User's Guide
Table Of Contents
- Table of Contents
- Preface
- Welcome to Extreme Campus Controller
- Dashboard
- Monitor
- Sites List
- Device List
- Access Points List
- Smart RF Widgets
- Switches List
- Networks List
- Clients
- Policy
- Configure
- Network Configuration Steps
- Sites
- Add a Site
- Modifying Site Configuration
- Site Location
- Adding Device Groups to a Site
- Add or Edit a Configuration Profile
- Associated Profiles
- Associated Networks
- Mesh Point Profile Configuration
- Configure Client Bridge
- Understand Radio Mode
- Radio as a Sensor
- Advanced AP Radio Settings
- VLAN Profile Settings
- AirDefense Profile Settings
- ExtremeLocation Profile Settings
- IoT Profile Settings
- Positioning Profile Settings
- Analytics Profile Settings
- RTLS Settings
- Advanced Configuration Profile Settings
- Configuring RF Management
- Configuring a Floor Plan
- Advanced Tab
- Devices
- Networks
- Policy
- Automatic Adoption
- ExtremeGuest Integration
- AAA RADIUS Authentication
- Onboard
- Onboard AAA Authentication
- Manage Captive Portal
- Manage Access Control Groups
- Access Control Rules
- Tools
- Administration
- System Configuration
- Manage Administrator Accounts
- Extreme Campus Controller Applications
- Product License
- Glossary
- Index
Configure the following privacy settings:
• Protected Management Frames — Management Frames are the signaling packets used in the 802.11
wireless standard to allow a device to negotiate with an AP. PMF adds an integrity check to control
packets being sent between the client and the access point. Valid values are:
◦ WPA3 - Personal (SAE). Setting is Required. Requires that all devices use PMF format. This could
result in older devices not connecting.
◦ WPA3 - Compatibility. Setting is Enabled. Supports PMF format but does not require it.
• Input Method. Enter the PSK in String or HEX:
◦ String value — Supports a PSK of 1-63 characters
◦ HEX value — Supports a PSK of exactly 64 characters and must contain HEX digits only.
• WPA3 Key. The password to access this wireless network.
Related Topics
WLAN Service Settings on page 221
Privacy Settings for WPA3 Enterprise
WPA3 Enterprise 802.1x/EAP — Requires Protected Management Frames (PMF) enabled. For a network
with WPA3-Enterprise authentication, PMF cannot be disabled. Network access is allowed to any client
that knows the pre-shared key (PSK).
Note
6E WPA Compliance (WPA3 Personal only)
Configure the following privacy settings:
• Fast Transition — Provides faster roaming by authenticating the device before roaming occurs. This
setting is enabled by default.
• Mobility Domain ID — Used by 802.11r, this setting defines a network scope that supports 11r fast
roaming. Master keys are shared within the Mobility Domain, allowing clients to support fast
roaming.
Related Topics
WLAN Service Settings on page 221
Privacy Settings for WPA2 with PSK
WPA2 with PSK — Network access is allowed to any client that knows the pre-shared key (PSK).
Configure the following privacy settings:
• TKIP-CCMP — Select this option to use Temporal Key Integrity Protocol (TKIP) and Counter Mode
with Cipher Block Chaining Message Authentication Code Protocol (CCMP). Best Practice: TKIP
encryption is considered to be a less secure means of communication. An industry best practice is to
use a more secure option for network privacy.
• Protected Management Frames — Management Frames are the signaling packets used in the 802.11
wireless standard to allow a device to negotiate with an AP. PMF adds an integrity check to control
packets being sent between the client and the access point. Valid values are:
◦ Enabled. Supports PMF format but does not require it.
◦ Disabled. Does not address PMF format. Clients connect regardless of format.
WLAN Service Settings
Configure
226 Extreme Campus Controller User Guide for version 5.46.03