AP-Server Mutual Authentication

The AP-server communication begins with a mutual authentication step where the AP and server authenticate each other using a shared secret. If this authentication succeeds, the AP-server communication takes place.

After the authentication succeeds, the server generates a session key and encrypts all communication between the AP and server using the session key.

The AP and server ship with the same default value of the shared secret. Use CLI commands on the server and the AP to change the shared secret.

 

Note: After changing the shared secret on the server, all APs connected to the server automatically use the new communication key. You must manually configure the new communication key on an AP if not connected to the server when the key changes on the server.

 

Note:Arista Networks does not recommend installing older versions of APs on newer versions of servers.

For more information on the AP-server communication process, see the Wi-Fi Access Point Server Communication Workflow article.