PMF format.
Method — Privacy method. Valid values are:
- H2E Only. Indicates that the H2E only method is defined as the privacy method for the WLAN on all radios (2.4 GHz, 5 GHz and 6 GHz). This option applies only to 6E capable devices (AP4000, AP5010, AP5050, AP3000).
  Note
  Ensure that networks defined with the option H2E Only are assigned to configuration Profiles of supported devices (AP4000, AP5010, AP5050, AP3000).
- SAE/H2E supports both SAE and H2E on 2.4 GHz and 5 GHz radios for backwards compatibility. This setting is the default value.
Encyption — Valid values are:
- AES-CCM-128 (default)
- AES-CCM-128 & GCMP256
- GCMP256
If AES-CCM-128 & GCMP256 or GCMP256 is selected then only Wi-Fi 7 APs are configured, all other APs are AES-CCM-128.

Note
Wi-Fi 7 requires the support of GCMP256 on WPA3 Personal.
Input Method. Enter the PSK in String or HEX:
- String value — Supports a PSK of 1-63 characters
- HEX value — Supports a PSK of exactly 64 characters and must contain HEX digits only.
WPA3 Key. The password to access this wireless network. Select Mask to prevent the password characters from displaying.