NETGEAR WAX214 User Manual page 56

NETGEAR WiFi 6 AX1800/AX3600 Dual Band PoE/PoE+ Access Points, WAX214 and WAX218
Setting
WPA2-Enterprise
WPA3-Enterprise
WPA2/WPA3-Enterprise
9. Configure the following RADIUS authentication server settings:
a. SuiteB 192bits: (This setting applies to WPA3-Enterprise only.) To enable the
equivalent of 192-bit cryptographic strength for WPA3, select the Enable button.
By default, this options is disabled.
b. Group Key Update Interval: Specify a period from 30 to 3600 seconds, which
is the period after which the WiFi network group key changes in the background.
(Connected users are not affected.) The default period is 3600 seconds. To disable
group key changes, specify 0.
c. Radius Server: Specify the IPv4 address of the RADIUS authentication server.
The access point must be able to reach this IP address.
d. Radius Port: Specify the number of the UDP port on the access point that is used
to access the RADIUS authentication server. The default port number is 1812.
e. Radius Secret: Specify the shared key (WiFi password) that is used between the
access point and the RADIUS authentication server during the authentication
process.
10. To enable fast roaming for WPA2-Enterprise security, in the Fast Roaming section,
select the Enable radio button.
For enterprise security, fast roaming is available only if you select WPA2-Enterprise
from the Security Mode menu. By default, fast roaming is disabled for this type of
WiFi security. If your network includes WiFi clients that must be able to roam from
one access point to another, enable fast roaming so that certain client applications
can quickly reassociate with the new access point.
Note: For information about band steering, RADIUS settings (other than RADIUS
settings for enterprise security), RADIUS accounting, the WiFi MAC filter, and WiFi
traffic shaping, see Manage the Advanced WiFi and Radio Settings on page 63.
11. Click the Save button.
Your settings are saved but not yet applied.
A pop-up window displays. The window shows the number of changes to be applied.
Manage the Basic Radio and
WiFi Settings
Description
This option enables only WiFi devices that support WPA2 to join the SSID.
This option enables only WiFi devices that support WPA3 to join the SSID. If your
network also includes WPA2 devices, select WPA3/WPA2-Enterprise security.
This option enables WiFi devices that support either WPA2 or WPA3 to join the SSID.
WPA2 is less secure than WPA3.
56 User Manual