This is the new version of WPA2-Personal, or WPA2-PSK, as most Wi-Fi networks use today in home/small office environments or when devices can’t support 802.1X authentication methods (we’ll cover WPA3-Enterprise with 802.1X in a future part).Īs outlined in Cisco Live breakout BRKEWN-2006, SAE provides forward secrecy which essentially means the requirement for strong, complex passwords with WPA2-Personal no longer applies for WPA3-Personal. Note: these articles assume you have CWAP or CWSP-level knowledge of 802.11 authentication processes.įirst up, we’ll start with WPA3-Personal which uses Simultaneous Authentication of Equals (SAE). In this multi-part blog series I will take a look at how to configure support for these new security features on your Cisco wireless network, cover device support, and look at packet captures to see what is going on behind the scenes. You might want to grab a coffee for this one! To get up to speed I highly recommend checking out the Cisco Live on-demand video of BRKEWN-2006 Advancements in Wireless Security from San Diego, presented by Distinguished SE Stephen Orr ( and TSA Bob Sayle ( Support for WPA3-Personal is a requirement of Wi-Fi 6 certification (support for WPA3-Enterprise and Enhanced Open/OWE is optional), so even if you may not be planning to deploy it anytime soon, it is important to understand how to configure and analyse it.
If you hadn’t heard, there are some great updates coming to Wi-Fi security this year with improvements around robustness and ease of onboarding.
0 kommentar(er)
