Configuring Internal DPSK3

Configuring Internal DPSK3 enables SmartZone to locally generate and manage Dynamic Pre-Shared Keys (DPSKs) for client authentication without relying on an external server. It allows per-user or per-device unique keys, MAC binding, and policy enforcement, enhancing security and access control within WPA2/WPA3-enabled WLANs.
Before configuring Internal DPSK3, ensure that the SmartZone is properly deployed and reachable. Create a WLAN in WPA2/WPA3 mixed mode, enable DPSK3, and select Internal mode to proceed with the configuration.
To configure Internal DPSK3, perform the following:
  1. From the main menu, navigate to Network > Wireless > Wireless LANs, select a zone from the system tree and click Create.
    This displays Create WLAN Configuration window.
  2. In the Create WLAN Configuration window, configure the following:
    General Options
    • Name - Enter a valid name for the WLAN.
    • SSID - The WLAN name is used as the SSID.
    • Description - Enter a short, precise description for the WLAN.
    • WLAN Group - Select a WLAN group from the drop-down list or create a new WLAN group. To create a new WLAN group, click the icon. For details, refer to Creating a WLAN Group.
    Encryption Options
    • Method - Select the method as WPA2/WPA3-Mixed. This displays the DPSK3 option. For more details to configure the WPA2/WPA3-Mixed, refer to WLAN Encryption Options.
    • Passphrase - Enter a security key as passphrase used by clients for authentication and connection for non-DPSK users.
      Note: IEEE 802.11r Fast Transition enables faster roaming between access points by allowing a client to reuse security credentials established during initial authentication. This is an optional feature and is by default disabled.
  3. By default, the DPSK3 is disabled. Click the toggle button the enable the DPSK3 option.
    This displays the following fields:
    • Internal - DPSK3 is managed by the controller, which handles passphrase generation, MAC binding, and policy enforcement locally.
    • External - DPSK3 uses an external server for passphrase generation, MAC address–to–passphrase binding, and policy control.
  4. Select Internal and enter the following fields -
    • DPSK Length - Refers to the number of characters used in a Dynamic Pre-Shared Key (passphrase) assigned to a user or device. The maximum supported passphrase length is 62 characters.
    • DPSK Type - Defines the format and complexity of the generated Dynamic Pre-Shared Key (passphrase). There are 3 DPSK types, select the radio button to choose the security requirement -
      • Secure DPSK - Uses a mixture of nearly all printable ASCII characters, providing the highest level of security.
      • Keyboard-Friendly DPSK – Uses letters and numbers only, avoiding ambiguous characters for easier manual entry.
      • Numbers Only DPSK – Uses numeric characters only, offering the simplest input method with lower complexity.
    • DPSK Expiration - Defines the validity period of a Dynamic Pre-Shared Key (passphrase).

      Internal DPSK3

  5. After configuring the above fields, click OK to submit the form. The newly created Internal DPSK3 is displayed in the Wireless LANs page.

    New Internal DPSK3

    The SmartZone creates two WLANs: the WPA2 WLAN (Intermediate) and the WPA2/WPA3-Mixed WLAN (Service).

  6. After creating the new Internal DPSK3, go to main menu, navigate to Security > Access Control > Dynamic PSK to generate Dynamic PSKs.
    This displays the Dynamic PSK page.
Parent topic: Dynamic PSK3