Overview
cnMaestro 1.6.0 Cloud will be released over the course of this week, followed by On-Premises next week. This document highlights new features and significant updates in the Cloud and On-Premises deployments.
Important |
cnMaestro 1.6.0 On-Premises is distributed as an OVA file which requires installation on a separate virtual machine. Existing cnMaestro On-Premises users should export their data and import it into cnMaestro 1.6.0. Data exported from cnMaestro 1.4.0, 1.5.0, and 1.5.1 is supported. The basic steps are defined in the User Guide and consist of: 1. Export Data from current cnMaestro Installation at Application > Server > Operations. 2. Import Data file into the new cnMaestro 1.6.0 installation at Application > Server > Operations. Note: cnMaestro 2.0.0 (scheduled for Q1/2018) will remove the data export/import requirement after its release. |
Important |
You may need to restart your browser (or clear the browser cache with a hard reload) after the 1.6.0 update. |
Access and Backhaul View Redesign
The cnMaestro Access and Backhaul View is reworked to follow the navigation style of the Wireless LAN View. This includes simplifying the side-menu:
In addition, management pages have been restructured to follow tab-based navigation, so all functionality is readily visible.
Miscellaneous Improvements
Update |
Description |
AP Groups / WLANs |
These sections have been simplified and brought in-line with the Wireless LAN View. |
Jobs and Navigation |
Jobs management is consolidated under a Jobs section in the Application menu. |
Replace Quick Buttons |
The Quick Buttons (above the tree) are replaced with page-level tab navigation. |
Header Monitoring Icons
The monitoring icons in the header are changed to reflect the following:
Item |
Meaning |
Alarms |
Global Critical or Warning alarms present (warning will be displayed if no critical alarms). |
Devices Awaiting Approval |
Devices in the Onboarding Queue waiting for approval. |
Jobs |
Number of outstanding Software Update Jobs. |
Out-of-Sync Devices |
Wi-Fi devices whose configuration is no longer synchronized with their AP Group. |
Point-to-Multipoint Software Update
The Software Update page presents e/PMP devices in a more intuitive sector view, which allows quick selection of All Devices, APs, or SMs on the page. The software versions are displayed in a multi-selectable graphic that allows filtering of displayed devices by software version.
Improved Update Algorithm
The update algorithm now supports 50 simultaneous devices and parallel sector operation, which speeds software updates.
Administrator Roles
Four user Roles are supported to control access to cnMaestro management.
Role |
Overview |
Super Administrator |
Full management of cnMaestro Cloud and On-Premises, including Users, AAA servers, API Clients, and On-Premises servers. |
Administrator |
Management of the cnMaestro application and associated devices, including global configuration through AP Groups and Templates. |
Operator |
Read-only monitoring with device-specific provisioning. |
Monitor |
Read-only monitoring. |
Note: Existing Users/Administrators with add/delete user privileges are mapped to the Super Administrator role. All others are mapped to Administrator.
The mapping of features to Role access is defined below (op means On-Premises availability).
Section |
Features |
Super Admin |
Admin |
Operator |
Monitor |
API Management (op) |
API Clients |
All |
None |
None |
None |
Application Operations |
Networks and Towers, Technical Support Dump, Server data |
All |
All |
View |
View |
Application Settings |
Global application configuration, including Onboarding Keys |
All |
All |
None |
None |
Authentication Services (op) |
Authentication Servers |
All |
None |
None |
None |
Auto-Provisioning (op) |
Global Auto-Provisioning rules |
All |
All |
View |
None |
Data Tunnel (op) |
Data Tunnels |
All |
All |
View |
None |
Device Operations |
Reboot Device, Link Test, Connectivity Test, Wi-Fi Performance Test |
All |
All |
All |
Wi-Fi Perform. |
Device Overrides |
Per-Device configuration, including mapping AP Group |
All |
All |
All |
None |
Global Configuration |
Templates, WLANs, AP Groups and Association ACLs |
All |
All |
View |
None |
Guest Portal |
Guest Access |
All |
All |
View |
None |
Job Management |
Configuration, Software Update, and Scheduled Report Jobs |
All |
All |
All |
None |
Monitoring |
Device statistics |
All |
All |
All |
View |
Notifications |
Alarms and Events |
All |
All |
All |
View |
Onboarding |
Approve Devices, Pre-Provisioning |
All |
All |
All |
View |
Reporting |
Report generation |
All |
All |
All |
None |
SNMP Configuration (op) |
SNMPv2c server |
All |
All |
View |
None |
Software Images (op) |
Upload/delete local Device software images in cnMaestro |
All |
All |
None |
None |
Software Upgrade |
Push software to Devices |
All |
All |
All |
None |
System Operations (op) |
Reboot cnMaestro, change Log Level; update cnMaestro software; SSL Certificate management |
All |
All |
None |
None |
User Management |
Manage Users and User Sessions |
All |
View |
None |
None |
User Session Management
Management users are viewed in the new Session Management table. There is also an option to log out individual managers.
System Dashboard
The System Dashboard is completely redesigned to better present global health data.
New Metrics
The System Dashboard has added the following metrics:
Account Capacity |
The number of devices that can be added to this account. |
Recommended Software |
The number of devices running the recommended software version. |
New Network/Site Overview
The overview graphic for the System Dashboard allows one to select Networks or Sites. The presentation is ordered by device count.
Band Separation
The Client SNR and Performance graphs in cnPilot Enterprise Dashboards are separated by radio band (2.4 GHz or 5 GHz).
Scheduled Data Reports (On-Premises)
Data Reports can be scheduled to execute Daily or Weekly against devices within a specified level of the hierarchy. Report Jobs are managed at Application > Jobs > Report.
Wireless LAN Passpoint Configuration
AP Groups are enhanced to support Passpoint configuration.
RESTful API Monitoring (On-Premises)
The OAuth2.0 RESTful API supports device monitoring data for ePMP, PMP, and Wi-Fi, including Wi-Fi Clients. The API includes inventory, statistics, event, and alarm data. Please see the API Specification on Cambium Support Center for full details on configuring and using API Clients.
Authentication Server Support for Administrators (On-Premises)
Support for TACACS+ and Active Directory servers for user login into cnMaestro. Groups defined in these systems can be mapped to cnMaestro Roles.
Primary and Secondary Authenticators
Support for a Primary Authenticator for cnMaestro administrator access, with Local Administrators configured as a Secondary Authenticator (in case the Primary is not reachable).
Account Recovery
If the username/password of the cnMaestro account is lost, the virtual machine administrator can create a one-time account recovery password to log into the account and fix the configuration. This is only accessed through the Console CLI.
SSL Certificate Management (On-Premises)
An SSL Certificate management framework to customize the certificate used to access the Wi-Fi Guest Access Portal and cnMaestro UI. The feature supports:
- View the current installed certificate.
- Backup the certificate and key (optionally encrypted).
- Export a CSR (Certificate Signing Request) to allow signing by an external CA (Certificate Authority).
- Import the signed certificate, or a certificate with key.
- Generate a new key and self-signed certificate.
SNMPv2c (On-Premises)
Support for basic SNMPv2c inventory, statistics, and traps for connected/disconnected devices. The MIB is available in the cnMaestro Download section of Support Center.
Automatic Software Update (On-Premises)
Automatically update software when devices first register with cnMaestro.
Sync Configuration (Wi-Fi)
Page at Application > Sync Configuration to track and resolve unsynchronized cnPilot configuration, which may occur when Wi-Fi devices are updated through the device UI, or automatic synchronization is disabled in an AP Group. A header notification icon (discussed earlier) is also added.
Jobs Pages
The Jobs pages are collected into a section found under Application > Jobs. Here one can review pending and completed Configuration Update, Software Update, and Report Jobs (the latter is available in cnMaestro On-Premises).
Advanced Features
Advanced features are enabled at runtime, but disabled by default. They are configured at Application > Settings > Advanced Features.
Mesh Peers Statistics
Enable Mesh Peers dashboard visualizations and the Mesh Peers table.
Wi-Fi Performance Daemon
Enable Wi-Fi performance tests between the Wi-Fi AP/CPE and cnMaestro.
Supported Cambium Products
cnMaestro supports the following Cambium Networks products. The software versions are the minimum required to use cnMaestro.
Family |
Models) |
Version |
cnPilot |
cnPilot R200, R200P |
4.2.3-R4 |
cnPilot R201, R201P |
4.2.3-R4 |
|
cnPilot R190V, R190W |
4.3.2-R4 |
|
cnPilot E400/E500 |
2.5.2-r3 |
|
cnPilot E410 |
3.4.1-r8 |
|
cnPilot E501S, E502S (new) |
3.3-r16 |
|
ePMP 1000 Hotspot |
ePMP 1000 Hotspot |
2.5.2-r3 |
ePMP |
ePMP 1000, Force 180/200, Force 190 (new) |
2.5.2-r3 |
ePMP 2000 |
2.6.2 |
|
ePMP Elevate |
3.0.1 |
|
PMP |
PMP 450i, PMP 450, PMP 450m, PMP 430 SM |
3.2 |
PTP 450, and PTP 450i |
15.0.1 |
Supported Browsers
cnMaestro supports the following browsers:
Platform |
Browser |
Version |
Windows |
Internet Explorer |
11 and above |
Firefox |
45 and above |
|
Chrome |
49 and above |
|
MacOS |
Safari |
9 and above |
Linux |
Firefox |
45 and above |
Chrome |
49 and above |
Significant Fixed Issues
The following issues have been fixed in cnMaestro 1.6.0:
Id |
Details |
CNSSNG-6275 |
User-defined overrides do not appear if "VLAN" is in the replacement variable name. |
CNSSNG-2571 |
Without the radio or SSID configuration, cnMaestro is not fetching the device details. |
CNSSNG-5979 |
Prevent AP Group deletion if Auto-Provision Rule is using it. |
CNSSNG-5482 |
Add validation for name changes in device configuration details. |
CNSSNG-4848 |
Remove phone number validation for cnPilot R-Series SIP configuration. |
CNSSNG-5367 |
Mark devices as out-of-sync, and log event when skipping offline devices. |
CNSSNG-2544 |
"Device is offline" alarm not auto-clearing. |
CNSSNG-3327 |
Many ePMP and cnPilot devices timed out during software upgrade. |
CNSSNG-6205 |
Update UI to correctly identify primary VLAN. |
CNSSNG-5273 |
Native VLAN ID should be taken into consideration when device is onboarded. |
CNSSNG-4831 |
For mesh base/client, RADIUS authentication option is not present in configuration. |
CNSSNG-5613 |
Mesh Peers tab is not refreshing and updating info after moving from one device to other. |
CNSSNG-5211 |
Clicking on number clients in Dashboard should redirect to the Clients Table. |
CNSSNG-4686 |
Hourly performance data export for ePMP/PMP/Wi-Fi devices should not show floating point numbers for integer data parameters. |
Known Issues
The following issues exist in the cnMaestro On-Premises 1.6.0 release:
Id |
Issue |
Details |
FLCN-2521 |
cnPilot E400 PoE Configuration Error |
Configuring PoE Output options for cnPilot E400 devices generate the error” “PoE-Out to an auxiliary device not supported on this platform”. Workaround: Do not enable PoE option if the configuration is pushed to multiple mixed types of devices like E500 and E400. |
AURA-388 |
WiFi Guest Access Does Not Work with Microsoft Edge Browser |
Guest Access on cnMaestro does not work with Edge browser on cnPilot 1.4.0-r12 with 3.2.1-6 and 1.5.0-r4 with 3.3 beta builds. Workaround: Users need to use supported browsers like Chrome, Firefox, or Internet Explorer (IE) 11. |
CNSSNG-4083 |
DHCP Errors after cnMaestro Reboot |
When cnMaestro On-Premises is rebooted, after Data Import, sometimes DHCP and Disk Errors are encountered. Workaround: Explicitly run the dhclient command from the Command Line (accessed through the CLI) after reboot to assign the IP address. |
RBN-280 |
DHCP Option 15 Not Working for cnPilot R |
DHCP Option 15 onboarding is not working for cnPilot R devices. These devices cannot use this onboarding mechanism. |
CNSSNG-4906 |
Captive Portal Auto Login Fails with Latest Android Devices |
Workaround: Whitelist the URL for Google (*.google.com). |
CNSSNG-5365 |
RADIUS Proxy Drops Packets after Retry Exhausted |
After RADIUS Proxy Retries are exhausted in cnMaestro On-Premises, all subsequent RADIUS packets are dropped. Workaround: Reboot cnMaestro. |
Where to Get Help
There are a number of places to get help with cnMaestro.
- Cambium Community: The cnMaestro Forum provides the best place to ask questions and get up-to-date information.
- On-Premises Quick Start Guide: This guide walks you through the initial management process and allows you to get onboarded quickly. It is embedded into the cnMaestro image and can be accessed on the Home Page of the UI. It can also be downloaded in PDF format from the Cambium Support website.
- Cambium Support: The Cambium Support team is available 24x7 to answer questions and resolve issues.