Wireless Access

Hey everyone!

Long time no see, hope to get more active again here in the forums :) I have a quick question! If I reconfigure an existing SSID profile from "opensystem" to "Enhanced open" and also have Opmode transition "Enabled". Will this configuration provide enhanced open capabilities with opensystem fallback to all APs that support enhanced open and to AP models not supporting enhanced open it will still work but with opensystem only?

Trying to figure out if I need to separate the supported APs from the non-supported APs or if I can just apply the setting on the global profile.

Cheers guys!
Chris

What I have seen in the past is that if you configure OWE and the AP does not support it, it will automatically revert back to broadcast an open SSID instead, regardless of the transition status.

It's simple to test, by just configuring one SSID, then check on one of the non-OWE capable APs with the command 'show ap bss-table' what SSIDs are broadcasted.

Note that clients may not really like it if part of the SSIDs are OWE (and have a different named open transition SSID) and others are just open. For different sites, same AP type per site, it shouldn't be an issue.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Hey, short update!

For anyone looping into this thread and thinking about configuring enhanced open on a global SSID profile, be aware that it´s not supported on split-tunnel SSIDs. When testing, I got this lovely prompt:

Always best to conduct some tests before deploying :)

Cheers,

Hey again!

Also when testing further, I applied an Enhanced open SSID profile to an AP-103 and it didn´t broadcast the SSID at all even though transition mode was on. Changing back to opensystem started the SSID broadcast at the AP. 

So my conclusion is that you should only configure enhanced open SSIDs on APs that support WPA3. Older APs will not broadcast that SSID.

Cheers,