Possible to see which encryption is used per client (WPA2 or WPA3)

I enabled sae-mixed mode and am wondering how I can tell which encryption method various client are using. CLI or luci would be great.

Luci>Status shows the expected:
Encryption: mixed WPA2/WPA3 PSK, SAE (CCMP)

But I am not seeing anything under associated stations. Thanks.

For reference, bit of/etc/config/wireless

...
 config wifi-device 'radio0'                                                         
        option type 'mac80211'                                                      
        option hwmode '11a'                                                         
        option path 'soc/1b500000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'         
        option legacy_rates '0'                                                     
        option htmode 'VHT80'                                                       
        option txpower '23'                                                         
        option country 'US'                                                         
        option beacon_int '101'                                                     
        option channel '44'        

config wifi-iface 'wifinet0'                                                        
        option device 'radio0'                                                      
        option mode 'ap'                                                            
        option ssid 'guest'                                                 
        option wpa_disable_eapol_key_retries '1'                                    
        option network 'guest'                                                    
        option key '***'
        option ieee80211w '2'                                                    
        option encryption 'sae-mixed' 
...

The best I could locate is running iw dev wlan0 station dump but no where in that output is the encryption method.

# iw dev wlan0 station dump
Station xx:xx:xx:xx:xx:xx (on wlan0)
	inactive time:	0 ms
	rx bytes:	17088562
	rx packets:	119253
	tx bytes:	226586618
	tx packets:	154352
	tx retries:	0
	tx failed:	2
	rx drop misc:	0
	signal:  	-72 [-81, -82, -73, -84] dBm
	signal avg:	-71 [-80, -82, -72, -83] dBm
	tx bitrate:	650.0 MBit/s VHT-MCS 7 80MHz short GI VHT-NSS 2
	tx duration:	4753487 us
	rx bitrate:	520.0 MBit/s VHT-MCS 5 80MHz short GI VHT-NSS 2
	rx duration:	1706640 us
	last ack signal:-72 dBm
	avg ack signal:	-71 dBm
	airtime weight: 256
	authorized:	yes
	authenticated:	yes
	associated:	yes
	preamble:	long
	WMM/WME:	yes
	MFP:		yes
	TDLS peer:	no
	DTIM period:	2
	beacon interval:101
	short slot time:yes
	connected time:	30216 seconds
	associated at [boottime]:	11878.914s
	associated at:	18446725625328798601 ms
	current time:	18446744072060992729 ms

Previous discussion:

4 Likes

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.