USG LITE 60AX V2.20(ACIP.0) - WPA2 connectivity issues

GiuseppeR
GiuseppeR Posts: 519 image  Master Member
Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector
edited September 28 in Nebula

Hello everyone,

with security routers when I set WiFi with WPA2 in Security Settings, I am NOT able to see the SSID and then connect to it with "old" laptops like n family WiFi cards.

Of course I use always 2.4 + 5 + 6 GHz enabled radios.

Anyway I have to use WPA3 with these settings:

immagine.png immagine.png

Changing WPA2 to WPA3 gives me the chance to connect also old laptops.

As you can see above I just modified "WPA2-Personal" to "WPA3-Personal"

This is a bug.

It happened to me the same with the previous SCR 50AXE

All Replies

  • Zyxel_Tina
    Zyxel_Tina Posts: 304 image  Master Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

    Hi @GiuseppeR,

    To help us investigate further, could you please reproduce the issue, collect the diagnostic info file, and provide it to us via private message?

    Thank you for your cooperation!

    Zyxel Tina

  • GiuseppeR
    GiuseppeR Posts: 519 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector
    edited September 30

    Hi @Zyxel_Tina

    it is not possible to reproduce the issue and collect diagnostic, just because it was something that you could see from an old laptop looking for SSIDs and not from the router itself.

    So I set the WPA2, I was not able to connect to it seeing the name when I searched for the network, and then I set the WPA3 and I was able to access the network.

  • Zyxel_Tina
    Zyxel_Tina Posts: 304 image  Master Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

    Hi @GiuseppeR,

    Thanks for your feedback!
    We noticed you had reported a similar situation before with the SCR 50AXE, and we’ve referred to that case. At the moment, we need to further investigate why this behavior also occurs on the USG LITE 60AX.
    We’ll update you once we have more information. Thank you for your patience :)

    Zyxel Tina

  • GiuseppeR
    GiuseppeR Posts: 519 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    Hi @Zyxel_Tina

    exactly, you are right.

    At the beginning it was a SCR50AXE linked to a pharmacy but after that case I found also another pair of SCR50AXE (one linked to a medical office and another one linked to a healthcare site). Till now these ORGs are still in WPA3 mode.

    I noticed that you have introduced an option:

    immagine.png

    Maybe the issue is triggered to something related to TKIP and or AES handshake related to WPA2?

    I'm at your disposal, best regards

  • Zyxel_Tina
    Zyxel_Tina Posts: 304 image  Master Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

    Hi @GiuseppeR

    We are clarifying the WPA2 issue since this is the first issue.

    Additionally, may we know the wireless adapter information of your device? Is there any other device encounter this issue?

    Zyxel Tina

  • GiuseppeR
    GiuseppeR Posts: 519 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    Hi @Zyxel_Tina

    I saw that with 2 "old" notebooks, like the ones with WiFi n cards (a Fujitsu one for sure and another one made probably by Packard Bell).

    Anyway I had the same issue also on a SCR50AXE with A/C units made by Daikin, linked to internet just to use their app to switch on/off for cold/hot/dry ventilation:

    immagine.png

    As soon as I set the WPA3:

    immagine.png

    inside that SCR50AXE's Nebula config:

    immagine.png

    they went online.

    Please consider that WPA3 setting inside SCR50AXE settings… should show "Transition mode" button like you can see inside 60 LITE:

    immagine.png

    I'm at your disposal, see you soon

  • Zyxel_Tina
    Zyxel_Tina Posts: 304 image  Master Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

    Hi @GiuseppeR,

    Sorry for the late reply!

    After checking, we confirm that since WPA2 uses AES encryption for authentication, devices that only support TKIP and not AES may fail at the authentication stage. This can result in the device not detecting the SSID or being unable to connect. Therefore, the issue you’re experiencing is likely due to hardware or software limitations on those end devices—even though the USG LITE 60AX is broadcasting the SSID as expected.

    Additionally, regarding your comment about the SCR 50AXE’s SSID Advanced Settings not showing the "transition mode" option, we have confirmed that this option does appear in SCR 50AXE devices on our sites. Could you please double-check your settings and confirm again?

    image.png

    Thank you for your cooperation and understanding.

    Zyxel Tina

  • GiuseppeR
    GiuseppeR Posts: 519 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector
    edited October 21

    Hi @Zyxel_Tina

    regarding 60LITE I do not understand how it is possible that switching to WPA3 Transition Mode could lead to the possibility to connect "old" hardware.

    WPA2 should keep AES and TKIP, for compatibility. Not seeing the SSID is strange.

    WPA3 Transition Mode should go with full WPA2 compatibility too, if you have old hardware, while using WPA3 with newer hardware. Something similar to MLO performance with WiFI 7.

    In this moment I have a site with 60LITE with "old" notebook linked to its SSID via WPA3 Transition mode.

    So I expect that WPA2 works as expected, both on 60LITE and SCR50AXE.

    To be honest it is strange to see A/C units going online with WPA3 and not with easier WPA2.

    In this site I have a SCR50AXE:

    immagine.png

    But I cannot see WPA3 Transition Mode like you told me, I have ONLY a possible choice of WPA3:

    immagine.png

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）