Configuring External DPSK3

Configuring a WLAN with External DPSK3 requires setting up an external DPSK3 server, creating the required WLANs, and enabling dynamic MAC address–to–passphrase binding to support secure and scalable client access.
Ensure the external DPSK3 server is deployed and reachable. Verify AP support for WPA2-PSK, WPA3-SAE, and 802.11v (BTM). Confirm the required WLAN configurations (Intermediate and Service).
To configure a WLAN that supports External DPSK3 authentication, perform the following:
  1. From the main menu, select Network > Wireless > Wireless LANs, select a zone from the system tree and click Create.
    This displays Create WLAN Configuration window.
  2. In the Create WLAN Configuration window, configure the following:
    General Options
    • Name - Enter a valid name for the WLAN.
    • SSID - The WLAN name is used as the SSID.
    • Description - Enter a short, precise description for the WLAN.
    • WLAN Group - Select a WLAN group from the drop-down list or create a new WLAN group. To create a new WLAN group, click the icon. For details, refer to the Creating a WLAN Group.
    • Network Segmentation - Leave this option disabled (default setting).
    Encryption Options
    • Method - Select the method as WPA2/WPA3-Mixed. This displays the DPSK3 option. For more details to configure the WPA2/WPA3-Mixed encryption option, refer to WLAN Encryption Options.
  3. By default, the DPSK3 option is disabled. Click the toggle button the enable the DPSK3 option.
    This displays the following fields:
    • Internal - DPSK3 is managed by the controller, which handles passphrase generation, MAC binding, and policy enforcement locally.
    • External - DPSK3 uses an external server for passphrase generation, MAC address–to–passphrase binding, and policy control.
  4. Select External.
    This enables the Authentication Service field in the Authentication & Accounting Service section.
    1. Select an Authentication Service from the drop-down list or click the icon to create a new authentication service. For details, refer to Creating Non-Proxy Authentication AAA Server.
    2. After selecting the authentication service, navigate to the Advanced Options section and enter the Access VLAN ID for client traffic.

    External DPSK3

  5. After configuring the above fields, click OK to submit the form. The newly created External DPSK3 WLANs are displayed in the Wireless LANs page.
    The SmartZone creates two WLANs: the WPA2 WLAN (Intermediate) and the WPA2/WPA3-Mixed WLAN (Service).

    New External DPSK3 WLANs

Parent topic: Dynamic PSK3