topic Re: Meraki Cloud Authentication - WPA3 Enterprise in Wireless

Meraki Cloud Authentication - WPA3 Enterprise

Christopher Adlam — Tue, 06 May 2025 20:38:25 GMT

Is there any plan to upgrade 802.1X with Meraki Cloud Authentication to support WPA3? Just upgraded a group of MR20's to CW9172I's and so of course would like to use the 6Ghz band but can't with this config.

Re: Meraki Cloud Authentication - WPA3 Enterprise

aleabrahao — Tue, 06 May 2025 20:43:31 GMT

Currently, Cisco Meraki supports WPA3-Personal and WPA3-Enterprise modes, but there are some limitations and considerations when using these modes, especially with the 6 GHz band and 802.1X authentication.

WPA3 Encryption and Configuration Guide - Cisco Meraki Documentation

But to be honest, only Meraki will be able to answer whether there is any provision for dealing with these limitations.

Re: Meraki Cloud Authentication - WPA3 Enterprise

Brash — Tue, 06 May 2025 23:27:07 GMT

Meraki doesn't typically publish the roadmap of features.

My advice is:

- Keep an eye on release notes in Beta releases

- Check-in on Cisco Live sessions (which will sometimes contain a roadmap)

- Raise it with your AM/SE who can follow up with the internal team and help provide justification for adding the feature if it's feasible.

Re: Meraki Cloud Authentication - WPA3 Enterprise

Philip D'Ath — Wed, 07 May 2025 20:16:38 GMT

Note that WPA3 has poor device compatibility at the moment. It is difficult to roll out in production without breaking some devices. The approach mostly being used at the moment is to create a new WPA3 SSID and only move those devices across that work reliably.

I could see it being another couple of years before WPA3 can be generally rolled out.

On top of this, you also need Meraki to add WPA3 support for Meraki Cloud authentication for you.

Re: Meraki Cloud Authentication - WPA3 Enterprise

Christopher Adlam — Wed, 07 May 2025 20:19:19 GMT

Yes, that's what the plan was, to do a separate WPA3 SSID with 802.1X w/Meraki Cloud Auth, but of course I've discovered that this isn't a supported config at this time.