Cisco WLCs Get New WPA2 and WPA3 Options

Welcome to our November 2019 Blog update where this month I want to focus on changes to the Cisco security settings for WLANs and the new WPA2 and WPA3 options.

Cisco has changed its configuration options on both its AirOS and IOS-XE based controller platforms to include WPA3.

Now, when you select the security options on the latest AirOS controllers (currently 8.10) or IOS-XE controllers (currently 16.12), you get to choose from WPA+WPA2 or WPA2+WPA3. See Figures 1 and 2.

Figure 1: New WPA2 and WPA3 Options – Cisco AirOS Security – Layer 2 Security Setup

Figure 2: Cisco IOS-XE Security – Layer 2 Security Setup

Note: you also get the choice of WPA2 Personal or WPA2 Enterprise, on the AirOS controllers. See Figure 3.

Figure 3: Cisco AirOS Security – Layer 2 Security Type Setup

These options fit more closely with recommendations and vendor design guides. The option to choose Personal or Enterprise is simply selected from a drop-down.

Finally, you can also select WPA3 and configure options such as OWE and SAE.

(Blog article follow-up planned for December on this).

*Note* Amended as of 11/30/19: my intention was to write on WPA3 SAE and OWE (well, Enhanced Open anyway). However, my good friend mrncciew has written a most excellent series of articles on WPA3 and Enhanced Open. So I’ll redirect you to his links instead:
https://mrncciew.com/2019/11/21/enhanced-open-part-1/
https://mrncciew.com/2019/11/29/wpa3-sae-mode/
https://mrncciew.com/2019/11/29/wpa3-sae-transition-mode/

See you next time!

 

About NC-Expert

NC-Expert is a privately-held California corporation and is well established within the Wireless, Security, and Collaboration industry certification training, courseware development, and consulting markets.
Led by its Founder and CEO, Rie Vainstein, NC-Expert has won numerous private contracts with Fortune level companies around the world. These customers have depended on NC-Expert to train, advise, and mentor their staff.

So remember, if you are looking for the best IT training just call us at (855) 941-2121 or contact us

NC-Expert Blog

By Rie Morgan April 15, 2026
Wi‑Fi security is no longer just an IT checkbox; it is a business risk issue that affects data protection, uptime, customer trust, and compliance. Strong wireless security helps businesses keep unauthorized users out, protect sensitive traffic, and reduce the chance that a single compromised access point (AP) becomes a wider network breach.
By Rie Morgan March 27, 2026
If you’ve ever set up Wi-Fi at home, you know the goal is simple: get all your devices online and ruin your neighbor’s day by having a faster signal! But when you move into the professional world of Wi-Fi design, particularly for offices, schools, stadiums, or coffee shops with way too many laptops, that simple goal morphs into something far more complex.  Every Wi-Fi design engineer quickly learns the eternal truth of wireless networking: coverage and capacity are not the same thing. They might sound like twin siblings, but they behave more like cousins who only get along at family reunions. Understanding the difference, and designing for both, is what separates an average Wi-Fi deployment from a user experience meltdown. Let’s break it down.
By Rie Morgan March 3, 2026
 If Wi‑Fi were a party, Signal‑to‑Noise Ratio (SNR) would tell you how well you can hear your friend talking over the background music. Too much noise and you'll start yelling, guessing, or worse: talking to the wrong person entirely! In networking terms, SNR is what helps determine whether your wireless connection is crisp and clear, or whether it is a glitchy mess that makes you want to throw your router out the window! For new IT engineers, understanding SNR isn't just about avoiding bad connections, it's about troubleshooting, designing smarter networks, and keeping users from sending "the Wi‑Fi sucks" emails. So, grab your coffee, let's unpack what SNR really means.