Computer Networking · Advanced level

Advanced level · Module 2: Wireless Networks at Scale · Lesson 4 of 4

Enterprise Wi-Fi Security

Authenticate users individually instead of sharing one password.

In this lesson you will

  • Explain WPA3-Enterprise and 802.1X
  • Design SSIDs and access by user group

Key concepts

WPA3-Enterprise802.1XRADIUScertificate validation

The lesson

With a shared passphrase, everyone uses the same key and changing it is disruptive. Enterprise mode authenticates each user with their own credentials through 802.1X and a RADIUS server.

Users who leave lose access when their account is disabled; staff can be placed in different VLANs based on their role.

Configure devices to validate the server certificate so they cannot be tricked into connecting to fake access points.

Step by step

  1. Compare personal and enterprise modes.
  2. Design SSIDs for staff, students and guests.
  3. Plan RADIUS authentication.
  4. Write the security settings.

Practice activity

Complete the school wireless security design.

Expected result: A secure SSID and authentication design.

Check your understanding

  1. What does 802.1X provide?

    Show answer

    Individual authentication for each user or device.

  2. Why validate the server certificate?

    Show answer

    To avoid connecting to fake access points.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.