AP-Server Mutual Authentication
The AP-server communication begins with a mutual authentication step where the AP and server authenticate each other using a shared secret. The AP-server communication takes place only if this authentication succeeds.
After the authentication succeeds, the server generates a session key, and encrypts all communication between the AP and server using the session key.
The AP and server ship with the same default value for the shared secret. To change it, use the CLI commands on the server and the AP.
Note: After changing the shared secret (communication key) on the server, all APs connected to the server automatically use the new communication key. You must manually configure the new communication key on an AP if not connected to the server when the key changes on the server.
Note: Arista Networks does not recommend installing older versions of APs on newer versions of servers.