Re: is there a wpa3 enterprise fast-transition mode?

On Wed, Feb 26, 2020 at 11:45:36AM -0800, Isaac Konikoff wrote:
> Is there a wpa3 enterprise fast transition mode?

I don't think I'd use that exact name.

> I'm referring to the wifi alliance spec for wpa3 that lists 4 FT modes:
> - Fast BSS Transition for wpa3-personal transition
>   Is this FT-SAE with owe_transition_bssid + owe_transition_ssid?

No. It is FT with PSK and SAE enabled (i.e., no OWE) and PMF required
for SAE but optional for PSK.

> - Fast BSS Transition for wpa3-enterprise transition
>   ?

EAP authentication with PMF optional (required for any WPA3 capable
device)

> - Fast BSS Transition for wpa3-personal only
>   FT-SAE

With PMF required

> - Fast BSS Transition for wpa3-enterprise only
>   ?

EAP authentication with PMF required

-- 
Jouni Malinen                                            PGP id EFC895FA