{"id":97633,"date":"2020-10-20T02:42:47","date_gmt":"2020-10-20T00:42:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq"},"modified":"2020-10-20T02:42:47","modified_gmt":"2020-10-20T00:42:47","slug":"private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","title":{"rendered":"Private PSK (Pre-Shared Key) \u2013 bijzonderheden en mogelijkheden van het ExtremeCloud IQ platform","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>WPA3 is already adopted and is mandatory for devices that pass WiFi Alliance certification since July 2020. WPA2 has not been abolished and is not going anywhere. Both WPA2 and WPA3 support operation in PSK and Enterprise modes, but we recommend examining the Private PSK technology in our article, along with the advantages it offers.<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 bijzonderheden en mogelijkheden van het ExtremeCloud IQ platform\" src=\"\/wp-content\/uploads\/2020\/10\/098108c3884a2214168bd2d320d8e9f9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nThe issues with WPA2-Personal are well known and have mostly been resolved (Priority Management Frames, patches for the KRACK vulnerability, etc.). The main remaining drawback of WPA2 when using PSK is that weak passwords can be easily breached by dictionary attacks. In case of compromise and changing the password, it will be necessary to reconfigure all connected devices (and access points), which can be quite a labor-intensive process (to address the 'weak password' issue, the WiFi Alliance recommends using passwords that are at least 20 characters long).<\/p>\n<p>Another issue that can sometimes not be resolved with WPA2-Personal is assigning different profiles (vlan, QoS, firewall\u2026) to groups of devices connected to the same SSID.<\/p>\n<p>With WPA2-Enterprise, all the above problems can be addressed, but the trade-offs will be:<\/p>\n<ul>\n<li>The need for a PKI (Public Key Infrastructure) and security certificates;<\/li>\n<li>Installation challenges may arise;<\/li>\n<li>Troubleshooting difficulties may occur;<\/li>\n<li>Not an optimal solution for IoT devices or guest access.<\/li>\n<\/ul>\n<p>\nA more radical solution to the issues of WPA2-Personal is to transition to WPA3, whose main enhancement is the use of SAE (Simultaneous Authentication of Equals) and static PSK. WPA3-Personal resolves the 'dictionary attack' issue, but does not provide unique identification during authentication and thus the ability to assign profiles (since a common static password is still used).<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 bijzonderheden en mogelijkheden van het ExtremeCloud IQ platform\" src=\"\/wp-content\/uploads\/2020\/10\/6ea0cbf3ec9e5f2decef500cf9a04cd1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nIt is also necessary to consider that more than 95% of existing clients currently do not support WPA3 and SAE, while WPA2 continues to work successfully on billions of already released devices.<\/p>\n<p>Om een oplossing te bieden voor de eerder beschreven bestaande of potentieel mogelijke problemen, heeft Extreme Networks de technologie Private Pre-Shared Key (PPSK) ontwikkeld. PPSK is compatibel met elke Wi-Fi-client die WPA2-PSK ondersteunt en biedt een beveiligingsniveau dat vergelijkbaar is met dat van WPA2-Enterprise, zonder dat er een 802.1X\/EAP-infrastructuur nodig is. Private PSK is in wezen WPA2-PSK, maar elke gebruiker (of groep gebruikers) kan zijn eigen dynamisch gegenereerd wachtwoord hebben. Het beheer van PPSK verschilt niet van het beheer van PSK, aangezien het hele proces geautomatiseerd is. De database met sleutels kan lokaal op toegangspunten of in de cloud worden opgeslagen.<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 bijzonderheden en mogelijkheden van het ExtremeCloud IQ platform\" src=\"\/wp-content\/uploads\/2020\/10\/878f418cf07e2ffd94d22cd5b42388fd.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nWachtwoorden kunnen automatisch worden gegenereerd, er is de mogelijkheid om de lengte\/sterkte, periode of geldigheid en de bezorgmethode naar de gebruiker (per e-mail of SMS) flexibel in te stellen.<\/p>\n<p><img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 bijzonderheden en mogelijkheden van het ExtremeCloud IQ platform\" src=\"\/wp-content\/uploads\/2020\/10\/0ba90a70c476ab853bf564816c16f3cb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <img decoding=\"async\" alt=\"Private PSK (Pre-Shared Key) \u2013 bijzonderheden en mogelijkheden van het ExtremeCloud IQ platform\" src=\"\/wp-content\/uploads\/2020\/10\/c826ae0d8971d2e997ab8fd9d7c3f160.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nHet maximale aantal clients dat met \u00e9\u00e9n PPSK kan verbinden, kan ook worden ingesteld, of zelfs 'MAC-binding' voor verbonden apparaten. Op verzoek van de netwerkbeheerder kan elk wachtwoord eenvoudig worden ingetrokken, en toegang tot het netwerk wordt geweigerd zonder dat alle andere apparaten opnieuw geconfigureerd hoeven te worden. Als de client op het moment van intrekken van het wachtwoord is verbonden, zal het toegangspunt deze automatisch van het netwerk uitschakelen.<\/p>\n<p>Belangrijkste voordelen van PPSK zijn:<\/p>\n<ul>\n<li>gebruiksgemak bij een hoog beveiligingsniveau;<\/li>\n<li>het afschermen van woordenboekaanvallen wordt opgelost met lange en sterke wachtwoorden, die ExtremeCloudIQ automatisch kan genereren en verzenden;<\/li>\n<li>de mogelijkheid om verschillende beveiligingsprofielen aan verschillende apparaten die met hetzelfde SSID zijn verbonden toe te wijzen;<\/li>\n<li>zeer geschikt voor veilige gasttoegang;<\/li>\n<li>uitstekend geschikt voor veilige toegang wanneer apparaten geen 802.1X \/ EAP ondersteunen (handscanner of IoT\/VoWiFi-apparaten);<\/li>\n<li>succesvolle toepassing en verbetering gedurende meer dan 10 jaar.<\/li>\n<\/ul>\n<p>\nVragen die ontstaan of blijven, kunnen altijd aan onze kantoormedewerkers worden gesteld \u2013 <noindex><a rel=\"nofollow\" href=\"mailto:\/\/cis@extremenetworks.com\">cis@extremenetworks.com<\/a><\/noindex>.<br \/>\n<br \/>Bron: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/extremenetworks\/blog\/523890\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438 WPA2, \u0438 WPA3 \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 \u0440\u0435\u0436\u0438\u043c\u0430\u0445 PSK \u0438 Enterprise, \u043d\u043e \u043c\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e Private PSK, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0441 \u0435\u0451 \u043f\u043e\u043c\u043e\u0449\u044c\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97634,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97633","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/nl\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"nl_NL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Private PSK (Pre-Shared Key) \u2013 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ExtremeCloud IQ | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/nl\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-20T00:42:47+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-20T00:42:47+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Private PSK (Pre-Shared Key) \u2013 kenmerken en mogelijkheden van het ExtremeCloud IQ-platform | ProHoster","description":"WPA3 is al aangenomen en is sinds juli 2020 verplicht voor apparaten die gecertificeerd worden in de WiFi-Alliance; WPA2 is niet afgeschaft en dat is ook niet de bedoeling.","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Private PSK (Pre-Shared Key) \u2013 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ExtremeCloud IQ | ProHoster","og:description":"WPA3 \u0443\u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442, \u0438 \u0441 \u0438\u044e\u043b\u044f 2020 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 WiFi-Alliance, WPA2 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b \u0438 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f.","og:url":"https:\/\/prohoster.info\/nl\/blog\/administrirovanie\/private-psk-pre-shared-key-osobennosti-i-vozmozhnosti-platformy-extremecloud-iq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-20T00:42:47+00:00","article:modified_time":"2020-10-20T00:42:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97633","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:16:25","updated":"2022-09-30 19:05:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/97633","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=97633"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/97633\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media\/97634"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=97633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=97633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=97633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}