topic Re: WPA3-Personal issue for Android and Ios in Wireless

WPA3-Personal issue for Android and Ios

erik-cocquereaux — Thu, 18 Jul 2024 09:22:53 GMT

Hi folks,

I have a wireless network including 11 Meraki MR APs (9 MR33 and 2 MR36)

They all have latest firmware MR30.6

the SSID used to have WPA2-Personal (with PSK) and it worked pretty well.

A few days ago I modified it into WPA3-Personal (PSK).

I've tested with our Windows11 mobile computers and they all connect smoothlessly.

Our Android devices don't, altough they are almost new: Samsung A54 (Android 13), Samsung Galaxy Tab S6 Lite (also Android 13). They don't show any error, they just don't connect. According to specs they are capable of WPA3.

A user also tried with the newest iPhone 15 and it didn't work neither.

When i look in Connection Logs (Wireless>Access Points -> Connection Log tab: I see no error whatsoever.

I've set it to WPA3 only & 802.11r Enabled.

I've tried it with WPA3-Transition mode also, but I had still the same issue.

Anyone has encountered this situation before? Or could lead me in the right direction?
I don't know if I should modify something on the wireless clients (hopely not, there are a lot) or if I should modify my wireless network.

Kind regards,

Erik

Re: WPA3-Personal issue for Android and Ios

GreenMan — Thu, 18 Jul 2024 11:17:18 GMT

Did you try it wihout 11r?

I just did a quick test and my Samsung (somewhat to my surprise) carried on working quite happily when I changed the SSID from WAP2 to WPA3

Note I'm running with a CW9164 on 30.6 firmware

Re: WPA3-Personal issue for Android and Ios

Karsten Iwen — Thu, 18 Jul 2024 13:13:29 GMT

As mentioned by @GreenMan, with Passphrase based WLANs, 802.1r is not that relevant. It saves a round-trip time when roaming, but roaming is typically fast enough without.

Other than that, I am running WPA3 Personal and Enterprise with the major operating systems without relevant problems.

And:

With regards to security: nothing good ever comes out of transition modes (ever)

(Quote from Stephen Orr, Distinguished Systems Engineer, Cisco)

Re: WPA3-Personal issue for Android and Ios

CMR — Thu, 18 Jul 2024 21:26:15 GMT

I have an SSID running WPA3 only with Pak and 802.11r. My S22 Ultra connects to it okay most of the time... APs are CW9166 and CW9163 running r31 beta.

Re: WPA3-Personal issue for Android and Ios

bitkiller — Fri, 19 Jul 2024 09:03:12 GMT

Is it still 5GHz or did you b.t.w. switched also to 6GHz?

Re: WPA3-Personal issue for Android and Ios

GreenMan — Fri, 19 Jul 2024 09:06:41 GMT

None of the access points that @erik-cocquereaux has are 6 GHz capable (MR36 are WiFi6, not WIFi6E)

Re: WPA3-Personal issue for Android and Ios

CMR — Fri, 19 Jul 2024 09:07:05 GMT

I enabled 6GHz (indoors only in the UK), but so far I've only seen connections on 2.4 and 5 bands.

Re: WPA3-Personal issue for Android and Ios

Karsten Iwen — Fri, 19 Jul 2024 10:22:36 GMT

Accidentally configured a device restriction to 5GHz? My 6GHz capable clients connect happily with 6GHz.

And I miss a nice connection statistics view (as it is available in Mist) on the Meraki platform.

Re: WPA3-Personal issue for Android and Ios

bitkiller — Fri, 19 Jul 2024 11:55:33 GMT

Did you try out to forget WiFi-Settings and reconnect to the same WiFi as a new one?

Re: WPA3-Personal issue for Android and Ios

Philip D'Ath — Sun, 21 Jul 2024 21:26:59 GMT

I have had nothing but terrible compatibility and reliability issues using WPA3.

IoT devices needs a lot more time till they get their stacks right.

Re: WPA3-Personal issue for Android and Ios

erik-cocquereaux — Mon, 22 Jul 2024 11:39:36 GMT

By disablin 802.11, it sees to work smoothly. Thx Greenman & Karsten!
I'm going to test the roaming part now, I hope you're right Karsten.

Btw: my APs are indeed not 6GHz capable like Greenman cleverly noticed.