Settings for WPA3–Personal

WPA3–Personal with SAE and H2E— Network access is allowed to any client that knows the pre-shared key (PSK).

Note

ExtremeCloud IQ Controller supports both SAE and H2E on 2.4 GHz and 5 GHz radios. For 6 GHz radios, only H2E is supported.

Configure the following privacy settings:

Protected Management Frames — Management Frames are the signaling packets used in the 802.11 wireless standard to allow a device to negotiate with an AP. PMF adds an integrity check to control packets being sent between the client and the access point. Valid values are:
- WPA3–Personal. Setting is Required. Requires that all devices use PMF format. This could result in older devices not connecting.
- WPA3–Compatibility:
  - Enabled. Supports PMF format but does not require it.
  - Required. Requires PMF format.
Method — Privacy method. Valid values are:
- H2E Only. Indicates that the H2E only method is defined as the privacy method for the WLAN on all radios (2.4 GHz, 5 GHz and 6 GHz). This option applies to Wi-Fi 6E APs and Wi-Fi 7 APs .
  Note
  Ensure that networks defined with the option H2E Only are assigned to configuration Profiles of supported devices.
- SAE/H2E supports both SAE and H2E on 2.4 GHz and 5 GHz radios for backwards compatibility. This setting is the default value.
Encryption—Valid values are:
- AES-CCM-128 (default)
- AES-CCM-128 & GCMP256
- GCMP256
If AES-CCM-128 & GCMP256 or GCMP256 is selected then only Wi-Fi 7 APs are configured, all other APs are AES-CCM-128.

Note
Wi-Fi 7 requires the support of GCMP256 on WPA3 Personal.
Input Method. Enter the PSK in String or HEX:
- String value — Supports a PSK of 1-63 characters
- HEX value — Supports a PSK of exactly 64 characters and must contain HEX digits only.
AKM Suite Selector (Wi-Fi 7 APs only). Valid values are:
- AKM8/AKM24
- AKM24 Only
WPA3 Key. The password to access this wireless network. Select Mask to prevent the password characters from displaying.