security wpa2 and wpa3 psk : how to know wich one is used per clients ?

Hi,

I’ve setup my security profile for use passphrase.
I enable both wpa2 and wpa3 psk like this :

/interface wifi security set  ....  authentication-types=wpa2-psk,wpa3-psk  passphrase="Bienvenue"

I If i see registered clients in the “/interface/wifi/registration-table”, how to know wich wpa version is used per clients ?

Are they always in wpa2 or wpa3 ? An old OS like XP or android 8 can be in wpa2, but newer version ? are they in 2 or 3 ?

Just imagine that you are hacker and you want to hack your network, will you use WPA2 or WPA3 for that attack?

… or some drug and a $5 wrench? :open_mouth:
https://xkcd.com/538

Cracking WPA3 this way would be definitely cheaper then cracking WPA2 password conventional way… :laughing:

Active authentication type is shown in ROS 7.17+ registration table.

What's new in 7.17beta2 (2024-Sep-27 10:07):

*) wifi - show authentication type and wireless standard used by each client in registration table;

like this very handy but only in latest beta as quoted here

Hi,

Thank you for all your replies.
I Don’t want drugs… You’re stupid or what?

I manage lot of ap and ssid with thousands maybe more stations.

wpa2 is used for legacy and I just want to identify an count during a month more/less the amount of clients still using wpa2. The goal is to to only use wpa3.

I’ll try 7.17b soon on the a test access point with test ssid.


Have a good day

Disable WPA2!!!

The good old admin wisdom: “Disable it and see who complains.”

But don’t forget you did because some time later someone will complain and you may not remember what has changed …

Yes, it’s necessary to have a count usage of wpa2 to ensure i’ll not lost clients… removing wpa2 must be done with clients, communication, planned date, etc…

Planning and advance notifications are highly overrated these days …

It’s for this reason i’m search the stations count per auth method.

If you want to force everyone to “throw away” all their perfectly working devices,
just because some moron of a salesman said that WPA3 is better for “mind games” on the internet,
and produce tons more garbage, go ahead.
Because while you’re watching and distracted by WPA3 you don’t see everything else.

Hi,

I’ve just tested the beta 2 of 7.17, it work like a charm on a lab hapax3.
It’s easy to identified the auth method used by stations.

I’ll planned wpa2-psk “progressive kill” fews weeks after 7.17 release.

Thank you every one.