WPA3 SAE

Config File

wpa3.conf:

network={
    ssid="NETWORK-NAME"
    psk="password"
    scan_ssid=1
    key_mgmt=SAE
    proto=RSN
    ieee80211w=2
}

ieee80211w=2 enforces Management Frame Protection (MFP), required by WPA3.

For APs that support both WPA2 and WPA3 (transition mode):

network={
    ssid="NETWORK-NAME"
    psk="password"
    scan_ssid=1
    key_mgmt=SAE WPA-PSK
    proto=RSN
    ieee80211w=1
}

ieee80211w=1 makes MFP optional, compatible with both WPA2 and WPA3 clients.

sudo wpa_supplicant -Dnl80211 -i <INTERFACE> -c wpa3.conf

Get an IP address:

sudo dhclient <INTERFACE> -v