Does Peplink Router WiFi-WAN or AP Support PKI-based Authentication

Hi all,

In addition to using passwords (WPA2/WPA3) for connecting to or sharing SSIDs, do Peplink routers’ WiFi-WAN or APs support PKI-based connectivity (such as X.509 certificates)?
If so, are there any relevant technical documents or guides for reference?

Best regards,
Kevin

Hello Kevin,

Yes, Peplink devices do support certificate-based authentication for WiFi connectivity, particularly through WPA2/WPA3-Enterprise (802.1X) modes.

For WiFi WAN (as a client): Peplink routers can connect to enterprise WiFi networks that require certificate-based authentication. When configuring a WiFi WAN connection, you can select authentication methods including:

  • EAP-TLS (which uses client certificates)
  • PEAP-MSCHAPv2
  • EAP-TTLS

For EAP-TLS specifically, you’ll need to upload the client certificate, private key, and CA certificate to the device.

For Access Points (hosting SSIDs): Peplink APs and Balance/MAX routers with built-in WiFi can broadcast SSIDs using WPA2/WPA3-Enterprise with 802.1X authentication. This typically requires integration with a RADIUS server that handles the certificate validation.

The user manual for your specific device model should have a section on WiFi security settings
If you need model-specific implementation guides, you can mention the one and I can provide some steps with screenshots for a better walkthrough.

Regards,
Dadi Ishimwe

2 Likes

Hi Dadi,

Thank you for your reply.
We will be implementing this feature on the MAX BR1 Mini.
While we have found the general WiFi-WAN and AP configuration steps in the user manual, there is limited information regarding WPA2/WPA3-Enterprise settings for WiFi-WAN.
Would you be able to provide some screenshots of the configuration for this?
Thank you.

Best regards,
Kevin

Hello Kevin,

Thank you for the follow up.

Here is what I recommend:

  1. Make sure you update your firmware to the latest.
  2. Navigate to: Dashboard > WAN > WiFi WAN
View Image

  1. After you select your target SSID, go to the bottom to Security
View Image


  1. Choose your Security method (for 802.1x you can choose EAP Method: TLS and upload your certificate)
View Image: Selecting Security Method

View Image: Selecting 802.1x with EAP TLS

View Image: Uploading Certificate

In these settings, you will find other details you may need.
Let me know if this works.

Regards,
Dadi

1 Like

Hi Dadi,

Thank you for your assistance.
We will proceed with further testing.

Best regards,
Kevin