NETGEAR WAX214 User Manual page 52

NETGEAR WiFi 6 AX1800/AX3600 Dual Band PoE/PoE+ Access Points, WAX214 and WAX218
Setting
None
OWE
WPA2-Personal
WPA3-Personal
WPA2/WPA3-Personal
9. If you select WPA2-Personal, WAP3-Personal, or WPA2/WPA3-Personal from the
Security Mode menu, configure the following settings:
a. Passphrase: Specify a phrase of 8 to 63 characters. To join the SSID, a user must
enter this passphrase.
b. Group Key Update Interval: Specify a period from 30 to 3600 seconds, which
is the period after which the WiFi network group key changes in the background.
(Connected users are not affected.) The default period is 3600 seconds. To disable
group key changes, specify 0.
10. To enable fast roaming for WPA2-Personal security, in the Fast Roaming section,
select the Enable radio button.
For WPA personal security, fast roaming is available only if you select WPA2-Personal
from the Security Mode menu. By default, fast roaming is disabled for these types
of WiFi security. If your network includes WiFi clients that must be able to roam from
one access point to another, enable fast roaming so that certain client applications
can quickly reassociate with the new access point.
Note: For information about band steering, RADIUS settings (other than RADIUS
settings for enterprise security), RADIUS accounting, the WiFi MAC filter, and WiFi
traffic shaping, see Manage the Advanced WiFi and Radio Settings on page 63.
Manage the Basic Radio and
WiFi Settings
Description
A legacy open WiFi network does not provide any security. Any WiFi device can join
the network. Clients are not authenticated and traffic is not encrypted. We recommend
that you do not use a legacy open WiFi network without any security but configure
WiFi security. However, a legacy open network might be appropriate for a WiFi
hotspot.
The WiFi network can only accept clients that support the WiFi enhanced open feature,
which is based on opportunistic wireless encryption (OWE). Select this option only
if all the clients in the WiFi network support OWE.
This option, which is the same as WPA2-PSK, is the default setting. This type of security
enables only WiFi devices that support WPA2 to join the SSID.
This option, which is the same as WPA3-PSK, is the most secure personal
authentication option. WPA3 enables only WiFi devices that support WPA3 to join
the SSID. If your network also includes WPA2 devices, select WPA3/WPA2-Personal
security.
This option, which is the same as WPA3-PSK/WPA2-PSK, enables WiFi devices that
support either WPA2 or WPA3 to join the SSID. WPA2 is less secure than WPA3.
52 User Manual