topic Re: Do I have to have only WAP3 enabled to use WI-FI7? in Wireless

Do I have to have only WAP3 enabled to use WI-FI7?

CCC3 — Tue, 21 Oct 2025 09:26:35 GMT

If 6Ghz is enabled on WLC ssid, the condition is 'WPA3 Enabled'.

Then, should only WPA3 be enabled?
Or I'm confused if WPA3 is enabled.

If WPA3 is enabled and WI-FI7 is enabled, can I use it in WPA2 + WAP3 form as well?

Regarding this, is there any recommended settings for WI-FI7 provided by Cisco?

Re: Do I have to have only WAP3 enabled to use WI-FI7?

Parithosh Vema — Tue, 21 Oct 2025 09:51:06 GMT

Yes @CCC3 your understanding is correct, you can use WPA3 mixed mode with WPA3+WPA2, but essentially WiFi 7 comes into the picture when the client can associate with a WPA3 AKM and the standard operates on other bands too. Clients which can't use 802.11be can still continue to associate and use other available combinations. Its for 6ghz where you would need a WPA3 authentication.

This should sum it up here:

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/223061-migrate-to-wi-fi-7-and-6ghz.html

https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2025/pdf/BRKEWN-1722.pdf

Re: Do I have to have only WAP3 enabled to use WI-FI7?

Rich R — Tue, 21 Oct 2025 14:58:32 GMT

Also take a look at https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/technical-reference/wpa3-dg.html

Re: Do I have to have only WAP3 enabled to use WI-FI7?

CCC3 — Wed, 22 Oct 2025 01:21:16 GMT

Thank you for your answer.

So even if WPA2 is also enabled, it won't be a problem with the use of Wi-Fi 7, right?

And if I use WPA2+WPA3 mixed mode, could there be a compatibility problem with the terminal when it comes to using Wi-Fi 7?

And if you use an SSID of 6Ghz
Would it be efficient to create a separate 6Ghz SSID instead of the existing SSID?

Re: Do I have to have only WAP3 enabled to use WI-FI7?

Parithosh Vema — Wed, 22 Oct 2025 16:01:26 GMT

In the end it comes to your design and preference, you can have it under a single SSID or choose to split with different ones, if you want to isolate them.

Also "So even if WPA2 is also enabled, it won't be a problem with the use of Wi-Fi 7, right?" no, it shouldn't however for a client to be on the 802.11be protocol they will need to authenticate and be on WPA3.

And refer to this as well: https://www.cisco.com/c/en/us/products/collateral/networking/wireless/wifi7-future-of-wireless-dg.html#AccessLayerSecurityandStrategy "section - Access Layer Security and Strategy"