ITPreview
Open in TheBrain

WPA3

network manager - How to use WPA3 with Ubuntu 20.04 - Ask Ubuntu


nmcli connection show

get UUID

nmcli conn edit xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxxx

print wifi-sec.key-mgmt

describe wifi-sec.key-mgmt

wifi needs to be set to wpa-eap

set wifi-sec.key-mgmt (use the correct security)
"wpa-eap" (WPA2 + WPA3 enterprise)

verify

save persistent
# Create the WPA3 Enterprise connection with full paths
sudo nmcli connection add \
    type wifi \
    con-name "LucidMotors-WPA3-Enterprise" \
    ifname wlp0s20f3 \
    ssid "LucidMotors" \
    wifi-sec.key-mgmt wpa-eap \
    wifi-sec.proto rsn \
    wifi-sec.pairwise ccmp \
    wifi-sec.group ccmp \
    wifi-sec.pmf required \
    802-1x.eap tls \
    802-1x.identity "sergioherrerajr" \
    802-1x.client-cert "/home/sergioherrerajr/Documents/certnew.cer" \
    802-1x.private-key "/home/sergioherrerajr/Documents/key.pem" \
    802-1x.private-key-password "foobar"
# Set much shorter timeouts for faster switching
nmcli connection modify "YourWiFiName" ipv4.dhcp-timeout 10
nmcli connection modify "YourWiFiName" ipv6.dhcp-timeout 10

# Reduce authentication timeout
nmcli connection modify "YourWiFiName" wifi.auth-timeout 5

# Set aggressive retry behavior
nmcli connection modify "YourWiFiName" connection.autoconnect-retries 3
# Set connection priorities for automatic switching
nmcli connection modify "YourWiFiName" connection.autoconnect-priority 100
nmcli connection modify "YourWiFiName" wifi.mac-address-randomization 0

# Enable automatic connection
nmcli connection modify "YourWiFiName" connection.autoconnect yes

# For multiple networks, set different priorities
nmcli connection modify "StrongNetwork" connection.autoconnect-priority 100
nmcli connection modify "WeakNetwork" connection.autoconnect-priority 50

https://docs.zebra.com/us/en/mobile-computers/software/best-practices-for-wi-fi-6e-(tri-band)-including-voice,-with-aruba-wlan-infrastructure-best-practices-guide/c-6ghz-security-recommendations-while-deploying-zebra-clients-in-6ghz-network/r-6ghz-wpa3-enterprise.html

cryptography - What RSA key length should I use for my SSL certificates? - Stack Overflow

Support of WPA3 Enterprise - https://en.ubunlog.com/networkmanager-1-30-0-arrives-with-support-for-wpa3-enterprise-suite-by-mas/ - current Network Manager 1.46

`iwlist --help`