iPSK without Radius not compatible with 6ghz?

SOLVED
nerdherd
Comes here often

iPSK without Radius not compatible with 6ghz?

Hi All, finally got some MR57s for testing.

 

Unfortunately I missed the memo (and still cant find it)...Apparently iPSK without radius is not compatible with 6 ghz? 

 

Regular PSK doesnt give any issue, but iPSK says "This SSID will not be broadcast on the 6 GHz band. Use OWE to enable this band." (WPA3 is also not available as an option when iPSK selected)

 

Seems weird since I thought iPSK from a client perspective is just PSK.

 

Is this a limitation right now because it's still in development? or is iPSK never going to work with 6ghz?

I cant find any documentation that says either way

 

Thanks for any help!

1 ACCEPTED SOLUTION
KarstenI
Kind of a big deal

The way the actual WPA3-SAE implementation is done, MPSK (or iPSK without RADIUS) can not work. The AP had to try multiple PSKs until the right one is matched. But this was prohibited by design in WPA3. On each connect, only one PSK can be checked. iPSK with RADIUS could work, but probably needs to be implemented.

View solution in original post

4 REPLIES 4
NolanHerring
Kind of a big deal

I can't speak for Meraki, but 6GHz (Wi-Fi 6E) requires WPA3 or better. Meraki's current implementation of iPSK does not support WPA3, so that is why you are running into that. 

Nolan Herring | nolanwifi.com
TwitterLinkedIn
PhilipDAth
Kind of a big deal

I've had terrible compatibility issues with clients when using WPA3 (last tested about a month ago).  IMHO, WPA3 is not ready for production deployment.

KarstenI
Kind of a big deal

The way the actual WPA3-SAE implementation is done, MPSK (or iPSK without RADIUS) can not work. The AP had to try multiple PSKs until the right one is matched. But this was prohibited by design in WPA3. On each connect, only one PSK can be checked. iPSK with RADIUS could work, but probably needs to be implemented.

Thank you!  Didnt know that's how iPSK worked under the hood.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels