#Wpa personal or enterprise how to
#Wpa personal or enterprise password

With the upcoming release of Apple iOS 13, iPadOS, and macOS Catalina compatible iDevices will support these new security features. For those of you interested in the IOS-XE CLI commands, here you go: wlan coops-SAE 55 coops-SAEДЄnd hereвЂ™s the AireOS equivalent: config wlan create 55 coops-SAE coops-SAEД¬onfig wlan security wpa akm 802.1x disable 55Д¬onfig wlan security wpa akm sae enable 55Д¬onfig wlan security wpa akm psk set-key ascii ***** 55Д¬onfig wlan enable 55 Client & SSID SAE Support

ThatвЂ™s it! Later in this post, I will cover configuring support for both WPA2 & WPA3 (aka Transition Mode) on the same SSID.

Fast Transition (802.11r) needs to be disabled (802.11r support has been left out of the current versions of WPA3-Personal & WPA3-Enterprise).

Protected Management Frames (PMF) is Mandatory for WPA3, so we need to set this to вЂRequiredвЂ™,.

There are subtle differences in the configuration required from a WPA2-Personal WLAN on a Cisco Catalyst 9800 Wireless LAN Controller (note: WPA3 support comes in IOS-XE 16.12 & AireOS 8.10), and configuration on other WLAN infrastructure should be similar: So, how do we configure a WLAN to support SAE? WPA3-Personal SSID Configuration

#Wpa personal or enterprise password

SAE is resistant to offline dictionary attacks, and even protects data even if a password is later compromised. This is the new version of WPA2-Personal, or WPA2-PSK, as most Wi-Fi networks use today in home/small office environments or when devices canвЂ™t support 802.1X authentication methods (weвЂ™ll cover WPA3-Enterprise with 802.1X in a future part).ДЄs outlined in Cisco Live breakout BRKEWN-2006, SAE provides forward secrecy which essentially means the requirement for strong, complex passwords with WPA2-Personal no longer applies for WPA3-Personal. Note: these articles assume you have CWAP or CWSP-level knowledge of 802.11 authentication processes.ДЇirst up, weвЂ™ll start with WPA3-Personal which uses Simultaneous Authentication of Equals (SAE).

#Wpa personal or enterprise how to

In this multi-part blog series I will take a look at how to configure support for these new security features on your Cisco wireless network, cover device support, and look at packet captures to see what is going on behind the scenes. You might want to grab a coffee for this one! To get up to speed I highly recommend checking out the Cisco Live on-demand video of BRKEWN-2006 Advancements in Wireless SecurityВ from San Diego, presented by Distinguished SE Stephen Orr ( and TSA Bob Sayle ( Support for WPA3-Personal is a requirement of Wi-Fi 6 certification (support for WPA3-Enterprise and Enhanced Open/OWE is optional), so even if you may not be planning to deploy it anytime soon, it is important to understand how to configure and analyse it. If you hadnвЂ™t heard, there are some great updates coming to Wi-Fi security this year with improvements around robustness and ease of onboarding.