5 ms·

This is going to be a more common problem with 6ghz radios and Wifi 6E/7 requiring WPA3, and no transition mode permissible per spec. I recently ran into this

This is going to be a more common problem with 6ghz radios and Wifi 6E/7 requiring WPA3, and no transition mode permissible per spec. I recently ran into this with a customer running Cisco Meraki AP's that it was either disable 6ghz to keep legacy devices working with wpa2-psk, which was a lot of random things including laptops with old nics, Ring doorbells, various old mobiles, etc, or replace them with not crappy/old wifi devices. We had to push all the crap like that to the guest network vs. an enterprise ssid we actually wanted to use the 6ghz with for performance. Sadly the biggest volume of Internet of Shite devices are going to be quickly every Windoze 10 system out there that Microsoft refuses to support WPA3 despite drivers, stating only Win11 would get it. Another reason for them to push people their new Telemetry spyware with improved even less privacy. Oddly I purchased a Zyxel Wifi 6E AP with 6ghz, and it does let me operate in WPA3 and/or WPA3-Transition while letting things connect to 6ghz or 2.4/5ghz, which Cisco/Meraki simply does not allow, and from my understanding correct per spec. I just have to wonder if those wacky Asian semi's are purposely ignoring that spec or simply blissfully ignorant of the fact it's not exactly adhering to rules. Either way I was annoyed with Cisco by it and recommended next time they spend less and get non-Cisco kit that were more flexible, recommending Zyxel for a literal 10th of retail cost of the same Cisco AP.

epcoa 3y ago
> literal 10th of retail cost of the same Cisco AP. It’s a 10th of the cost for probably 10000th of the R&D budget alone. Zyxel devices, especially the firmware are a total joke. It’s consumer grade garbage sold with quasicommercial marketing. And you use this equipment in a security sensitive environment at your own peril.
- creshal 3y ago
  As opposed to Cisco, who have a proven security record of shipping multiple backdoors in every product.
hiatus 3y ago
> Sadly the biggest volume of Internet of Shite devices are going to be quickly every Windoze 10 system out there that Microsoft refuses to support WPA3 despite drivers, stating only Win11 would get it. Windows 10 seems to support WPA3. https://support.microsoft.com/en-us/windows/faster-and-more-secure-wi-fi-in-windows-26177a28-38ed-1a8e-7eca-66f24dc63f09#WindowsVersion=Windows_10 https://support.microsoft.com/en-us/windows/faster-and-more-...
- bastard_op 3y ago
  Ah, my bad, it does not support 6ghz directly, though it does support wpa3. I just remembered it was some shenanigans they simply refused to support 6ghz one way or another. https://answers.microsoft.com/en-us/windows/forum/all/windows-11-with-ax210ax211-unable-to-see-6ghz/a2bbf7d2-d121-4cb0-a17d-afa7ebfca7a9 https://answers.microsoft.com/en-us/windows/forum/all/window... There's no technical reason that windoze 10 should NOT support it far as I know, they're simply using it as a reason to push people to 11. I can and have added a 6ghz usb nic to a 10 dollar and 10+ year old netgear router and have it work, there's no reason windoze 10 can not other than Microsoft says no.
  - delfinom 3y ago
    Microsoft isn't in charge of this though. It's the wifi card vendors. I wouldn't be surprised if this is Intel shenanigans because they have always segmented their OS driver support dating back to Windows 7. Anything from laptop gpu drivers not getting updates after 2 years to chipsets suddenly failing the compatibility mode flags on newer windows that has never changed since older windows. Intel just literally doesn't care. They shovel their crap out.
ExoticPearTree 3y ago
> Oddly I purchased a Zyxel Wifi 6E AP with 6ghz, and it does let me operate in WPA3 and/or WPA3-Transition while letting things connect to 6ghz or 2.4/5ghz, which Cisco/Meraki simply does not allow, and from my understanding correct per spec. If you do WiFi 6E you have to do WAP3 (SAE) and there is no backward compatibility to WPA2. You can do transition mode but only in 2.4/5Ghz bands, not 6Ghz band.

epcoa 3y ago

> literal 10th of retail cost of the same Cisco AP. It’s a 10th of the cost for probably 10000th of the R&D budget alone. Zyxel devices, especially the firmware are a total joke. It’s consumer grade garbage sold with quasicommercial marketing. And you use this equipment in a security sensitive environment at your own peril.

creshal 3y ago
As opposed to Cisco, who have a proven security record of shipping multiple backdoors in every product.

hiatus 3y ago

> Sadly the biggest volume of Internet of Shite devices are going to be quickly every Windoze 10 system out there that Microsoft refuses to support WPA3 despite drivers, stating only Win11 would get it. Windows 10 seems to support WPA3. https://support.microsoft.com/en-us/windows/faster-and-more-secure-wi-fi-in-windows-26177a28-38ed-1a8e-7eca-66f24dc63f09#WindowsVersion=Windows_10 https://support.microsoft.com/en-us/windows/faster-and-more-...

bastard_op 3y ago
Ah, my bad, it does not support 6ghz directly, though it does support wpa3. I just remembered it was some shenanigans they simply refused to support 6ghz one way or another. https://answers.microsoft.com/en-us/windows/forum/all/windows-11-with-ax210ax211-unable-to-see-6ghz/a2bbf7d2-d121-4cb0-a17d-afa7ebfca7a9 https://answers.microsoft.com/en-us/windows/forum/all/window... There's no technical reason that windoze 10 should NOT support it far as I know, they're simply using it as a reason to push people to 11. I can and have added a 6ghz usb nic to a 10 dollar and 10+ year old netgear router and have it work, there's no reason windoze 10 can not other than Microsoft says no.
- delfinom 3y ago
  Microsoft isn't in charge of this though. It's the wifi card vendors. I wouldn't be surprised if this is Intel shenanigans because they have always segmented their OS driver support dating back to Windows 7. Anything from laptop gpu drivers not getting updates after 2 years to chipsets suddenly failing the compatibility mode flags on newer windows that has never changed since older windows. Intel just literally doesn't care. They shovel their crap out.

ExoticPearTree 3y ago

> Oddly I purchased a Zyxel Wifi 6E AP with 6ghz, and it does let me operate in WPA3 and/or WPA3-Transition while letting things connect to 6ghz or 2.4/5ghz, which Cisco/Meraki simply does not allow, and from my understanding correct per spec. If you do WiFi 6E you have to do WAP3 (SAE) and there is no backward compatibility to WPA2. You can do transition mode but only in 2.4/5Ghz bands, not 6Ghz band.