This document highlights new features and significant updates in cnMaestro On-Premises.
cnMaestro 3.0.0 On-Premises is distributed as an OVA file, which can be installed as a new Virtual Machine or used to update an existing installation running cnMaestro 2.4.0/2.4.1/2.5.0.
Important: Update Precautions!
This update has significant database changes that require data migration. This process is done in the background, so regular network management operations are not impacted. The migration duration depends on the total number of devices, and it may take a couple of hours. We recommend limiting UI access during this period, to keep the load down. Devices will otherwise reconnect as normal.
Important: Update Precautions for CBRS Customers!
If you are using CBRS with cnMaestro acting as an HTTP Proxy, we strongly recommend configuring an external HTTP Proxy before updating to 3.0.0.
cnMaestro 3.0.0 supports two variants enabled in Cloud but not yet enforced in On-Premises:
This unlicensed, free version of cnMaestro delivers the same experience as the previous cnMaestro, but without the Pro features.
This paid subscription offers advanced cnMaestro network management capabilities and Cambium Care Pro, which provides 24x7 technical support, accelerated access to L2 engineers, and regular software updates for advanced features.
All features labeled Pro () in previous releases have been relabeled to X ().
|1||Administrator User Limit||Support for up to 100 cnMaestro administrators.|
|2||Audit Logs||Log user management activity.|
|3||Auto Provisioning||Automatically configure devices based upon its source subnet.|
|4||Concurrent Device Jobs||Parallel execution of software, configuration, and action jobs.|
|5||Configuration Lock||Reapply Wi-Fi AP/cnMatrix device configuration if changed outside of cnMaestro.|
|6||Data Reports||Schedule recurring CSV data report jobs.|
|7||ePSK Limit||ePSK limit is increased from 300 to 1024.|
|8||External Authentication and Authorization Servers||Authenticate and authorize cnMaestro administrators with Active Directory, LDAP, RADIUS and TACACS+ servers.|
|9||Guest Access Portal (Limits)||Support 500 Guest Access Portals, 10,000 sessions, and 1 year of client login history.|
|10||Guest Access Portal (Paid)||Provide guest access through a paid service.|
|11||Long Term Historical Data||Enhanced Performance Graphs and Reports:
1 Year Data: cnMatrix and Wi-Fi APs (such as cnPilot Home, cnPilot E-Series, XV-Series)
1 Year Data: IIoT devices (such as cnReach and Machfu).
2 Years Data: Fixed Wireless Broadband (such as ePMP, PMP, PTP and cnRanger).
|12||Managed Service Provider (MSP)||Allow customers to partition their account into separate Managed Accounts, each with its own independent administration and configuration.|
|13||Mesh Peers||Display the details of mesh peers (clients).|
|14||RESTful APIs||Allow to read data and perform operations programmatically using client applications.|
|15||Session Management||Track current cnMaestro user sessions and allow forced logout of current user sessions.|
|16||Software Defined Radios (SDR) support for XV3-8 Wi-Fi APs||Allow splitting 8x8 5 GHz radio into two 4x4 5 GHz radios|
|17||Syslog Server||Add Syslog servers to forward events and audit logs.|
|18||Webhooks||Configure Webhooks endpoints to forward alarms.|
|19||WiFiPerf Server||Allow configuring WiFiPerf daemon at a site level to perform wireless performance test between Wi-Fi AP/Client and this daemon.|
|20||Wireless Intrusion Detection System (WIDS) for Enterprise Wi-Fi APs||Detect rogue APs in the network|
Please refer to the following videos for more details about cnMaestro X:
If you are using cnMaestro X features, it is strongly recommended to create a Cloud Anchor account and connect On-Premises instances to it.
Cambium is releasing a new type of Cloud Account called an Anchor Account. The Anchor Account exists alongside current NMS Accounts (which host cnMaestro Cloud). They are attached to cnMaestro On-Premises installations and have their own Cambium ID. In the future, all On-Premises deployments must be mapped to an Anchor Account; however, in cnMaestro 3.0.0, their use is optional. The User Guide provides details on how to create an Anchor Account and associate it to one-or-more cnMaestro On-Premises deployments.
The Anchor account collects statistics and automatically pushes announcements of new device firmware and cnMaestro software images. cnMaestro On-Premises reports the following details to the Anchor account:
|System||Uptime, Processor, RAM, Disk, Virtualization Vendor|
|Application||Software Version, User Types and Count, Account View, Country|
|Features||MSP, CBRS, Wi-Fi Performance, Auto-Provisioning, SNMP, etc.|
In the future, Cloud connectivity will be used to manage cnMaestro X subscriptions for on-premises instances. It will also simplify the CBRS provisioning and billing by connecting multiple on-premises instances to a single cloud account.
The graphic below displays the Cloud Connectivity page in cnMaestro On-Premises.
The Cloud Anchor Account requires an Onboarding Key to establish the initial connection.
Each Cloud Anchor account supports many on-premises installations.
cnMaestro now integrates 60 GHz cnWave devices. The following features are available in this first production release:
|Configuration||Configuration at the Network, Site, and Device levels|
|Dashboard||Network, Site, and Device level Dashboards|
|Maps||Sectors and Prefix Zones Visualization|
|Notifications||E2E Network and Device Notifications|
|Onboarding||External and Onboard E2E Controller using Cambium ID|
|Operations||E2E Controller : SSH, Restart, Backup/Restore, Software Update, Technical Support Download|
|Device||Bulk Reboot, Bulk Import, Technical Support Download|
|Performance||Rich Performance Graphs|
|Reports||System, Network, and Site Reports for DN and CN devices|
|Software Update||Bulk software update|
|Statistics||Device and Link Statistics with Link Availability and BGP|
|Tools||E2E Events, Operations, Diagnostics, and Service Monitor|
The cnWave Terragraph infrastructure supports E2E (End-to-End) Controllers, which exist as External Applications (downloaded from Cambium and installed in a VMware Virtual Machine) or integrated into cnWave Devices (termed as Onboard Controller).
The External E2E Controller discover cnMaestro after it is configured. The graphic below displays the Network E2E Network Dashboard in cnMaestro.
The Onboard E2E controller is hosted on a 60 GHz cnWave device running version 1.0.1-beta5 or later. The E2E Network Dashboard for an Onboard Controller is presented below.
The section highlights the main features of the 60 GHz cnWave integration.
All device performance charts are enhanced for long term historical data support. Along with the existing 5-minute and 1-hour periods, a new 1-day period is added. The 1-day period will only be available in cnMaestro X accounts.
Now performance charts support long term historical data as follows:
1-Year Historical Data : cnMatrix and Wi-Fi APs (cnPilot Home, cnPilot E-Series, XV-Series).
1-Year Historical Data : IIoT devices (cnReach and Machfu).
2-Years Historical Data : Fixed Wireless Broadband (ePMP, cnVision , PMP, PTP, 60 GHz cnWave and cnRanger).
Support for concurrent device jobs is added: Software Update, Configuration Update, and Action Jobs can be executed concurrently on a distinct set of devices.
SDR allows splitting 8x8 5 GHz radio into two 4x4 5 GHz radios. Once enabled, the second 5 GHz radio gets split into two 5 GHz radios: Radio2 and Radio3. Both radios can be configured independently.
Select a time to apply device configuration updates.
User can now configure the NTP server settings from the cnMaestro GUI by navigating to Administration > Server > Settings and the Configure NTP Server section. cnMaestro uses Google and NIST Public NTP by default. To use different NTP servers, configure IPv4/IPv6 address or hostname.
The Home page is updated to provide a fresh look and overall summary of the deployment.
The cnPilot E-Series and XV-Series APs are combined into one category called Enterprise Wi-Fi. The end-of-life (EoL) ePMP 1000 Hotspot is also included under Enterprise Wi-Fi AP Groups and WLANs.
The updates are also present in AP Group creation.
Most icons are updated, and Main Menu text is renamed as shown below:
Important: API Version Update to v2
The cnMaestro API version is now “v2”. The “v1” version will remain through 3.1.x and will sunset in 3.2.0, where it will no longer be supported. Most API calls are unchanged in v2, but there are revisions in few areas – especially devices and statistics. See the User Guide and online Swagger documentation for specific changes.
Cambium recommends updating to v2 as soon as possible.
cnMaestro supports the following Cambium Networks products. The software versions are the minimum required to use cnMaestro (not the recommended versions).
|cnPilot Home||cnPilot R200, R200P||4.2.3-R4|
|cnPilot R201, R201P||4.2.3-R4|
|cnPilot R190V, R190W||4.3.2-R4|
|Enterprise Wi-Fi||cnPilot e400/e500||2.5.2-r3|
|ePMP 1000 Hotspot||ePMP 1000 Hotspot||2.5.2-r3|
|ePMP||ePMP 1000, Force 180/200||2.6.2|
|ePMP Elevate XM/XW||3.2|
|ePMP Force 190||3.5|
|ePMP Force 300||4.1|
|ePMP PTP 550||4.1.1|
|ePMP Force 130 5 GHz||4.3.2|
|ePMP Elevate SXGLITE5, LHG5||184.108.40.206|
|ePMP Force 130 2.4 GHz||4.4|
|ePMP Force 300-19, 19R, 13||4.4|
|ePMP PTP 550 E||4.4.2|
|ePMP MP 3000||4.5|
|ePMP Force 300-13L||4.5.2|
|ePMP Force 300-13LC, 22L, 25L||4.6|
|ePMP 4000, Force 400 GPS, 400 CSM, 425||5.1.0|
|PMP||PMP 450i, PMP 450, PMP 450m, PMP 430 SM||15.0.1|
|PTP 450, and PTP 450i||15.0.1|
|PTP 670 (650 Emulation)||01-47|
|PTP 670, PTP 700||02-67|
|cnVision||Hub 360r, FLEXr||4.6|
|Client Micro, Mini, Maxr||4.6|
|60 GHz cnWave||V5000||1.0, 1.0.1-beta5|
cnMaestro supports the following browsers:
|MS Windows||Internet Explorer||Deprecated|
|Firefox||45 and above|
|Chrome||49 and above|
|MacOS||Safari||9 and above|
|Chrome||49 and above|
The following issues have been fixed:
|AURA-470||Failure to load Success page after Quick Pay authentication.|
|CNSSNG-4906||Captive Portal Auto Login fails with latest Android devices.|
|CNSSNG-6293||Mesh Recovery WLAN Profile is not shown in On-Premises or Cloud.|
|CNSSNG-7328||Macros within replacement var default values not handled properly.|
|CNSSNG-8101||Link to device Web page using enabled protocol.|
|CNSSNG-8304||ePMP: “No GPS Sync” or “GPS Sync Down” alarm/event not raised in cnMaestro.|
|CNSSNG-10189||cnReach performance reports do not have throughput values for radios.|
|CNSSNG-12167||Wrong Passphrase is getting pushed to AP in WLAN Group.|
|CNSSNG-12455||MAC Address format should be unique in all configuration parameters.|
|CNSSNG-13171||Improvements to Spectrum Inquiry Response graph in Tools. This release now shows the height of each bar in the graph proportional to the EIRP (if that information is provided by the SAS vendor).|
|CNSSNG-13457||For cnPilot-R devices, if hostname has an embedded quotation mark, the name is truncated when pushed to devices.|
|CNSSNG-13598||EPSK keys are not available in exported WLAN JSON.|
|CNSSNG-14173||CBRS Management Tool should better display operational parameters in SAS responses. This includes a new column in the tool to show “SAS Recommended EIRP”; printing related text via hover over bubble; and the ability to request the SAS recommended EIRP by clicking on the START action button. See the CBRS Consolidated Procedures Guide for more information.|
|CNSSNG-14798||Option to set time zone from cnMaestro UI (On-Premises only).|
|CNSSNG-15160||Enable/disable SSH access from cnMaestro UI (On-Premises only).|
|CNSSNG-15250||Improvements to CBRS heartbeat interval and timeout handling.|
|CNSSNG-15251||Separate billing and technical contact information requested on CBRS Services Accounts page of cnMaestro, instead of a single set of contact information.|
|CNSSNG-15256||A Reimport option has been added to the CBRS Management Tool spreadsheet import function. If, for example, an operator made the same configuration mistake on every device in a sector, previous options were to edit every device one-at-a-time via pop-up GUI or delete everything and re-add with a new sheet. Now operators can use the Reimport function to change installation parameters or EIRP in any state, although a deregistration will be triggered. Changing BW or Center frequency is also supported via Reimport, but only if all devices in the sector are deregistered prior.|
|CNSSNG-15258||The CBRS Management Tool supports live status updates of the CBRS state of the radio. Prior to 2.4.1, the CBRS state of the device was frozen after the device flips to config_sync state. Now this field, as well as others, are updated from the device. See the cnMaestro Cloud User Guide for additional details on live status updates.
The CBRS Management Tool supports an Export function to recreate the spreadsheet based on current tool entries.
The CBRS management tool also supports ODS file format for import instead of just Excel. Note export to ODS format is not yet supported.
Editing EIRP for Config_synced devices is supported from cnMaestro, rather than just directly on the devices. See the CBRS Consolidated Procedures Guide for more info.
The CBRS Management Tool now allows editing parameters for devices in Not Synced config states other than deregistered/unregistered – i.e., one can edit parameters in an AUTH/Not synced state although a deregistration is forced by cnMaestro as part of the edit.
|CNSSNG-15259||cnMaestro Reports generate CBRS related data.|
|CNSSNG-15313||Dashboard Throughput Graph and Capacity Graph for PTP devices are not updating other than Chrome browser.|
|CNSSNG-15344||Enterprise View: The Bulk device deletion happens for all devices instead of devices under APs/Switches only.|
|CNSSNG-15410||SMs connected to ePMP 3000 are not shown under the AP in the cnMaestro tree.|
|CNSSNG-15525||With 2.4.1, removing devices from CBRS Management Tool no longer deletes them from cnMaestro inventory/onboarding queue. CBRS Tool replaces the old method of Deregister per device via checkbox with Delete and Deregister action buttons near the top of the tool. With this improvement, “Deregister All” and “Delete All” options are supported.|
|CNSSNG-15589||Slightly higher EIRP limits allowed with 2.4.1 for certain SAS vendor/model combinations as follows:
Federated Wireless SAS:
450 SM, old limit = 45 dBm, new limit = 46 dBm,
450 AP, old limit = 45 dBm, new limit = 46 dBm
450i AP old limit = 46, new limit = 47
450i old limit = 46, new limit = 47
Note : While 16.2.1 radio code supports operation with these higher limits if the Grant is obtained from the cnMaestro tool, 16.2.1 code does not support the radio requesting the higher values directly. Existing operators who deployed devices with these lower limits who want to bump up their power by 1 dB should see the CBRS Consolidated Procedures Guide version 1.3 for editing EIRP on a config_synced radio. Until newer radio software is available, an existing operator who wishes to obtain a grant with 1 dB higher power will have to deregister such device long enough to request a new grant from the tool, then sync this new grant to the device. This should be done in a maintenance window prior to a CPAS cycle.
|CNSSNG-15621||The mailing address is used as a login to enter MSP users should not be case sensitive.|
|CNSSNG-15724||Alarm CBRS_GRANT_SUSPEND is not clearing.|
|CNSSNG-15726||Invalid configuration generated when VLAN’s DHCP Relay Agent is cleared.|
|CNSSNG-15903||Mismatch in parameters in Performance Reports (Backhaul vs Enterprise Account types).|
|CNSSNG-16161||Hover over message for “Registered” field incorrect in Management Tool for 2.4.1 when device builds are less than 16.2.1.|
|CNSSNG-16250||Exported ePSK entries are not human-friendly.|
|CNSSNG-16300||Configuration auto-sync queue can be corrupted by unmapped device.|
|CNSSNG-16402||DFS Status field with HTML tag in cnMaestro UI.|
|CNSSNG-16471||“Error while replacing device variables in template”, if customer AP Group is pushed from onboarding page with Auto-Provisioning rule.|
|CNSSNG-16574||PTP 550 dashboard throughput graph is not populating.|
|CNSSNG-16858||cnPilot E-Series: PPPOE details are not saved with AP Group|
|CNSSNG-17355||Devices are showing outside Site even though Site inventory and Site shows the device belongs.|
|CNSSNG-17477||Network MAP should show other Towers as well from SM/AP level.|
|CNSSNG-19328||Russia country code prefix is not available for SMS authentication.|
|CNSSNG-19335||Config sync fails when WLAN is configured with WPA2+PSK security with specific passphrase.|
|CNSSNG-19642||Modulation graph for intermediate modulation does not show values in performance graphs.|
|CPY-15253||CommScope SAS is now supported in addition to Google and Federated Wireless. Although lab testing is complete, Cambium Networks has not finished customer beta testing with CommScope. Until that validation is complete, Cambium recommends customers wait for additional announcements from Cambium indicating it is ready for general use.|
The following issues exist:
|CNREACH-139||Radio Software Update is not happening for EP based devices.|
|CNSSNG-4083||DHCP errors after cnMaestro reboot.||When cnMaestro On-Premises is rebooted, after Data Import, sometimes DHCP and Disk Errors are encountered.
Workaround: Explicitly run the dhclient command from the Command Line (accessed through the CLI) after reboot to assign the IP address.
|CNSSNG-5365||RADIUS Proxy drops packets after retrying exhausted.||After RADIUS Proxy Retries are exhausted in cnMaestro On-Premises, all subsequent RADIUS packets are dropped.
Workaround: Reboot cnMaestro.
|CNSSNG-9631||High Availability: Network cable unplug: Device count is taken from Primary and jobs/users list is taken from Secondary.|
|CNSSNG-9632||High Availability: Network cable unplug: Devices onboarded during network disconnect need to be reapproved by user.|
|CNSSNG-10145||Certificate exports are not part of Data Backup and Restore||Certificates must be exported manually.|
|CNSSNG-10187||While Migration is happening, moving or deleting a device from the Managed Account will mark all the events and alarms as undefined once migration is completed.|
|CNSSNG-11299||AP Regulatory Channel list support check needed for checking valid channels.|
|CNSSNG-11389||Microsoft Edge Browser does not support in system OVA file upgrade.||Workaround : Use the Google Chrome browser|
|CNSSNG-11987||Failed - Bad Certificate’ errors while downloading the generated report after a period of report generation.|
|CNSSNG-12812||cnPilot R-series dual radio devices (r-201P, r-195W) AP Group country code/SSID configured from overrides getting applied only to 2.4 GHz radio.|
|CNSSNG-12888||Connected Clients count in the WLAN page is not properly shown when SSID is overridden for the WLAN at device level.|
|CNSSNG-13054||Mismatch in Clients count for E-series device at WLAN and AP Group configuration level.|
|CNSSNG-13144||CBRS Management tool status field is not updated in heartbeat state.||Workaround: Prior to syncing the configuration to the radios, any state change from the SAS does not automatically get updated on cnMaestro. A refresh on the Management tool page is necessary.|
|CNSSNG-14030||CBRS Race condition: SM “stuck” in cnMaestro during reparenting if import and start occurs as SMs arrive in onboarding queue||Workaround : To avoid this issue, follow the suggested SM reparenting procedures listed in the latest version of Cambium CBRS standalone procedures document.|
|CNSSNG-14518||Device Type selection needs to be provided at Site and AP Group for Report generation.|
|CNSSNG-15432||Deleting a device in Base Infrastructure and claiming it immediately to another Managed Account returns Device Registration Failed message.|
|CNSSNG-15553||Issue in pushing Template or Switch group with same name on cnMatrix device.|
|CNSSNG-15595||cnMatrix Hostname fall backs to old Hostname if the Template is pushed for the first time (if a Switch Group already exists)|
|CNSSNG-15656||Duplicate entries observed in 802.11ax Clients Report.|
|CNSSNG-15838||Issues related to Monetization Subscription Events.|
|CNSSNG-15932||Account switch to Enterprise View should not happen when the cnRanger device is onboarded||Workaround : Do not switch to Enterprise View|
|CNSSNG-16019||Subscriptions are not listed in the correct order.|
|CNSSNG-16059||Audit Logs should be enabled for Monetization-related audit actions|
|CNSSNG-16197||CBSDID search will not work when device was synced from tool without obtaining grant first.||Workaround : Perform CBSDID search from domain proxy view on cloud to obtain mac address, then perform MAC address search on tool to find the device.|
|CNSSNG-17011||After the migration completed for PPPoE with server update, devices still show in sync.||Workaround : User must manually apply the AP Group again on devices with minor changes to the AP Group.|
|CNSSNG-17721||Need to take care of NAS-ID configuration when migrating cnMaestro from 2.4.1 and below version to 2.4.2 and above.||Workaround : AP Groups having WLAN with custom NAS ID settings needs to be pushed again with minor changes to the AP Group. This is required only if the devices in the AP Group are running with 220.127.116.11 and 4.1 builds|
|CNSSNG-17942||Configured values are getting cleared because of auto refresh.|
|CNSSNG-18698||HTTP redirection is not working for the cnReach device from cnMaestro.|
|CNSSNG-18699||IPv4 address of cnPilot R is not reflecting in configuration page and while hovering device name in tree.|
|CNSSNG-18710||Tier issues related to 450i, 450i AP, and 450i SM.|
|CNSSNG-18913||On resizing, the graph/widgets are not proper rendering.|
|CNSSNG-18923||After migration Reports Job page is empty due to cached data.||Workaround : Clear Cache and Cookies after migration.|
|CNSSNG-18927||Configuration push from Onboarding page is getting device timeout error in ePMP 1000 Hotspot device.|
|CNSSNG-18936||Graph’s plotting is getting empty if the page is zoomed out/in.|
|CNSSNG-19115||If AP expires, SM reflects twice in the tree.|
|CNSSNG-19264||Unmanaged expired device Approve button is not disabled.|
|CNSSNG-19273||Expired Wi-Fi devices are not handled for AP Group dashboards and tree level.|
|CNSSNG-19274||Expired devices count should not be added to connection health graph.|
|CNSSNG-19275||Issues related to Offline alarm of expired devices.|
|CNSSNG-19511||Support for scheduled config jobs feature is missing at Switch Groups > Switches > Actions > Configuration tab.|
|CNSSNG-19649||cnRanger RRH and SM should not be permitted to change Managed Account|
|CNSSNG-19715||Unable to restore the E2E backup file and seeing error “Only.tar.gz files supported.” in Ubuntu.||Workaround: To avoid this issue, use Windows or MAC book|
|CNSSNG-19741||New announcement notifications are not at the top of the list.|
|CNSSNG-19863||Onboard E2E controller shows time drift after software upgrade.|
|CNSSNG-19885||Unable to upgrade E2E when previous E2E upgrade is struck.|
|CNSSNG-20068||If NTP is disabled and ESXi server time is wrong then NTP is enabled, generate backup is not getting proper time|
|CNSSNG-20188||Default NTP servers are not getting populated when we upgrade from 2.4.0 or 2.4.1 where NTP servers are not configured||Workaround: Disable and reenable the NTP server from cnMaestro GUI|
|CNSSNG-20069||NOC is getting disconnected and not re-connected when we update cloud server where anchor account is hosted|
|CNSSNG-20222||Issues related to cnMatrix template push when User-Defined Overrides (Advanced) are configured|
|FRIEZA-1509||Tx/Rx bytes in radio statistics are overflowing: show negative delta between 5 mins for v1000.|
|FRIEZA-1603||Unable to upgrade V3000 (DN/CN) image in PTP setup.|
|FRIEZA-1774||Software update does not work for CN/DN and get stuck with 0% downloading on Mesh setup|
|FRIEZA-1927||Onboard controller cnAgent is not restarting on backup restore|
There are several places to get help with cnMaestro:
Cambium Community : The cnMaestro Forum provides the best place to ask questions and get up-to-date information.
On-Premises Quick Start Guide : This guide walks you through the initial management process and allows you to get onboarded quickly. It is embedded into the cnMaestro image and can be accessed on the Home Page of the UI. It can also be downloaded in PDF format from the Cambium Support website.
Cambium Support : The Cambium Support team is available 24x7 to answer questions and resolve issues.