How to enable WPA Enterprise?

WPA Enterprise is generally used to provide enhanced security for wireless networks in corporate environments. Contrarily to the common WPA password used in home and office environments, where the same password is used by all WiFi clients on the same network, WPA Enterprise uses individual login credentials consisting of a unique username and password for each user. While common WPA passwords are configured on the Plasma Cloud console, WPA Enterprise requires a more complex setup. It can exclusively be used with an external RADIUS server centrally managing client authentication and access over the wireless network. This way users can only connect to the network with their private login credentials. There is no shared password, effectively minimizing the risk of unwanted network access from unauthorized users.

WPA Enterprise should only be enabled when a RADIUS server is deployed to handle client authentication.

To set up WPA Enterprise on a selected SSID, you need to:

1. Log into the Plasma Cloud console;
2. Select the Organisation and Network containing your SSID of interest from the top right menu;
3. Navigate to Settings > SSIDs > SSID name in the main menu on the left;
4. Click on the drop-down menu in the Authentication section and select WPA Enterprise;
5. Type the required RADIUS data in the text fields that appear below the drop-down menu;

6. Click on the Save button.

Access Points running firmware v4.0 and above operate in WPA2/WPA3 compatibility mode. This ensures a smooth transition to the more secure WPA3 standard while maintaining compatibility with older devices that only support WPA2. Please note the Access Point models PA300, PA300E, and PAX1800v1 do not support WPA3, even when operating on firmware version 4.0 or higher.