WPA3-Enterprise on Cisco 9800: Master AKM 3 & 5

Описание: In this second episode of our WPA3-Enterprise Series, we are tackling the WPA3-Enterprise Only mode on the Cisco Catalyst 9800 WLC.

Moving away from 'Transition Mode' means leaving legacy vulnerabilities behind. We dive into why AKM 5 (802.1X-SHA256) and AKM 3 (FT over 802.1X-SHA256) are mandatory for modern, high-performance environments—especially if you're deploying in the 6GHz band or preparing for Wi-Fi 7.

00:00 Intro: WPA3-Enterprise on Cisco 9800
00:18 Understanding AKM Values: AKM 3 vs AKM 5
00:59 Transition Mode & WPA2/WPA3 Coexistence
01:28 Why 6GHz Does Not Support Transition Mode
02:11 Cisco 9800 WLAN Security Configuration
03:08 Mapping AKMs in the Controller GUI
04:06 Windows 11 Client Verification (netsh)
04:57 Wi-Fi 7 MLO Verification: Multiple Link IDs
05:46 Monitoring MLO Clients in Cisco 9800 Dashboard
07:02 The Cipher Debate: GCMP-256 vs CCMP-128
09:08 Using ls-wifi for SSID Deep Dives
11:33 Wireshark Analysis: RSN Information Elements
12:39 Enabling Fast Transition (11r) for AKM 3
15:24 Exporting PCAPs for Security Verification
16:44 Troubleshooting Legacy Devices (Pixel 2 Test)
20:04 Controller-level Packet Capture & .1X Handshake
22:18 Summary: WPA3-Enterprise Requirements
23:08 Windows 11 Version Check: 24H2/25H2 Importance
24:54 Final Results: Pixel 2 WPA3/PMF Support
28:09 Outro & Transition Mode Preview

Resources Mentioned:

🔗 Blog: Enterprise Security - WPA3 AKM Overview https://mrncciew.com/2026/01/06/enter...

#WiFi7 #Cisco9800 #WPA3 #MLO #indows11 #mrncciew