Information about SuiteB-1X and SuiteB-192-1X Support in FlexConnect Mode for WPA2 and WPA3
Support for SuiteB-192-1X and SuiteB-1X Ciphers in FlexConnect Mode
From Cisco IOS XE 17.15.1 onwards, Cisco WLAN FlexConnect mode supports enterprise authentication key management (AKM) — SuiteB-192-1X (AKM 12) and SuiteB-1X (AKM 11). These AKMs are already supported in the Local mode. This section describes the configuration for SuiteB-192-1X and SuiteB-1X in FlexConnect mode, and also the requirements to support Galois Counter Mode Protocol 128 (GCMP-128), GCMP-256, and Counter Cipher Mode with Block Chaining Message Authentication Code Protocol 256 (CCMP-256) ciphers for pairwise transport keys (PTK) and group temporal key (GTK) derivation in FlexConnect Local Authentication mode and FlexConnect Central Authentication mode.
Authentication Types and Ciphers in FlexConnect Mode During PTK and GTK Derivation
-
In WPA2 FlexConnect mode:
-
SUITEB192-1X ciphers are CCMP-256 and GCMP-256.
-
SUITEB-1X cipher is GCMP-128.
-
-
In WPA3 FlexConnect mode:
-
SUITEB192-1X cipher is GCMP-256.
-
SUITEB-1X cipher is GCMP-128.
-