My final post, showing different clients, ended up being a 40 minute long read according to LinkedIn. I know most don’t have time to read that long. So below is an executive summary of my findings. I put all the test results in a Google Sheet.
If you have devices that you want to test with the WPA3-SAE Only, WPA3-Enterprise Only, WPA2-PSK/WPA3-SAE Transition Mode, and WPA2/WPA3-Enterprise Transition Mode send me the details, and I’ll add them to this list. Mike Albano has his clients.mikealbano.com list that has a column for SAE and 802.11w. It only has a few entries under those columns. We could add these devices to that list to make one uniform list.
Ultimately, the clients that won’t support WPA3-Enterprise are rare, but not entirely removed from our eduroam BYOD networks. WPA3-SAE is more common but not something we are worrying about with eduroam. Turning on WPA3-Enterprise Transition Mode with Mist or Aruba solves the problem for almost all the devices, but it doesn’t solve it for everything. Some devices struggle because of the multiple AKMs in the beacons. Transition mode is the best and most complete solution to provide the greatest compatibility that we have.
