topic Re: Opportunistic Wireless Encryption (OWE) Dual Guest networks in Wireless

Opportunistic Wireless Encryption (OWE) Dual Guest networks

ClockN — Fri, 13 Jan 2023 17:07:38 GMT

Recently implemented Opportunistic Wireless Encryption (OWE) on our Guest Wi-Fi configured with a Splash Page. When the Guest SSID was Open with No Encryption only one Guest SSID was shown. When Opportunistic Wireless Encryption (OWE) was enabled I now have two Guest SSIDs broadcasting their presence. One functions normally through the Splash Page with no lock symbol. The other Guest SSID shows up with a lock symbol and is requestion and EAP method. My question is how to make the SSID with the EAP Method disappear from the guests' devices?

Model: MR45
Current version: MR 29.4.1

Thanks in advance for any insight to my question.

Re: Opportunistic Wireless Encryption (OWE) Dual Guest networks

BRUCE NEWTON — Sat, 14 Jan 2023 22:21:10 GMT

Clients have to support OWE to make use of it. I haven’t implemented OWE yet, but I’m wondering whether what you’re seeing is Meraki presenting you with both an OWE enabled SSID (the one with a lock), and an open SSID (the one without the lock). This would allow clients that don’t support OWE to still connect to your guest network. If this is the case, then to remove the the SSID with the ‘lock’, you’ll need to revert to using an Open SSID. I’m sure things will change when there is more support and adoption of WPA3/OWE.

Re: Opportunistic Wireless Encryption (OWE) Dual Guest networks

Karsten Iwen — Sun, 15 Jan 2023 13:46:13 GMT

I think the problem you are running into is based on that Meraki doesn't yet support transition mode with OWE. There you would see one SSID and the capable client would use OWE and the older client would use the standard open mode.

Unless that is implemented by Meraki I would either not use OWE or use two SSIDs with different names like "Guest" and "Guest-Secure".

But I am not sure what you mean with the EAP methods, This is typically related to an Enterprise WPA implementation and will always show up on the client devices.

Re: Opportunistic Wireless Encryption (OWE) Dual Guest networks

burnz — Mon, 16 Jan 2023 01:23:52 GMT

Please be aware that Apple devices currently don’t support owe..

Re: Opportunistic Wireless Encryption (OWE) Dual Guest networks

Creyna10 — Mon, 11 Sep 2023 15:06:51 GMT

As of IOS 16 some apple devices now support OWE.
https://support.apple.com/guide/deployment/how-apple-devices-join-wi-fi-networks-dep3b0448c58/web

Re: Opportunistic Wireless Encryption (OWE) Dual Guest networks

danjns — Mon, 11 Sep 2023 19:03:58 GMT

macOS devices don't. iOS and iPadOS devices do.

Re: Opportunistic Wireless Encryption (OWE) Dual Guest networks

Karsten Iwen — Mon, 11 Sep 2023 21:49:25 GMT

I am not sure when it started, but my M2 is just now connected to an OWE SSID:

Re: Opportunistic Wireless Encryption (OWE) Dual Guest networks

burnz — Wed, 13 Sep 2023 13:08:41 GMT

Would be nice if meraki will support transition mode with OWE.