So what's the Plan for ePSK and WiFi7

Springs · April 3, 2024, 4:35pm

Last time I checked… ePSK didn’t work with WPA3.

Is ePSK going to be supported in WiFi 7?

KumarK · April 3, 2024, 5:30pm

@Springs , yes we will have WPA3 support for ePSK with our Wi-Fi 6/6E and 7 APs. Launching beta in May timeframe.

Springs · April 3, 2024, 5:37pm

While I don’t always “enjoy” beta testing. As long as its on my test bench and not in front of clients… if it needs to be done… I work on it.

KumarK · April 3, 2024, 9:48pm

I believe you have worked with Gary Hansen. I will ask him to reach out to you once the code is in a demoable form so that he can show you how it works first, so we don’t use too much of your time. Once it is available on Wi-Fi 6 APs, we can give you the code also so you can test it at your convenience. I am collecting early feedback from select customers. Appreciate your help!

ComplitNetworks · March 27, 2025, 8:29am

do you need to link a mac address to the ePsk and wpa3?

Springs · March 27, 2025, 9:33am

I was never told… “Ok, this firmware includes it. Start testing.”

Mike_Hammett · August 8, 2025, 12:46pm

How is this going? I had heard the xPSK technologies were going to be a problem with WPA3, which is required for some bands and versions of 802.11.

Springs · August 8, 2025, 1:05pm

I accidentally turned on WPA3 on my home system. Had to ask support how to turn it back off.

Was promised a remote session to show me “the new work flow” with WPA3 and ePSK.

Haven’t had a chance to do that session as I have a bug from several months ago I need fixed first

Chandrashekhar · August 12, 2025, 9:50am

Hi Mike,

EPSK(Multipsk feature) can be used with WPA3. Need to follow epsk registraion flow for 6GHz band clients to work with EPSK. Refer user guide for more info epsk registration flow, starting on page 94:

ePSK registration for WPA3 clients

For the ePSK feature, when you configure WPA3-WPA2 (mixed mode)-PSK or WPA3-PSK as the WLAN security, the clients connection in the WPA3 mode must go through an additional registration phase. This is different from the flow when you configure WPA2-PSK as the WLAN security, where users can authenticate by using only a passphrase.

When clients use WPA3-PSK security, Simultaneous Authentication of Equals (SAE) is the authentication mechanism where an extra authentication is added, which is more secure than WPA2. For WPA2-PSK clients, the passphrase is matched against a database to identify the user. However, this is not possible for WPA3-PSK clients because of the extra authentication in WPA3-SAE. When WPA2-PSK security is used, the Pairwise Master Key (PMK) is the same for every connection made by the client. This is due to the underlying weaknesses in WPA2-PSK, which make it easier to validate the passphrase. In contrast, when WPA3-PSK security is used, a new PMK is generated each time a client joins the network. Therefore, registration will help us to know the passphrase upfront when a client tries to connect. This mandates the users to register themselves with the ePSK passphrase to bind the client MAC with the passphrase to successfully connect to the Wi-Fi network.

For WPA3 clients to connect to the network using ePSK flow:

First connect to the WLAN with the WLAN passphrase.
A simple password is recommended to be configured, for example, signmeup, or any other appropriate passphrase.

Register themselves with the WPA3-ePSK unique passphrase.
After the MAC binding is complete, users can use the WPA3-ePSK unique passphrase for subsequent WLAN connections.

Chandrashekhar · August 12, 2025, 10:00am

Configure security as WPA2/WPA3-PSK or WPA3-PSK.

Add ESPK entry.

Connect with wlan passphrase.

Enter EPSK passphrase in redirection page.

Reconnect client with EPSK Passphrase.

Mac Linking is not required.

Springs · August 12, 2025, 10:16am

To answer the question…

It’s not going. The last firmware I got shut off my X7-v35.. I reported this and am awaiting replacement/replacements.

I have been stuck with Mikrotik caps-man for the last month.