Find out client actual connection type WPA2 or WPA3

[cerise-front0z]

Configured wireless setup as WPA2-PSK [AES] + WPA3-Personal [SAE]

How to find out if a client connection uses WPA2 or WPA3 using web interface or Orbi App?  On Attached Devices, I can see the client connects as 2.4G/5G and Router/Satellite but no security type.

[schumaku · Accepted solution]

Welcome to the Apple world ... Most likely, you have to install the developers WiFi profile for debugging.. 

Start here https://developer.apple.com/bug-reporting/profiles-and-logs/ 

You have to agree to the developers agreement after you sign in with your Apple ID.

You can then install the profile, under your WiFi there will be a Diagnostic menu..

=======================================

Needless to say,  Netgear Insight does show the related security for the connected client.

[CrimpOn]

I know of no method for users to determine specifics of the WiFi connection.  Some WiFi devices may provide additional information.  Several of my Android devices show the security protocol of the connection:  Samsung Galaxy S6-lite tablet, Sony Xperia XZ2, Moto E.  (Have no "fruit" devices.)

There is a possibility that one could capture the WiFi management frames used to make the WiFi connection and perhaps infer from them which protocol was used.  That is a fairly sophisticated process.

[FURRYe38]

I think you can on the wifi devices that may give connection security type used. 

[cerise-front0z]

IMO, since the router needs to negotiate WPA2/WPA3 (or even WPA) connection type for each client, it has to maintain which type of a client connection is used in the other end.  So, the data traffic can be properly encrypted or decrypted based on type.  If the minor enhancement could be supported on the router GUI, it is quite helpful tool to identify all client connections in one place.  Just a thought.

[FURRYe38]

Wifi security is ONLY for the connection between the router system and connecting devices, i.e. Connection Type. It doesn't encrypt or decrypt data traffic going in between the system and devices. 

[schumaku · Accepted solution]

Welcome to the Apple world ... Most likely, you have to install the developers WiFi profile for debugging.. 

Start here https://developer.apple.com/bug-reporting/profiles-and-logs/ 

You have to agree to the developers agreement after you sign in with your Apple ID.

You can then install the profile, under your WiFi there will be a Diagnostic menu..

=======================================

Needless to say,  Netgear Insight does show the related security for the connected client.

[CrimpOn]

---

@cerise-front0z wrote:

 If the minor enhancement could be supported on the router GUI, it is quite helpful tool to identify all client connections in one place.  Just a thought.

---

In general, I agree that more information is preferable to less information.  There appears to be no consistency is regard to what data is presented to users.  For example:

• The web interface shows one of those goofy symbols for WiFi signal strength that are almost useless, whereas the Orbi 'app' displays the Link Rate which is more useful.

It is not clear (to me) that the security protocol is available to the Orbi firmware in a form that could be displayed.  During the WiFi negotiation process, the WiFi access point and the WiFi device exchange information packets which indicate LOTS of information about their capabilities.  Things like:

• Which data rates they support.
• Which encryption/authentication methods they support.

This information is used by the WiFi module to perform the handshake/authentication and to control the data transmission.  I don't know if that is buried so deeply in the WiFi module or Qualcomm chip that it cannot be accessed by the firmware.

Topics like this are one of the reasons it is sad that manufacturers seldom provide any mechanism to "talk to the engineers". (Not just Netgear.  I am not aware of anybody that lets customers ask technical questions of the people who actually know anything.)

[cerise-front0z]

I checked out the debug profile and installed on my two Apple devices.  They did show Security type (like WPA2 vs WPA3).  But I had to create a developer account and downloaded the profile for each device.  It seems doable but a couple of extra steps.  Thanks.