NWA50AX: WPA3 'Transition Disable' vs. 'Transition Mode'

horse31

I know via the CLI one is able to disable 'WPA3 Transition Mode' using the following instructions (https://community.zyxel.com/en/discussion/19058/access-point-feature-to-disable-wpa3-transition-mode-on-ssid-advanced-settings)

From my understanding, following the above steps disables 'Transition Mode' so that the Access Point doesn't magically create a virtual access point for WPA2.

Question 1: Does following the above steps on a Zyxel access point ALSO enable 'WPA3 Transition Disable', which informs all clients to never connect to any SSID with the same name that has less than WPA3 security. By doing that, it prevents situations where adversary can't crack WPA3 itself so creates an evil access point with the same name but with lower security (WPA2) and then gathers information from clients that attempt to connect to it. While both WPA2 and WPA3 protocols don't have the client actually send the password to the access point, WPA2 uses a 4-way handshake whereas WPA3 uses SAE (Simultaneous Authentication of Equals), which is presumably more secure.

Question 2: How would I go about enabling 'WPA3 Transition Disable' on a Zyxel wireless access point?

Side note:

• It's a shame that WPA3 has these two features which are similarly-named but do different things: "WPA3 Transition Disable" vs "WPA3 Transition Mode" are completely different concepts
• "WPA3 Transition Disable". I like to think of it as HSTS on a SSID instead of a domain name. Here are more details: https://www.wi-fi.org/beacon/thomas-derham-nehru-bhandaru/wi-fi-certified-wpa3-december-2020-update-brings-new-0