Lenovo T440 and WBE630S

Options
FabioBasso
FabioBasso Posts: 15 image  Freshman Member
Zyxel Certified Sales Associate First Answer First Comment Third Anniversary

I have a WBE630S AP and cannot access the 5GHz network from a Lenovo T440 running Ubuntu 24.04 LTS. It worked fine when I was using a WAX610D. I have also noticed that certain smartphone models capable of 5GHz networking cannot connect to the 5GHz network, connecting only to the 2.4GHz one.

Accepted Solution

  • Zyxel_Tina
    Zyxel_Tina Posts: 933 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments
    Answer ✓
    Options

    Hi @FabioBasso,

    The key difference between the two APs is that the WBE630S is a WiFi 7 (802.11be) model. When the radio mode is set to 802.11be, the AP requires WPA3 on that radio. Even if the SSID security profile is set to WPA2, 802.11be radios will negotiate WPA3 with clients that support it; clients that only support WPA2 may fail to associate on that band.

    Before we go further, could you please confirm:

    • Do the Lenovo T440's wireless adapter and the affected smartphones support WPA3? (Please note that "5GHz-capable" does not mean WPA3-capable.)

    If any of these devices don't support WPA3, that would explain why they fail to associate on 5GHz and fall back to 2.4GHz.

    In the meantime, could you also try the following two tests?

    1. Create a new test SSID on the WBE630S's 5GHz radio and try connecting the affected laptop/phones to it. If they connect successfully to the new SSID, this points to a stale saved WiFi profile on the client (e.g., Ubuntu's NetworkManager still remembering the old WPA2 profile with the same SSID name from the WAX610D)
    2. On the WBE630S, change the radio mode from 802.11be to 802.11ax for the affected band, then try reconnecting the same devices. Switching to 802.11ax disables the automatic WPA3 enforcement (and MLO), so the SSID will use the security mode as configured (e.g., WPA2). If the devices connect fine after this change, that confirms WPA3 compatibility is the root cause.

    Please let us know the results of these checks. If the devices still can't connect to 5GHz even after these tests, please collect a diagnostic file from the WBE630S at the time the issue occurs and send it to us via PM — that will help us investigate further.

    Zyxel Tina

All Replies

  • Zyxel_Tina
    Zyxel_Tina Posts: 933 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments
    Answer ✓
    Options

    Hi @FabioBasso,

    The key difference between the two APs is that the WBE630S is a WiFi 7 (802.11be) model. When the radio mode is set to 802.11be, the AP requires WPA3 on that radio. Even if the SSID security profile is set to WPA2, 802.11be radios will negotiate WPA3 with clients that support it; clients that only support WPA2 may fail to associate on that band.

    Before we go further, could you please confirm:

    • Do the Lenovo T440's wireless adapter and the affected smartphones support WPA3? (Please note that "5GHz-capable" does not mean WPA3-capable.)

    If any of these devices don't support WPA3, that would explain why they fail to associate on 5GHz and fall back to 2.4GHz.

    In the meantime, could you also try the following two tests?

    1. Create a new test SSID on the WBE630S's 5GHz radio and try connecting the affected laptop/phones to it. If they connect successfully to the new SSID, this points to a stale saved WiFi profile on the client (e.g., Ubuntu's NetworkManager still remembering the old WPA2 profile with the same SSID name from the WAX610D)
    2. On the WBE630S, change the radio mode from 802.11be to 802.11ax for the affected band, then try reconnecting the same devices. Switching to 802.11ax disables the automatic WPA3 enforcement (and MLO), so the SSID will use the security mode as configured (e.g., WPA2). If the devices connect fine after this change, that confirms WPA3 compatibility is the root cause.

    Please let us know the results of these checks. If the devices still can't connect to 5GHz even after these tests, please collect a diagnostic file from the WBE630S at the time the issue occurs and send it to us via PM — that will help us investigate further.

    Zyxel Tina