cnMaestro 3.0.0 (Cloud)


This document highlights new features and significant updates in cnMaestro Cloud, which is currently being deployed (not all accounts have been updated yet).

Important: Web Browser

Restart your browser (or clear the browser cache with a hard reload) if you are having UI problems with the 3.0.0 version.

Important: Activation of 90-Day Free Trial

The 90-day free trial for cnMaestro X is activated in all existing accounts. No action is needed if you do not want to continue with cnMaestro X after the trial expires. After 90 days, the account will gracefully downgrade to cnMaestro Essentials.

Customers creating new accounts can request a 90-day free trial using the link on the cnMaestro Home page or submitting a request at

Introduction to New cnMaestro Variants

cnMaestro 3.0.0 supports two variants:

cnMaestro Essentials

This unlicensed, free version of cnMaestro delivers the same experience as the previous cnMaestro, but without the Pro features.

cnMaestro X

This paid subscription offers advanced cnMaestro network management capabilities and Cambium Care Pro, which provides 24x7 technical support, accelerated access to L2 engineers, and regular software updates for advanced features.

All the features labeled Pro (pro) in previous releases have been relabeled to X (x).

cnMaestro X Features

# Feature Description
1 Administrator User Limit Support for up to 100 cnMaestro administrators.
2 Audit Logs Log user management activity.
3 Concurrent Device Jobs Parallel execution of software, configuration, and action jobs.
4 Configuration Lock Reapply Wi-Fi AP/cnMatrix device configuration if changed outside of cnMaestro.
5 Data Reports Schedule recurring CSV data report jobs.
6 ePSK Limit ePSK limit is increased from 300 to 1024.
7 Guest Access Portal (Paid) Provide guest access through a paid service.
8 Guest Access Portal (Limits) 500 Guest Access Portals, 10,000 sessions, and 1 year of client login history.
9 Long Term Historical Data Enhanced Performance Graphs and Reports:
1 Year Data: cnMatrix and Wi-Fi APs (such as cnPilot Home, cnPilot E-Series, XV-Series).
1 Year Data: IIoT devices (such as cnReach and Machfu).
2 Years Data: Fixed Wireless Broadband (such as ePMP, PMP, PTP and cnRanger),
10 Managed Service Provider (MSP) Allows customers to partition their account into separate Managed Accounts – each with its own independent administration and configuration.
11 Mesh Peers Displays the details of mesh peers (clients).
12 Session Management Tracks the current cnMaestro user sessions and allows force logout of current user sessions.

Please refer to the following videos to get started with cnMaestro X:

Introduction to cnMaestro X

cnMaestro X Features and Benefits

Subscription Management

A new menu, Subscriptions, is used to administer cnMaestro X.

Manage Subscriptions

This page provides a usage summary and a list of pending/active/expired subscriptions. It aids planning for renewals and the purchase of new subscriptions.



This page manages device subscriptions. It is beneficial when a slots deficit exists to accommodate all the expired devices or if one wants to swap an expired device subscription with another active device of less importance.


Managed Service Provider (MSP) x

Managed Service Provider (MSP) allows a cnMaestro account owner to partition their installation into separate Managed Accounts – each with its own independent administration and configuration. This feature is directed to service providers who want to deliver a full cnMaestro infrastructure to their customers, but still maintain control over the full deployment.

The MSP feature supports all cnMaestro device types, and it consists of the following two components:

Managed Accounts

Managed Accounts group cnMaestro devices and configuration objects (such as AP Groups, WLANs, Templates, Networks, and Sites) into independent administration domains within a single cnMaestro Cloud Account. Managed Accounts are autonomous, and the devices added are configured using either the objects in the Managed Account or shared objects available to all accounts.


Managed Services

A Managed Service allows the service provider to create a customized version of the cnMaestro UI that will be used by their Managed Account customers. Each Managed Service can be shared between different Managed Accounts.


Increased cnMaestro Users Limit x

The limit for cnMaestro Users is increased from 10 to 100.


Long Term Historical Data Support in Performance Charts x

All device performance charts are enhanced for long term historical data support. Along with the existing 5 minute and 1-hour periods, a new 1-day period is added. The 1-day interval will only be available in cnMaestro X accounts.

Now performance charts will support long term historical data as follows:

1 Year Historical Data: cnMatrix and Wi-Fi APs (such as cnPilot Home, cnPilot E-Series, XV-Series).

1 Year Historical Data: IIoT devices (such as cnReach and Machfu).

2 Years Historical Data: Fixed Wireless Broadband (such as ePMP, PMP, PTP and cnRanger),


Scheduled Data Reports x

Data duration for a single Data Report is increased from one week to a maximum of 30 days. The full 30 days interval can occur anywhere in the historical data.


Concurrent Device Jobs x

Support for concurrent device jobs is added. Now Software Update, Configuration Update, and Action Jobs can be executed concurrently on a distinct set of devices.

Software Defined Radios (SDR) Support for XV3-8 Wi-Fi APs x

SDR allows splitting 8x8 5 GHz radio into two 4x4 5 GHz radios. Once enabled, the second 5 GHz radio gets split into two 5 GHz radios: Radio2 and Radio3. Both radios can be configured independently.


Scheduled Configuration Update

Select a time to apply device configuration updates.


Updated Home Page

The Home page is updated to provide a fresh look and overall summary of the deployment.


Consolidate Enterprise Wi-Fi APs in UI

The cnPilot E-Series and XV-Series APs are combined into one category called Enterprise Wi-Fi. The end-of-life (EoL) ePMP 1000 Hotspot is also included under Enterprise Wi-Fi AP Groups and WLANs.



Miscellaneous UI Improvements

Most icons are updated, and Main Menu text is renamed as shown below:


Supported Cambium Products

cnMaestro supports the following Cambium Networks products. The software versions are the minimum required to use cnMaestro (not the recommended versions).

Family Model Version
cnPilot Home cnPilot R200, R200P 4.2.3-R4
cnPilot R201, R201P 4.2.3-R4
cnPilot R190V, R190W 4.3.2-R4
cnPilot R195P 4.5.2
cnPilot R195W 4.7
Enterprise Wi-Fi cnPilot e400/e500 2.5.2-r3
cnPilot e410/e430w/e600 3.5.2-R4
cnPilot e501S/e502S 3.2.1-r6
cnPilot e700 3.8
cnPilot e425/e505 4.0-r17
cnPilot e510 3.11.4-r9
XV3-8 6.0
XV2-2 6.1
ePMP 1000 Hotspot ePMP 1000 Hotspot 2.5.2-r3
ePMP ePMP 1000, Force 180/200 2.6.2
ePMP 2000 3.0.1
ePMP Elevate XM/XW 3.2
ePMP Force 190 3.5
ePMP Force 300 4.1
ePMP PTP 550 4.1.1
ePMP Force 130 5 GHz 4.3.2
ePMP 3000L 4.3.2
ePMP Force 130 2.4 GHz 4.4
ePMP Force 300-19, 19R, 13 4.4
ePMP 3000 4.4.1
ePMP PTP 550 E 4.4.2
ePMP MP 3000 4.5
ePMP Force 300-13L 4.5.2
ePMP Force 300-13LC, 22L, 25L 4.6
ePMP 4000, Force 400 GPS, 400 CSM, 425 5.1.0
PMP PMP 450i, PMP 450, PMP 450m, PMP 430 SM 15.0.1
PTP 450, and PTP 450i 15.0.1
Micropop Omni/Sector 16.2.1
PTP PTP 650 01-47
PTP 670 (650 Emulation) 01-47
PTP 670, PTP 700 02-67
cnReach N500 5.2.17e
cnVision Hub 360r, FLEXr 4.6
Client Micro, Mini, Maxr 4.6
cnRanger Sierra 800
Tyndall 101
Tyndall 201

Supported Browsers

cnMaestro supports the following browsers:

Platform Browser Version
MS Windows Internet Explorer 11 and above
Microsoft Edge 44.17763.1.0
Firefox 45 and above
Chrome 49 and above
MacOS Safari 9 and above
Linux Firefox
Chrome 49 and above

Significant Fixes

The following issues have been fixed:

Id Details
AURA-470 Failure to load Success page after quick pay authentication.
CNSSNG-4906 Captive Portal Auto Login fails with latest Android devices.
CNSSNG-6293 Mesh Recovery WLAN Profile is not shown in On-Premises or Cloud.
CNSSNG-7328 Macros within replacement var default values not handled properly.
CNSSNG-8101 Link to device web page using enabled protocol.
CNSSNG-8304 ePMP: “No GPS Sync” or “GPS Sync Down” alarm/event not raised in cnMaestro.
CNSSNG-10189 cnReach performance reports do not have throughput values for radios.
CNSSNG-12167 Wrong Passphrase is getting pushed to AP in WLAN Group.
CNSSNG-12455 MAC Address format should be unique in all configuration parameters.
CNSSNG-13171 Improvements to Spectrum Inquiry Response graph in Tools. This release now shows the height of each bar in the graph proportional to the EIRP (if that information is provided by the SAS vendor).
CNSSNG-13457 For cnPilot-R devices, if hostname has an embedded quotation mark, the name is truncated when pushed to devices.
CNSSNG-13598 EPSK keys not available in exported WLAN JSON.
CNSSNG-14173 CBRS Management Tool better displays info on operational parameters in SAS responses. This includes a new column in the tool to show “SAS Recommended EIRP”; printing related text via hover over bubble; and the ability to request the SAS recommended EIRP by clicking on the START action button. See the CBRS Consolidated Procedures Guide for more information.
CNSSNG-14798 Option to set time zone from cnMaestro UI (On-Premises Only).
CNSSNG-15160 Enable/disable SSH access from cnMaestro UI (On-Premises Only).
CNSSNG-15250 Improvements to CBRS heartbeat interval and timeout handling.
CNSSNG-15251 Separate billing and technical contact information requested on CBRS Services Accounts page of cnMaestro, instead of a single set of contact information.
CNSSNG-15256 A Reimport option has been added to the CBRS Management Tool spreadsheet import function. If, for example, an operator made the same configuration mistake on every device in a sector, previous options were to edit every device one-at-a-time via pop-up GUI or delete everything and re-add with a new sheet. Now operators can use the Reimport function to change installation parameters or EIRP in any state, although a deregistration will be triggered. Changing BW or Center frequency is also supported via Reimport, but only if all devices in the sector are deregistered prior.
CNSSNG-15258 The CBRS Management Tool supports live status updates of the CBRS state of the radio. Prior to 2.4.1, the CBRS state of the device was frozen after the device flips to config_sync state. Now this field, as well as others, are updated from the device. See the cnMaestro Cloud User Guide for additional details on live status updates. The CBRS Management Tool supports an Export function to recreate the spreadsheet based on current tool entries. The CBRS management tool also supports ODS file format for import instead of just Excel. Note export to ODS format is not yet supported. Editing EIRP for Config_synced devices is supported from cnMaestro, rather than just directly on the devices. See the CBRS Consolidated Procedures Guide for more info. The CBRS Management Tool now allows editing parameters for devices in Not_Synced config states other than deregistered/unregistered – i.e. one can edit parameters in an AUTH/Not_synced state although a deregistration is forced by cnMaestro as part of the edit.
CNSSNG-15259 cnMaestro Reports generate CBRS related data.
CNSSNG-15313 Dashboard Throughput Graph and Capacity Graph for PTP devices are not updating other than Chrome browser.
CNSSNG-15344 Enterprise View: The Bulk device deletion happens for all devices instead of devices under APs/Switches only.
CNSSNG-15410 SMs connected to ePMP 3000 are not shown under the AP in the cnMaestro tree.
CNSSNG-15525 With 2.4.1, removing devices from CBRS Management Tool no longer deletes them from cnMaestro inventory/onboarding queue. CBRS Tool replaces the old method of Deregister per device via checkbox with Delete and Deregister action buttons near the top of the tool. With this improvement, “Deregister All” and “Delete All” options are supported.
CNSSNG-15589 Slightly higher EIRP limits allowed with 2.4.1 for certain SAS vendor/model combinations as follows:

Federated Wireless SAS:
450 SM, old limit = 45 dBm, new limit = 46 dBm,
450 AP, old limit = 45 dBm, new limit = 46 dBm
450i AP old limit = 46, new limit = 47
Google SAS:
450i old limit = 46, new limit = 47

Note : While 16.2.1 radio code supports operation with these higher limits if the Grant is obtained from the cnMaestro tool, 16.2.1 code does not support the radio requesting the higher values directly. Existing operators who deployed devices with these lower limits who want to bump up their power by 1 dB should see the CBRS Consolidated Procedures Guide version 1.3 for editing EIRP on a config_synced radio. Until newer radio software is available, an existing operator who wishes to obtain a grant with 1 dB higher power will have to deregister such device long enough to request a new grant from the tool, then sync this new grant to the device. This should be done in a maintenance window prior to a CPAS cycle.
CNSSNG-15621 The mailing address is used as a login to enter MSP users should not be case sensitive
CNSSNG-15724 Alarm CBRS_GRANT_SUSPEND is not clearing
CNSSNG-15726 Invalid configuration generated when VLAN’s DHCP Relay Agent is cleared.
CNSSNG-15903 Mismatch in parameters in Performance Reports (Backhaul vs Enterprise Account types).
CNSSNG-16161 Hover over message for “Registered” field incorrect in Management Tool for 2.4.1 when device builds are less than 16.2.1.
CNSSNG-16250 Exported ePSK entries are not human-friendly.
CNSSNG-16300 Configuration auto-sync queue can be corrupted by unmapped device.
CNSSNG-16402 DFS Status field with HTML tag in cnMaestro UI.
CNSSNG-16471 Found Error message: “Error while replacing device variables in template”, if customer AP Group is pushed from onboarding page with Auto-Provisioning rule.
CNSSNG-16574 PTP 550 dashboard throughput graph is not populating.
CNSSNG-16858 cnPilot E-Series: PPPOE details are not saved with AP Group
CNSSNG-17355 Devices are showing outside Site even though Site inventory and Site shows the device belongs.
CNSSNG-17477 Network MAP should show other Towers as well from SM/AP level.
CPY-15253 CommScope SAS is now supported in addition to Google and Federated Wireless. Although lab testing is complete, Cambium Networks has not finished customer beta testing with CommScope. Until that validation is complete, Cambium recommends customers wait for additional announcements from Cambium indicating it is ready for general use.

Known Issues

The following issues exist:

Id Issue Details
CNREACH-139 Radio Software Update is not happening for EP based devices.
CNSSNG-4083 DHCP errors after cnMaestro reboot When cnMaestro On-Premises is rebooted, after Data Import, sometimes DHCP and Disk Errors are encountered. Workaround: Explicitly run the dhclient command from the Command Line (accessed through the CLI) after reboot to assign the IP address.
CNSSNG-5365 RADIUS Proxy drops packets after retrying exhausted After RADIUS Proxy Retries are exhausted in cnMaestro On-Premises, all subsequent RADIUS packets are dropped. Workaround: Reboot cnMaestro.
CNSSNG-9631 High Availability: Network cable unplug: Device count is taken from Primary and jobs/users list is taken from Secondary.
CNSSNG-9632 High Availability: Network cable unplug: Devices onboarded during network disconnect need to be reapproved by user.
CNSSNG-10145 Certificate exports are not part of Data Backup and Restore Certificates must be exported manually.
CNSSNG-10187 While Migration is happening, moving or deleting a device from the Managed Account will mark all the events and alarms as undefined once migration is completed
CNSSNG-11299 AP Regulatory Channel list support check needed for checking valid channels.
CNSSNG-11389 Microsoft Edge Browser does not support in system OVA file upgrade. Workaround : Use the Google Chrome browser
CNSSNG-11987 Failed - Bad Certificate’ errors while downloading the generated report after a period of report generation.
CNSSNG-12812 cnPilot R-series dual radio devices (r-201P, r-195W) AP Group country code/SSID configured from overrides getting applied only to 2.4 GHz radio.
CNSSNG-12888 Connected Clients count in the WLAN page is not properly shown when SSID is overridden for the WLAN at device level.
CNSSNG-13054 Mismatch in Clients count for E-series device at WLAN and AP Group configuration level.
CNSSNG-13144 CBRS Management tool status field is not updated in heartbeat state. Workaround: Prior to syncing the configuration to the radios, any state change from the SAS does not automatically get updated on cnMaestro. A refresh on the Management tool page is necessary.
CNSSNG-14030 CBRS Race condition: SM “stuck” in cnMaestro during reparenting if import and start occurs as SMs arrive in onboarding queue Workaround : To avoid this issue, follow the suggested SM reparenting procedures listed in the latest version of Cambium CBRS standalone procedures document.
CNSSNG-14518 Device Type selection needs to be provided at Site and AP Group for Report generation.
CNSSNG-15432 Deleting a device in base infrastructure and claiming it immediately to another Managed Account returns Device Registration Failed message.
CNSSNG-15595 cnMatrix Hostname fall backs to old Hostname if the template is pushed for the first time (if a Switch Group already exists)
CNSSNG-15656 Duplicate entries observed in 802.11ax Clients Report.
CNSSNG-15838 Issues related to Mon8zn Subscription Events.
CNSSNG-16019 Subscriptions are not listed in the correct order.
CNSSNG-16197 CBSDID search will not work when device was synced from tool without obtaining grant first. Workaround : Perform CBSDID search from domain proxy view on cloud to obtain mac address, then perform MAC address search on tool to find the device.
CNSSNG-17011 After the migration completed for PPPOE with server update, devices still show in sync. Workaround : User must manually apply the AP Group again on devices with minor changes to the AP Group.
CNSSNG-17721 Need to take care of NAS-ID configuration when migrating cnMaestro from 2.4.1 and below version to 2.4.2 and above. Workaround : AP Groups having WLAN with custom NAS ID settings needs to be pushed again with minor changes to the AP Group. This is required only if the devices in the AP Group are running with and 4.1 builds
CNSSNG-18710 Tier issues related to 450i, 450i AP, and 450i SM.
CNSSNG-18913 On resizing, the graph/widgets are not proper rendering.
CNSSNG-18923 After migration Reports Job page is empty due to cached data. Workaround : Clear Cache and Cookies after migration.
CNSSNG-18927 Configuration push from Onboarding page is getting device timeout error in ePMP 1000 Hotspot device.
CNSSNG-18936 Graphs plotting is getting empty if the page is zoomed out/in.
CNSSNG-19115 If AP is expired SM is reflecting twice in the tree.
CNSSNG-19264 Unmanaged expired device approve button is not disabled.
CNSSNG-19273 Expired Wi-Fi devices are not handled for AP Group dashboards and tree level.
CNSSNG-19274 Expired devices count should not be added to connection health graph.
CNSSNG-19275 Issues related to Offline alarm of expired devices.

Where to Get Help

There are a number of places to get help with cnMaestro.

Cambium Community : The cnMaestro Forum provides the best place to ask questions and get up-to-date information.

On-Premises Quick Start Guide : This guide walks you through the initial management process and allows you to get onboarded quickly. It is embedded into the cnMaestro image and can be accessed on the Home Page of the UI. It can also be downloaded in PDF format from the Cambium Support website.

Cambium Support : The Cambium Support team is available 24x7 to answer questions and resolve issues.



when will be available on-premise?

Thank you


Currently On-Prem version is tracking towards third week of Feb.


1 Like


are we going to need cnMaestro X to use the mesh feature on cnPilot products? Or are we just going to lose visibility on the details of the Meshed Peers?

Currently I have a couple of E500s connected using mesh. I can see on cnMaestro (cloud) the “Mesh Peers” tab has an X next to it. Does this mean that mesh will stop working after the trial period for cnMaestro X expires?


Only the “Mesh Peers” detail is a cnMaestro X feature. There will not be any impact to devices using mesh configuration even after the trial expires, and the account downgrades to cnMaestro Essentials.


Thank you Ajay for the prompt answer.

I noticed enabling the 3rd radio is a X feature only for the XV-8 models. Is this the same thing as a 8x8 vs two 4x4 radios? previously i don’t believe it was manageable in Maestro and had to be enabled/disabled at the on the AP web UI.

With cnMaestro X you can configure the 8x8 5GHz radio as two 4x4 radios.

hi @Cambium_Ajay, I think something went wrong?
Any news?

Any updates on support for API and Webhooks on the cnMaestro cloud? Will cnMaestro X be required in order to utilize the APIs and Webhooks?

API and Webhooks are cnMaestro X features. You can check the On-Premises cnMaestro X feature list in this post.

I don’t have information to share on cloud support for API and Webhooks at this time.

I guess I’ll have to read the literature again, but I was thinking cnMaestroX was going to be licensed on a device-by-device basis, so what governs whether or not we can use the API?

cnMaestro X licenses are indeed purchased on a device-by-device basis, but it is the account itself that is upgraded. You need a license for each managed device (apart from free-tier devices) in order for the account to use cnMaestro X features.


Please refer to the below video to get familiar with the cnMaestro X subscription purchase and activation process:


Big issue on the cloud cnMaestro.
In the logs, on Roaming History, all entries are with the same data.
I don’t think is normal !?!?!

Hi Pshemo,

We are aware of this issue and have developed a fix that will be included in the next patch release, version 3.0.3.

1 Like