So what's the Plan for ePSK and WiFi7

[Springs]

Last time I checked… ePSK didn’t work with WPA3.

Is ePSK going to be supported in WiFi 7?

[KumarK]

@Springs , yes we will have WPA3 support for ePSK with our Wi-Fi 6/6E and 7 APs. Launching beta in May timeframe.

[Springs]

While I don’t always “enjoy” beta testing. As long as its on my test bench and not in front of clients… if it needs to be done… I work on it.

[KumarK]

I believe you have worked with Gary Hansen. I will ask him to reach out to you once the code is in a demoable form so that he can show you how it works first, so we don’t use too much of your time. Once it is available on Wi-Fi 6 APs, we can give you the code also so you can test it at your convenience. I am collecting early feedback from select customers. Appreciate your help!

[ComplitNetworks]

do you need to link a mac address to the ePsk and wpa3?

[Springs]

I was never told… “Ok, this firmware includes it. Start testing.”

[Mike_Hammett]

How is this going? I had heard the xPSK technologies were going to be a problem with WPA3, which is required for some bands and versions of 802.11.

[Springs]

I accidentally turned on WPA3 on my home system. Had to ask support how to turn it back off.

Was promised a remote session to show me “the new work flow” with WPA3 and ePSK.

Haven’t had a chance to do that session as I have a bug from several months ago I need fixed first

Turned on EPSK on a WPA3 network. Now I need it off

Turned on WPA3 a long time ago. Added an EPSK key and everything disconnected. Deleted that one ePSK key but still nothing works. Appears adding a EPSK key turn on a setting I can’t find to turn off.. “This WLAN uses WPA3 security. Client registration flow is required and will be enabled when ePSK entries are added. Use the QR code to guide users for registering their clients. Note that the WLAN Passphrase will be used to verify that the client is attempting registration. Ensure that the clie…

[Chandrashekhar]

@Mike_Hammett

How is this going? I had heard the xPSK technologies were going to be a problem with WPA3, which is required for some bands and versions of 802.11.

Hi Mike,

EPSK(Multipsk feature) can be used with WPA3. Need to follow epsk registraion flow for 6GHz band clients to work with EPSK. Refer user guide for more info epsk registration flow, starting on page 94:

ePSK registration for WPA3 clients

For the ePSK feature, when you configure WPA3-WPA2 (mixed mode)-PSK or WPA3-PSK as the WLAN security, the clients connection in the WPA3 mode must go through an additional registration phase. This is different from the flow when you configure WPA2-PSK as the WLAN security, where users can authenticate by using only a passphrase.

When clients use WPA3-PSK security, Simultaneous Authentication of Equals (SAE) is the authentication mechanism where an extra authentication is added, which is more secure than WPA2. For WPA2-PSK clients, the passphrase is matched against a database to identify the user. However, this is not possible for WPA3-PSK clients because of the extra authentication in WPA3-SAE. When WPA2-PSK security is used, the Pairwise Master Key (PMK) is the same for every connection made by the client. This is due to the underlying weaknesses in WPA2-PSK, which make it easier to validate the passphrase. In contrast, when WPA3-PSK security is used, a new PMK is generated each time a client joins the network. Therefore, registration will help us to know the passphrase upfront when a client tries to connect. This mandates the users to register themselves with the ePSK passphrase to bind the client MAC with the passphrase to successfully connect to the Wi-Fi network.

For WPA3 clients to connect to the network using ePSK flow:

1. First connect to the WLAN with the WLAN passphrase.
   A simple password is recommended to be configured, for example, signmeup, or any other appropriate passphrase.
2. Register themselves with the WPA3-ePSK unique passphrase.
   After the MAC binding is complete, users can use the WPA3-ePSK unique passphrase for subsequent WLAN connections.

[Chandrashekhar]

Configure security as WPA2/WPA3-PSK or WPA3-PSK.

Add ESPK entry.

Connect with wlan passphrase.

Enter EPSK passphrase in redirection page.

Reconnect client with EPSK Passphrase.

Mac Linking is not required.

[Springs]

To answer the question…

It’s not going. The last firmware I got shut off my X7-v35.. I reported this and am awaiting replacement/replacements.

I have been stuck with Mikrotik caps-man for the last month.

[Springs]

So would any device connecting with the WLAN passphrase be forced to the redirection page and not allowed to proceed with out it?

Seems like you need a separate SSID for registration. One that jumps you to the captive portal to enter your passphrase. Once thats entered the system needs to send a file back to the client that loads into their WiFi profiles. Which should automagically connect you to the RIGHT SSID without any further action.

[Chandrashekhar]

@Springs

So would any device connecting with the WLAN passphrase be forced to the redirection page and not allowed to proceed with out it?

Yes. If securiy is WPA2/WPA3-PSK or WPA3-PSK then all devices connecting with the WLAN passphrase will be forced to the redirection page.

@Springs

Seems like you need a separate SSID for registration.

No. Seperate SSID is not required for Registration. Client connects to Access SSID with wlan passphrase, gets registered and reconnect with EPSK passphrase. This is one time activity.

[Springs]

The manual makes it sound like you have to delete the connection profile on the device then reenter the new password.

If that’s the case… I would highly recommend you figure out how to do it the way I described…

Connect to “Landing SSID”

Enter your EPSK into the portal.

Then a file downloads to your device with the connection profile.

Which loads to the device, so all they have to do next is select that SSID.