cnMaestro 1.6.0 Release

Overview

cnMaestro 1.6.0 Cloud will be released over the course of this week, followed by On-Premises next week. This document highlights new features and significant updates in the Cloud and On-Premises deployments.

Important

cnMaestro 1.6.0 On-Premises is distributed as an OVA file which requires installation on a separate virtual machine. Existing cnMaestro On-Premises users should export their data and import it into cnMaestro 1.6.0. Data exported from cnMaestro 1.4.0, 1.5.0, and 1.5.1 is supported.

The basic steps are defined in the User Guide and consist of:

1.      Export Data from current cnMaestro Installation at Application > Server > Operations.

2.      Import Data file into the new cnMaestro 1.6.0 installation at Application > Server > Operations.

Note: cnMaestro 2.0.0 (scheduled for Q1/2018) will remove the data export/import requirement after its release.

Important

You may need to restart your browser (or clear the browser cache with a hard reload) after the 1.6.0 update.

Access and Backhaul View Redesign

The cnMaestro Access and Backhaul View is reworked to follow the navigation style of the Wireless LAN View. This includes simplifying the side-menu:

1.6.1.png

In addition, management pages have been restructured to follow tab-based navigation, so all functionality is readily visible.

Miscellaneous Improvements

Update

Description

AP Groups / WLANs

These sections have been simplified and brought in-line with the Wireless LAN View.

Jobs and Navigation

Jobs management is consolidated under a Jobs section in the Application menu.

Replace Quick Buttons

The Quick Buttons (above the tree) are replaced with page-level tab navigation.

Header Monitoring Icons

1.6.3.png

The monitoring icons in the header are changed to reflect the following:

Item

Meaning

Alarms

Global Critical or Warning alarms present (warning will be displayed if no critical alarms).

Devices Awaiting Approval

Devices in the Onboarding Queue waiting for approval.

Jobs

Number of outstanding Software Update Jobs.

Out-of-Sync Devices

Wi-Fi devices whose configuration is no longer synchronized with their AP Group.

Point-to-Multipoint Software Update

The Software Update page presents e/PMP devices in a more intuitive sector view, which allows quick selection of All Devices, APs, or SMs on the page. The software versions are displayed in a multi-selectable graphic that allows filtering of displayed devices by software version.

Improved Update Algorithm

The update algorithm now supports 50 simultaneous devices and parallel sector operation, which speeds software updates.

Administrator Roles

Four user Roles are supported to control access to cnMaestro management.

Role

Overview

Super Administrator

Full management of cnMaestro Cloud and On-Premises, including Users, AAA servers, API Clients, and On-Premises servers.

Administrator

Management of the cnMaestro application and associated devices, including global configuration through AP Groups and Templates.

Operator

Read-only monitoring with device-specific provisioning.

Monitor

Read-only monitoring.

Note: Existing Users/Administrators with add/delete user privileges are mapped to the Super Administrator role. All others are mapped to Administrator.

The mapping of features to Role access is defined below (op means On-Premises availability).

Section

Features

Super Admin

Admin

Operator

Monitor

API Management (op)

API Clients

All

None

None

None

Application Operations

Networks and Towers, Technical Support Dump, Server data

All

All

View

View

Application Settings

Global application configuration, including Onboarding Keys

All

All

None

None

Authentication Services (op)

Authentication Servers

All

None

None

None

Auto-Provisioning (op)

Global Auto-Provisioning rules

All

All

View

None

Data Tunnel (op)

Data Tunnels

All

All

View

None

Device Operations

Reboot Device, Link Test, Connectivity Test, Wi-Fi Performance Test

All

All

All

Wi-Fi Perform.

Device Overrides

Per-Device configuration, including mapping AP Group

All

All

All

None

Global Configuration

Templates, WLANs, AP Groups and Association ACLs

All

All

View

None

Guest Portal

Guest Access

All

All

View

None

Job Management

Configuration, Software Update, and Scheduled Report Jobs

All

All

All

None

Monitoring

Device statistics

All

All

All

View

Notifications

Alarms and Events

All

All

All

View

Onboarding

Approve Devices, Pre-Provisioning

All

All

All

View

Reporting

Report generation

All

All

All

None

SNMP Configuration (op)

SNMPv2c server

All

All

View

None

Software Images (op)

Upload/delete local Device software images in cnMaestro

All

All

None

None

Software Upgrade

Push software to Devices

All

All

All

None

System Operations (op)

Reboot cnMaestro, change Log Level; update cnMaestro software; SSL Certificate management

All

All

None

None

User Management

Manage Users and User Sessions

All

View

None

None

User Session Management Pro.png

Management users are viewed in the new Session Management table. There is also an option to log out individual managers.

System Dashboard

The System Dashboard is completely redesigned to better present global health data.

New Metrics

The System Dashboard has added the following metrics:

Account Capacity

The number of devices that can be added to this account.

Recommended Software

The number of devices running the recommended software version.

1.6.7.png

New Network/Site Overview

The overview graphic for the System Dashboard allows one to select Networks or Sites. The presentation is ordered by device count.

Band Separation

The Client SNR and Performance graphs in cnPilot Enterprise Dashboards are separated by radio band (2.4 GHz or 5 GHz).

Scheduled Data Reports (On-Premises) Pro.png

Data Reports can be scheduled to execute Daily or Weekly against devices within a specified level of the hierarchy. Report Jobs are managed at Application > Jobs > Report.

Wireless LAN Passpoint Configuration

AP Groups are enhanced to support Passpoint configuration.

RESTful API Monitoring (On-Premises) Pro.png

The OAuth2.0 RESTful API supports device monitoring data for ePMP, PMP, and Wi-Fi, including Wi-Fi Clients. The API includes inventory, statistics, event, and alarm data. Please see the API Specification on Cambium Support Center for full details on configuring and using API Clients.

Authentication Server Support for Administrators (On-Premises) Pro.png

Support for TACACS+ and Active Directory servers for user login into cnMaestro. Groups defined in these systems can be mapped to cnMaestro Roles.

Primary and Secondary Authenticators Pro.png

Support for a Primary Authenticator for cnMaestro administrator access, with Local Administrators configured as a Secondary Authenticator (in case the Primary is not reachable).

Account Recovery

If the username/password of the cnMaestro account is lost, the virtual machine administrator can create a one-time account recovery password to log into the account and fix the configuration. This is only accessed through the Console CLI.

1.6.15.png

SSL Certificate Management (On-Premises)

An SSL Certificate management framework to customize the certificate used to access the Wi-Fi Guest Access Portal and cnMaestro UI. The feature supports:

  1. View the current installed certificate.
  2. Backup the certificate and key (optionally encrypted).
  3. Export a CSR (Certificate Signing Request) to allow signing by an external CA (Certificate Authority).
  4. Import the signed certificate, or a certificate with key.
  5. Generate a new key and self-signed certificate.

 

SNMPv2c (On-Premises) Pro.png

Support for basic SNMPv2c inventory, statistics, and traps for connected/disconnected devices. The MIB is available in the cnMaestro Download section of Support Center.

Automatic Software Update (On-Premises)

Automatically update software when devices first register with cnMaestro.

Sync Configuration (Wi-Fi)

Page at Application > Sync Configuration to track and resolve unsynchronized cnPilot configuration, which may occur when Wi-Fi devices are updated through the device UI, or automatic synchronization is disabled in an AP Group. A header notification icon (discussed earlier) is also added.

Jobs Pages

The Jobs pages are collected into a section found under Application > Jobs. Here one can review pending and completed Configuration Update, Software Update, and Report Jobs (the latter is available in cnMaestro On-Premises).

Advanced Features

Advanced features are enabled at runtime, but disabled by default. They are configured at Application > Settings > Advanced Features.

Mesh Peers Statistics Pro.png

Enable Mesh Peers dashboard visualizations and the Mesh Peers table.

 

Wi-Fi Performance Daemon Pro.png

Enable Wi-Fi performance tests between the Wi-Fi AP/CPE and cnMaestro.

Supported Cambium Products

cnMaestro supports the following Cambium Networks products. The software versions are the minimum required to use cnMaestro.

Family

Models)

Version

cnPilot

cnPilot R200, R200P

4.2.3-R4

cnPilot R201, R201P

4.2.3-R4

cnPilot R190V,  R190W

4.3.2-R4

cnPilot E400/E500

2.5.2-r3

cnPilot E410

3.4.1-r8

cnPilot E501S, E502S (new)

3.3-r16

ePMP 1000 Hotspot

ePMP 1000 Hotspot

2.5.2-r3

ePMP

ePMP 1000, Force 180/200, Force 190 (new)

2.5.2-r3

ePMP 2000

2.6.2

ePMP Elevate

3.0.1

PMP

PMP 450i, PMP 450, PMP 450m, PMP 430 SM

3.2

PTP 450, and PTP 450i

15.0.1

 Supported Browsers

cnMaestro supports the following browsers:

Platform

Browser

Version

Windows

Internet Explorer

11 and above

Firefox

45 and above

Chrome

49 and above

MacOS

Safari

9 and above

Linux

Firefox

45 and above

Chrome

49 and above

Significant Fixed Issues

The following issues have been fixed in cnMaestro 1.6.0:

Id

Details

CNSSNG-6275

User-defined overrides do not appear if "VLAN" is in the replacement variable name.

CNSSNG-2571   

Without the radio or SSID configuration, cnMaestro is not fetching the device details.

CNSSNG-5979

Prevent AP Group deletion if Auto-Provision Rule is using it.

CNSSNG-5482

Add validation for name changes in device configuration details.

CNSSNG-4848

Remove phone number validation for cnPilot R-Series SIP configuration.

CNSSNG-5367

Mark devices as out-of-sync, and log event when skipping offline devices.

CNSSNG-2544   

"Device is offline" alarm not auto-clearing.

CNSSNG-3327

Many ePMP and cnPilot devices timed out during software upgrade.

CNSSNG-6205   

Update UI to correctly identify primary VLAN.

CNSSNG-5273   

Native VLAN ID should be taken into consideration when device is onboarded.

CNSSNG-4831

For mesh base/client, RADIUS authentication option is not present in configuration.

CNSSNG-5613

Mesh Peers tab is not refreshing and updating info after moving from one device to other.

CNSSNG-5211

Clicking on number clients in Dashboard should redirect to the Clients Table.

CNSSNG-4686

Hourly performance data export for ePMP/PMP/Wi-Fi devices should not show floating point numbers for integer data parameters.

Known Issues

The following issues exist in the cnMaestro On-Premises 1.6.0 release:

Id

Issue

Details

FLCN-2521

cnPilot E400 PoE Configuration Error

Configuring PoE Output options for cnPilot E400 devices generate the error” “PoE-Out to an auxiliary device not supported on this platform”.

Workaround: Do not enable PoE option if the configuration is pushed to multiple mixed types of devices like E500 and E400.

AURA-388

WiFi Guest Access Does Not Work with Microsoft Edge Browser

Guest Access on cnMaestro does not work with Edge browser on cnPilot 1.4.0-r12 with 3.2.1-6 and 1.5.0-r4 with 3.3 beta builds.

Workaround: Users need to use supported browsers like Chrome, Firefox, or Internet Explorer (IE) 11.

CNSSNG-4083

DHCP Errors after cnMaestro Reboot

When cnMaestro On-Premises is rebooted, after Data Import, sometimes DHCP and Disk Errors are encountered.

Workaround: Explicitly run the dhclient command from the Command Line (accessed through the CLI) after reboot to assign the IP address.

RBN-280

DHCP Option 15 Not Working for cnPilot R

DHCP Option 15 onboarding is not working for cnPilot R devices. These devices cannot use this onboarding mechanism.

CNSSNG-4906

Captive Portal Auto Login Fails with Latest Android Devices

Workaround: Whitelist the URL for Google (*.google.com).

CNSSNG-5365

RADIUS Proxy Drops Packets after Retry Exhausted

After RADIUS Proxy Retries are exhausted in cnMaestro On-Premises, all subsequent RADIUS packets are dropped.

Workaround: Reboot cnMaestro.

Where to Get Help

There are a number of places to get help with cnMaestro.

  1. Cambium Community: The cnMaestro Forum provides the best place to ask questions and get up-to-date information.
  1. On-Premises Quick Start Guide: This guide walks you through the initial management process and allows you to get onboarded quickly. It is embedded into the cnMaestro image and can be accessed on the Home Page of the UI. It can also be downloaded in PDF format from the Cambium Support website.
  1. Cambium Support: The Cambium Support team is available 24x7 to answer questions and resolve issues.
3 Likes

Hi Rob,

This is great news to finally see a solution for updating SM's easily. Look forward to this update.

Do you think there is any chance if the WPA2 fix is released sooner that the on-premises version could release could be brought forward to coincide with this?

Great work and look froward to trying this new version out.

There is a post on this already and a fix will be provided soon… until then follow the guidelines mentioned in the below post

http://community.cambiumnetworks.com/t5/Enterprise-e4XX-e5XX-series/Security-Advisory-on-Key-Reinstallation-Attacks-KRACK/m-p/79136#M2314

The R190/R200/R201 routers are able to be named in the device itself (hostname). This usually happens at installation, but unfortunately the device label in Maestro does not get updated during the onboarding process, as it does correctly with PMP devices.

Maybe this entry addresses the naming problem?

CNSSNG-5482

Add validation for name changes in device configuration details.

Here are the related community posts:
http://community.cambiumnetworks.com/t5/cnMaestro-Beta/R20x-Device-Name-grab-this-from-router/m-p/59598#M306

http://community.cambiumnetworks.com/t5/Home-Small-Business-R200-201/Naming-R201/m-p/54259#M345

Another thought, if the device name changes in the device at a later date, do the names within Maestro update as well?

Thanks!

CNSSNG-6461 tracks an enhancement to add support for configuring hostname on R-series devices.  This enhancement is not included in the 1.6.0 release.

If the device name changes in the device at a later date the device name in cnMaestro will reflect this change everywhere except in the device level configuration page.  This page will show the last name configured using cnMaestro.  For cnPilot devices the name set there will be pushed to the device whenever an AP Group is applied to the device.  This is true as of 1.6.0.

@Jodan Thanks, do you have a guess as to when this will become a reality? Could it be added to the list of Known Issues? 

Although not a guarantee, that particular issue is targeted for the release after 1.6.0.

When this update will be available for download at https://support.cambiumnetworks.com/files/cnmaestro/ ?

Thank you,

Hi,

Currently we are in process of rolling out 1.6.0 version to cloud servers and planning to release On-Premises version by next Wednesday(25-Oct).

Thanks,

Ajay

Hi, about SYNC:

Sync Configuration (Wi-Fi)

Page at Application > Sync Configuration to track and resolve unsynchronized cnPilot configuration, which may occur when Wi-Fi devices are updated through the device UI, or automatic synchronization is disabled in an AP Group. A header notification icon (discussed earlier) is also added.

The sync process is now bidirectional as here: http://community.cambiumnetworks.com/t5/cnMaestro/Bidirectional-Sync/td-p/69127

?

thanks,

Michele Pietravalle

Hi Michele,

No, updates made to the sync feature do not include the bidirectional sync described in the linked post.  Sync still synchronizes to the configuration defined in cnMaestro, not the device.  The only exception to this is network settings on the native VLAN for Enterprise devices, but not R-series devices.  For Enterprise devices the network settings can be read from the device and pushed back in order to prevent overwriting.

Best Regards,

Jordan

thansk for Your reply.

is already planned the bidirectional sync?

we are waiting to migrate to cambium 250-300 devices from mikrotik and our software due this limitation,

thanks,

Michele Pietravalle

Thank you for your feedback Michele.  We are discussing this internally.  I will provide an update when I have something to report.

Added the following to the Release Notes: "You may need to restart your browser (or clear the browser cache with a hard reload) after the 1.6.0 update."

Confirmed the release today? Thanks.

News about on-premises version?

Hi, any update?

thanks.



@Cambium_Ajay wrote:

Hi,

Currently we are in process of rolling out 1.6.0 version to cloud servers and planning to release On-Premises version by next Wednesday(25-Oct).

Thanks,

Ajay


cnMaestro On-Premises 1.6.0 is now posted on Support Center.

Backed up, installed and restored.  So far looks like everything working well.  Thanks!

1 Like

Thanks. All ok.

but i cannot generate a CSR (the country results empty). already opened a ticke but isn't a blocking problem.