How to disable WPA3?

lucidelirium

Choosing 802.11be appears to do the following:

1. WPA3 cannot be disabled. WPA2 drop-down is ignored.
2. 802.11r is disabled. Toggle switch is ignored.
3. MLO is forced per the pop-up explanation.

This is all very problematic for my site. Is there a way to disable MLO and/or WPA3?

The "no transition-mode" command does not seem to have an effect either.

Zyxel_Lynn

Hi @lucidelirium,

When you configure your Zyxel AP to use 802.11be radio mode, several important behaviors occur automatically:

First, the MLO feature would be automatically enabled without manual configuration options. Moreover, the security protocol also has significant enforcement. 802.11be mode mandates WPA3 security as the only supported option. Even if you configure an SSID with WPA2 settings, wireless clients connecting to this SSID will be automatically upgraded to WPA3. This automatic upgrade explains why WPA3 appears to be "non-disableable" in 802.11be mode.

As for the 802.11r fast roaming feature, this fast roaming feature is automatically disabled because it only supports WPA2. Though you can manually toggle the 802.11r option in the interface, the feature will not function when the radio mode is set to 802.11be due to the mandatory WPA3 requirement.

If you want to disable WPA3 enforcement and MLO functionality, please change your radio mode from 802.11be to 802.11ax by navigating to Site-wide > Configure > Access Points > Radio Settings.

Then, select your target AP and choose the desired radio band (e.g., 2.4 GHz).

In the configuration window, change the radio mode from 802.11be to 802.11ax as well as click Update to save the configuration.

By switching the radio mode to 802.11ax, you are able to disable the WPA3 security option and MLO feature.

Best Regard,

Lynn