NWA210AX: possible to select WPA3 security only?

tgl
tgl Posts: 11  Freshman Member
First Comment Friend Collector Second Anniversary
edited May 21 in Wireless
I find that my NWA210AX allows WPA2 clients to connect, even though I have Security Mode set to "wpa3" in the active security profile.  I gather this is because of the Transition Mode checkbox, which is enabled and grayed out so that I can't change it.  How can I configure it to allow WPA3 only? 

Accepted Solution

  • Zyxel_Judy
    Zyxel_Judy Posts: 1,584  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @tgl,


    You’re right. WPA3 with a “Transition mode” is provided to let non-support devices connect to SSID in WPA2-Personal. The “Transition mode” is enabled and grayed out as default.

    In case you just want to the WPA3-supported clients connect to the SSID, you can use the CLI as below, SSID with SECURITY4 as example.

    Router> enable

    Router# configure terminal

    Router(config)# wlan-security-profile SECURITY4

    Router(config-wlan-security SECURITY4)# no transition-mode

    Router(config-wlan-security SECURITY4)# exit

     

    Verification: A WPA3 non-supported laptop can’t connect to the SSID with security as WPA3 and no transition mode.

    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP!

    https://bit.ly/2024_Survey_Community

All Replies

  • Zyxel_Judy
    Zyxel_Judy Posts: 1,584  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @tgl,


    You’re right. WPA3 with a “Transition mode” is provided to let non-support devices connect to SSID in WPA2-Personal. The “Transition mode” is enabled and grayed out as default.

    In case you just want to the WPA3-supported clients connect to the SSID, you can use the CLI as below, SSID with SECURITY4 as example.

    Router> enable

    Router# configure terminal

    Router(config)# wlan-security-profile SECURITY4

    Router(config-wlan-security SECURITY4)# no transition-mode

    Router(config-wlan-security SECURITY4)# exit

     

    Verification: A WPA3 non-supported laptop can’t connect to the SSID with security as WPA3 and no transition mode.

    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP!

    https://bit.ly/2024_Survey_Community