Cloud Managed Networks

Hey has anyone else noticed that the WPA3 options have disappeared from Aruba Central? I contacted support yesterday and got a response of it’s not available in central. But I know it was available as I had a network setup yesterday with it but the Authentication server needed changing. When editing the SSID the security drop down was blank. The only options now available were WPA2.

Enchanted Open - not seen it available in central yet, support did t even come back about this to me. Anyone know when it’s expected as an option in Aruba Central?

Do you have 8.4 or up installed on your access points, and are they 300 (802.11ac wave 2) or 500 (802.11ax) series access points?

 

If Central installed the 8.4 or 8.5 firmware, it should support configuring WPA3/Enhanced open. Can you share via a PM the support case id if you have that?

 

Note that for Enhanced Open, you will need to select 'Open' network first, then under that in the Key Management 'Enhanced Open'.

 

Can you also try if the options may show up if you create a new network (vs modifying an existing)?

I have the same issue, been setting up a new AP or new SSID and the WPA3 option or Enhanced Open Authentication options are missing from Central.

Even after upgrading to 8.5.0.0 i still don't have such options.

Any suggestions?

I should also add that TAC have said it will be back with Central 2.5 so we just have to wait now.

Yes all the versions are correct and I know how to set them up but the option for WPA3 has disappeared from central. I had setup a network from scratch in Central a few weeks back and selected WPA3. At the time I hadn’t entered the Radius server details so left the server as internal. When going to edit the ssid server the option for WPA was gone. I had no choice but select WPA2.

The WPA 3 options have now reappeared in Aruba Central and can be selected even for existing wireless SSID by changing to WPA3 from Wireless Management Security menu

Does user need to install a special client to use enhanced Open Auth?

What is the performance overhead of enhanced OA?

Your client device should support Enhanced open. Over time it is expected that clients will start supporting Enhanced Open which can be done through firmware updates in most cases.

 

There is no effective impact on performance by using Enhanced Open as it is similar to the current WPA2 with Preshared key (seen from performance) and I have not heard people getting performance issues by enabling WPA2. Most of the encryption is done in the WiFi chipset for many devices.

 

As of now, enhanced open is implemented in wpa_supplicant/hostapd which is the most widespread supplicant used in Linux and Android. Also, Android 10 supports OWE/Enhanced Open as one of the first big client platforms. It will take some more time before the client support is widely spread. If vendors implement WPA3, which is mandatory for WiFi-6 certification, it is trivial to add OWE. For the time to reach a critical mass, I have seen expectations of 1-2 years from now.

 

If people reading this have more information on devices that do support OWE/WPA3, or a place where that data collected, please share.