{"id":97633,"date":"2020-10-20T02:42:47","date_gmt":"2020-10-20T00:42:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq"},"modified":"2020-10-20T02:42:47","modified_gmt":"2020-10-20T00:42:47","slug":"private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","title":{"rendered":"Private PSK (Pre-Shared Key) \u2013 features and capabilities of the ExtremeCloud IQ platform","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>WPA3 has already been adopted and has been mandatory for devices undergoing certification with the WiFi Alliance since July 2020. WPA2 has not been discontinued and is not going anywhere. Both WPA2 and WPA3 support operation in PSK and Enterprise modes; however, we suggest considering the Private PSK technology in our article, as well as the advantages it can provide.<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 features and capabilities of the ExtremeCloud IQ platform\" src=\"\/wp-content\/uploads\/2020\/10\/098108c3884a2214168bd2d320d8e9f9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nThe issues with WPA2-Personal are well-known and have mostly been addressed (Priority Management Frames, fixes for the KRACK vulnerability, etc.). The primary remaining drawback of WPA2 with PSK is that weak passwords can be easily compromised through a dictionary attack. In case of compromise and changing the password, all connected devices (and access points) will need to be reconfigured, which can be quite a cumbersome process. To address the \u2018weak password\u2019 problem, the WiFi Alliance recommends using passwords that are at least 20 characters long.<\/p>\n<p>Another issue that cannot always be resolved with WPA2-Personal is the assignment of different profiles (vlan, QoS, firewall\u2026) to groups of devices connected to the same SSID.<\/p>\n<p>Using WPA2-Enterprise can address all of the issues described above, but the cost of this solution will be:<\/p>\n<ul>\n<li>The necessity of having or deploying a PKI (Public Key Infrastructure) and security certificates;<\/li>\n<li>There may be difficulties with installation;<\/li>\n<li>There may be difficulties with troubleshooting;<\/li>\n<li>It is not an optimal solution for IoT devices or guest access.<\/li>\n<\/ul>\n<p>\nA more radical solution to the problems of WPA2-Personal is to transition to WPA3, whose main improvement is the use of SAE (Simultaneous Authentication of Equals) and static PSK. WPA3-Personal addresses the dictionary attack issue, but does not provide unique identification during authentication and consequently the ability to assign profiles (as a common static password is still used).<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 features and capabilities of the ExtremeCloud IQ platform\" src=\"\/wp-content\/uploads\/2020\/10\/6ea0cbf3ec9e5f2decef500cf9a04cd1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAdditionally, it is important to consider that over 95% of existing clients currently do not support WPA3 and SAE, while WPA2 continues to function successfully on billions of already deployed devices.<\/p>\n<p>To address the existing or potentially possible issues described above, Extreme Networks has developed the Private Pre-Shared Key (PPSK) technology. PPSK is compatible with any Wi-Fi client that supports WPA2-PSK, and it provides a level of security comparable to that achieved with WPA2-Enterprise, without the need to build a 802.1X\/EAP infrastructure. Private PSK is essentially WPA2-PSK, but each user (or group of users) can have their own dynamically generated password. Managing PPSK is no different from managing PSK, as the entire process is automated. The key database can be stored locally on access points or in the cloud.<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 features and capabilities of the ExtremeCloud IQ platform\" src=\"\/wp-content\/uploads\/2020\/10\/878f418cf07e2ffd94d22cd5b42388fd.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nPasswords can be generated automatically, with the flexibility to set their length\/resilience, duration, or expiration period, and the delivery method to the user (via email or SMS):<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 features and capabilities of the ExtremeCloud IQ platform\" src=\"\/wp-content\/uploads\/2020\/10\/0ba90a70c476ab853bf564816c16f3cb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 features and capabilities of the ExtremeCloud IQ platform\" src=\"\/wp-content\/uploads\/2020\/10\/c826ae0d8971d2e997ab8fd9d7c3f160.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nYou can also configure the maximum number of clients that can connect using a single PPSK or even set up MAC binding for connecting devices. At the administrator's command, any key can be easily revoked, preventing network access without the need to reconfigure all other devices. If a client is connected at the time the key is revoked, the access point will automatically disconnect them from the network.<\/p>\n<p>Key advantages of PPSK include:<\/p>\n<ul>\n<li>ease of use combined with a high level of security;<\/li>\n<li>dictionary attack resistance is handled with long and resilient passwords that ExtremeCloudIQ can automatically generate and distribute;<\/li>\n<li>the ability to assign different security profiles to various devices connected to a single SSID;<\/li>\n<li>ideal for secure guest access;<\/li>\n<li>excellent for secure access when devices do not support 802.1X\/EAP (manual scanners or IoT\/VoWiFi devices);<\/li>\n<li>successful use and refinement for over 10 years.<\/li>\n<\/ul>\n<p>\nAny questions that arise or remain can always be directed to our office staff \u2013 <noindex><a rel=\"nofollow\" href=\"mailto:\/\/cis@extremenetworks.com\">cis@extremenetworks.com<\/a><\/noindex>.<br \/>\n<br \/>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/extremenetworks\/blog\/523890\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438 WPA2, \u0438 WPA3 \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 \u0440\u0435\u0436\u0438\u043c\u0430\u0445 PSK \u0438 Enterprise, \u043d\u043e \u043c\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e Private PSK, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0441 \u0435\u0451 \u043f\u043e\u043c\u043e\u0449\u044c\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97634,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97633","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Private PSK (Pre-Shared Key) \u2013 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ExtremeCloud IQ | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-20T00:42:47+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-20T00:42:47+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Private PSK (Pre-Shared Key) \u2013 features and capabilities of the ExtremeCloud IQ platform | ProHoster","description":"WPA3 has already been adopted, and from July 2020 it is mandatory for devices certifying with the WiFi Alliance, WPA2 is still in place and will not be discontinued.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Private PSK (Pre-Shared Key) \u2013 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ExtremeCloud IQ | ProHoster","og:description":"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-20T00:42:47+00:00","article:modified_time":"2020-10-20T00:42:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97633","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:16:25","updated":"2022-09-30 19:05:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/97633","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=97633"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/97633\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/97634"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=97633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=97633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=97633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}