cnMaestro 3.1.1 (Cloud)


This document highlights new features and significant updates in cnMaestro Cloud.

Important: Web Browser
Restart your browser (or clear the browser cache with a hard reload) if you are having UI problems with the 3.1.1 version.

Improved Application Visibility at the Network Edge X3

cnMaestro X provides Wi-Fi application visibility for over 2,400 applications. This release adds application history support for System and Sites (in addition to the existing Client Devices). To review application usage history, navigate to Monitor and Manage and select a System or Site node. The Application History tab displays top applications, top clients, total bytes consumed, and percentage of traffic generated by the application.

Expanded Wi-Fi 6/6E Portfolio

Full management for XE3-4, XE5-8, and XV2-2T1 access points is now available in cnMaestro. The XE5-8 is an industry-exclusive 5-radio high density AP supporting 15.6 Gbps total Wi-Fi bandwidth. The two XE-series access points support Wi-Fi 6E with software-defined radios (SDRs) selectable between 5 GHz and 6 GHz operation. The XV2-2T1 is an ultra-long-range outdoor Wi-Fi 6 AP with integrated 120-degree sectored antennas capable of client connections over 1 km in distance. To configure the SDRs on the XE-series APs, navigate to the AP Group > Radio page. In the Software Defined Radios section, you can configure software definable radios for the XV3-8, XE3-4, and XE5-8 access points.

Wi-Fi 6E Migration Assistant

As the number of Wi-Fi 6E clients increases, the new Wi-Fi 6E Migration Assistant can help manage this transition using a set of helpful widgets:

  1. The Connected 6E Client Capability widget tracks clients and recommends when it may be appropriate to switch SDR radios from 5 GHz to 6 GHz.

  2. The Client Capability History widget tracks client capabilities over time to visualize 6E client trends. (This assists with the decision to change 5 GHz radios to 6 GHz radios.)

To view these widgets, navigate to Monitor and Manage and select a Site. These two widgets indicate the device capabilities of the connected clients. When the 6E Clients on the non-6 GHz Radios indicator starts to climb, it is time to consider changing SDR radios to 6 GHz. Click the Learn more link for more information about the details of your client device capabilities.

Rogue Device Information and History X3

cnMaestro X collects information about rogue devices detected around your network. You can view information such as SSID, Channel, RSSI, and nearest AP. To view Rogue AP activity, navigate to Manage and Monitor > Site > WIDS . The WIDS page displays Rogue AP history and detailed information about detected devices. This feature was available in cnMaestro X 3.1.0 On-Premises, and it is now available in cnMaestro X 3.1.1 Cloud.

View Client Activity History Up to 7 Days X3

The Clients page displays tabular device information, network details, Wi-Fi capabilities, band, SSID, RSSI, SNR and more. You can now access client history over 24 hours or 7 days. To view the client list, navigate to Monitor and Manage > System > Clients. On the dropdown next to Clients, select the period to review: Current, 24 Hours, or 7 Days. This will display the state of all clients that accessed the system within the interval. This feature was available in cnMaestro X 3.1.0 On-Premises, and it is now available in cnMaestro X 3.1.1 Cloud.

Increased ePSK Scale X3

ePSK provides individualized, secure credentials that simplify onboarding and enable efficient roaming on a single SSID across an entire Wi-Fi network. With this release, Cambium has doubled ePSK scalability from 1,000 to 2,000 per AP and increased the total ePSK entries per account to 50,000.

To create ePSKs, navigate to Configuration Settings > AP Groups and WLANs > WLANs . Open an existing WLAN and go to the ePSK page. Click the Add New button. You can create ePSKs individually or in bulk, or you can import your own custom list of ePSK users. You also have the option of using a RADIUS server for authentication to scale even further.

Bulk Configuration of Access Points X3

cnMaestro X supports bulk AP configuration by importing a .csv file with Location, Management VLAN, Radios, and WLANs settings. To configure APs in bulk, navigate to Monitor and Manage > Site > APs > AP Configuration . Select the device type and the devices, then click the Configure button. Choose the AP Group from the dropdown window and expand Device Overrides. Finally, select the APs and click the Import button to import your custom settings.

Multi-Floor Sites X3

cnMaestro has updated Wi-Fi Site Floor Plans to support multiple floors for cnMaestro X customers.


Customers can add additional floor metadata (in preparation for later Wi-Fi Heat Map support).


Converged Management for Xirrus Wi-Fi X3

cnMaestro X manages Xirrus Wi-Fi APs together with Cambium’s wireless fabric in a single console. This provides investment protection for existing Xirrus customers migrating to Cambium’s converged Wi-Fi 6/6E solutions. Xirrus AP models supported in cnMaestro X include:

  • All XD-series
  • All XH-series
  • All XA-series
  • XR-series modular 11ac Wave 1/Wave 2
  • XR-620 and XR-630

Important: Software Requirements
Operation of Xirrus APs in cnMaestro X 3.1.1 requires AOS version 8.7 on the APs. If migrating Xirrus APs from XMS-Enterprise to cnMaestro X, XMS-Enterprise version 8.4 provides automated functionality to support configuration export. Both the AOS 8.7 and XMS-Enterprise 8.4 releases are planned for June 2022.

Improved 60 GHz cnWave Visibility X3

cnMaestro X improves monitoring and troubleshooting of links and activity on cnWave 60 GHz networks. You can easily visualize a network’s RF channel plan (color-coded) and Golay code assignments, plus real-time uplink and downlink RF link performance KPIs including RSSI, MCS, SNR, and more.

To view the cnWave 60 GHz network, Navigate to the Map side tab and select the E2E Network to review. In the configuration panel on the right side of the page, access the Device Overlay view, where you can enable visualization of the status of devices, the channel and polarity of the radios, and the sector of the radio. You can also access a Link Overlay view, which presents the Status, Golay, SNR, MCS, RSSI, and Link Fade margin on the different links in your 60 GHz network.

60 GHz cnWave Improvements

Below are the improvements in 60 GHz cnWave

  • Network Level Auto-Refresh : The Auto Refresh option refreshes statistics automatically for Links and Nodes for 5 minutes. By default, the Refresh Interval is 10 seconds. This option is available on the E2E Network > Links > Statistics and E2E Network > Statistics pages.


  • Onboard E2E to External E2E Migration : You can migrate an Onboard E2E Network to External E2E network by following simple steps.


  • Link Events Redesign and Improvements : Link Events provide the details of hourly link availability timeline, percentage availability, and distance.


  • Additional Performance Statistics : Below are the new graphs added:

    • Sector and Ethernet Throughput (Rx/Tx)


  • Scan Beams (Rx/Tx)

  • Management Link Up and Delta (Link Up/Link Available)


  • Link Fade Margin (for devices running 1.2.2)

BER Information for PMP SMs

The BER (Bit Error Rate) information is added to SM dashboard and performance graphs.



Additional Statistics for PMP 450m

The below statistics are added for PMP 450m:

  • SU-MIMO Frame Utilization
  • MU-MIMO Frame Utilization
  • Multiplex Gain


ePMP Installation Summary X3

The PMP Installation Summary has been extended to ePMP. In combination with cnArcher, cnMaestro X simplifies the ePMP SM installation process by automatically pushing information from cnArcher to cnMaestro X when the ePMP SM is deployed.

Map Enhancements X3

The Terrain view support is added to the map options.


Map View for cnMatrix, Sites and Wi-Fi APs

The Map View with basic features is added to cnMatrix, Sites, and Wi-Fi APs.


Firmware Update Alarm

On November 1, 2022, Cambium will update the certificate for to use a new Certificate Authority. All cnMaestro managed devices without the updated Root CA certificate will fail to connect to the cnMaestro Cloud service. See Field Service Bulletin FSB 9083 for more details.

cnMaestro has added an alarm: “Device Firmware does not meet the minimum version required to maintain future connectivity to cnMaestro”, to prompt users to update the software of noncompliant devices. The minimum versions to maintain connectivity after November 2022 are listed below:

Family Model Version
cnMatrix cnMatrix EX2K 2.1-r5
cnPilot cnPilot R200, R200P 4.6-R16
cnPilot R201, R201P 4.6-R16
cnPilot R190V, R190W 4.6-R16
cnPilot e400/e500
cnPilot e410/e430w/e600
cnPilot R195P 4.7-R6
cnPilot R195W 4.6-R16
cnPilot e501S/e502S
cnPilot e700
cnPilot e425/e505 4.1-r3
cnPilot e510
cnRanger Sierra 800 1.1-r3
Tyndall 101 1.1-r3
cnReach N500 5.2.18h
Enterprise Wi-Fi 6 XV3-8 6.1-r5
XV2-2 6.1-r5
ePMP 1000 Hotspot ePMP 1000 Hotspot None (EOL)
ePMP ePMP 1000, Force 180/200 4.5.0
ePMP 2000 4.5.0
ePMP Elevate XM/XW 4.5.0
ePMP Force 190 4.5.0
ePMP Force 300 4.5.0
ePMP PTP 550 4.5.0
ePMP MP 3000 4.5.0
ePMP PTP 550 E 4.5.0
ePMP Elevate SXGLITE5 4.5.0
ePMP Elevate LHG5 4.5.0
ePMP 3000 4.5.0
PMP PMP 450i, PMP 450, PMP 450m, PMP 430 SM 20.0 Beta-6
PTP 450, PTP 450i, PMP 450 Retro 20.0 Beta-6
MicroPoP Omni/Sector 20.0 Beta-6
PTP PTP 650 650-01-50
PTP 670 (650 Emulation) 670-01-50, 670-03-12
PTP 670, PTP 700 700-03-11

API Updates X3

The Swagger documentation for the updated RESTful API is available at:

New APIs

Path Details
POST /api/v2/devices/{mac}/cli Initiate device CLI command execution. This API is supported only on Enterprise Wi-Fi and cnMatrix devices.
GET /api/v2/devices/{mac}/cli Returns result of device CLI command output. This API is supported only on Enterprise Wi-Fi and cnMatrix devices.

Supported Cambium Products

cnMaestro supports the following Cambium Networks products. The software versions are the minimum required to use cnMaestro (not the recommended versions).

Family Model Version
60 GHz cnWave V1000 1.0
V2000 1.2.2
V3000 1.0
V5000 1.0
cnMatrix EX2K/EX1K 2.0.4-r1
cnPilot Home cnPilot R200, R200P 4.4.2-R2
cnPilot R201, R201P 4.4.2-R2
cnPilot R190V, R190W 4.4.2-R2
cnPilot R195P 4.5.2
cnPilot R195W 4.7
cnRanger Sierra 800
Tyndall 101
Tyndall 201
cnReach N500 5.2.17e
cnVision Hub 360r, FLEXr 4.6
Client Micro, Mini, Maxr 4.6
Enterprise Wi-Fi cnPilot e400/e500 2.5.2-r3
cnPilot e410/e430w/e600 3.5.2-R4
cnPilot e501S/e502S 3.2.1-r6
cnPilot e700 3.8
cnPilot e425/e505 4.0-r17
cnPilot e510 3.11.4-r9
XV3-8 6.0
XV2-2T0 6.1
XV2-2T1 6.4.1-r15
XV2-21X 6.5-r15
XV2-22H 6.5-r15
XV2-23T 6.5-r15
XE3-4 6.4
XE5-8 6.4.1-r15
ePMP 1000 Hotspot ePMP 1000 Hotspot 2.5.2-r3
ePMP ePMP 1000, Force 180/200 2.6.2
ePMP 2000 3.0.1
ePMP Elevate XM/XW 3.2
ePMP Force 190 3.5
ePMP Force 300 4.1
ePMP PTP 550 4.1.1
ePMP Force 130 5 GHz 4.3.2
ePMP 3000L 4.3.2
ePMP Force 130 2.4 GHz 4.4
ePMP Force 300-19, 19R, 13 4.4
ePMP 3000 4.4.1
ePMP PTP 550 E 4.4.2
ePMP MP 3000 4.5
ePMP Force 300-13L 4.5.2
ePMP Force 300-13LC, 22L, 25L 4.6
ePMP Force 200L 4.7.0
ePMP 4000, Force 400 GPS, 400 CSM, 425 5.1.0
PMP PMP 450i, PMP 450, PMP 450m, PMP 430 SM 15.0.1
PTP 450, and PTP 450i 15.0.1
MicroPoP Omni/Sector 16.2.1
PTP PTP 650 01-47
PTP 670 (650 Emulation) 01-47
PTP 670, PTP 700 02-67
Xirrus (Enterprise Wi-Fi) XA4-240 8.7.0
XD2-230 8.7.0
XD2-240 8.7.0
XD4-130 8.7.0
XH2-120 8.7.0
XR-630 8.7.0
XR-620 8.7.0
XR-2436 8.7.0
XR-2426 8.7.0
XR-4436 8.7.0
XR-4426 8.7.0
XR-2226 8.7.0
XR-2236 8.7.0

Supported Browsers

cnMaestro supports the following browsers:

Platform Browser Version
Linux Firefox 45 and above
Chrome 49 and above
MacOS Safari 9 and above
MS Windows Internet Explorer Deprecated
Microsoft Edge 44.17763.1.0
Firefox 45 and above
Chrome 49 and above

Significant Fixes

The following issues have been fixed:


Id Details
CNSSNG-25728 Reporting layer crashed due to ClickHouse Query Failure (mesh client).
CNSSNG-26127 Link direction legends show reversed values in performance graphs.
CNSSNG-26183 System level maps loading issue.
CNSSNG-26243 Links statistics missing in Maps when more than 100 links are present in E2E topology.
CNSSNG-26286 Incorrect Link Availability seen for last 24 hours and last 2 days.
CNSSNG-26312 Failed to fetch nodes configuration for V2000 if layer 2 bridge is enabled.
CNSSNG-26343 Cannot remove AP Group mapping from device using NBI API.
CNSSNG-26720 Channel details displayed as ‘0’ and sector stats are missing for V2000 device.
CNSSNG-26751 In reports, Aux status and Main status show incorrect details for V2000.
CNSSNG-26760 In Cloud, V2000 device model displayed as V1000 in Top Nodes list.
CNSSNG-26805 For V2000 PoP node, OOB interface is not available in cnMaestro.
CNSSNG-26940 Switchport page is not loading properly.
CNSSNG-27079 In Network configuration for V2000, ‘enable AUX port power’ and ‘Relay Port Interface’ options are missing.
CNSSNG-27117 Top busy point-to-multipoint APs broken at Network level.
CNSSNG-27129 In reports, latitude-longitude values are interchanged.


Id Details
CNSSNG-19292 WLAN import fails for MSP account scope if ePSK entries are present.
CNSSNG-19975 Special characters like '"/?=-+ are allowed in ePSK CSV import.
CNSSNG-21968 “WIFI_CLIENT_AUTH_SUCCESS” Event is not listed under Name filters under events.
CNSSNG-22693 Critical alert notifications for SM grant suspension do not have SM details.
CNSSNG-22765 CBRS deregistration has system collection reference; validation mapper need correction.
CNSSNG-22886 Issue onboarding instance into Cloud Anchor account.
CNSSNG-23107 ePMP AP Frame Utilization is not getting updated.
CNSSNG-23342 The client’s section under reports disappears if you navigate to a 60 GHz network.
CNSSNG-23538 Cancel button is not working while creating a Site.
CNSSNG-23962 MSP User redirection is not happening properly from MSP account level.
CNSSNG-24052 Links Import button is grayed out when trying to upload a file which changed the format from numbers to CSV.
CNSSNG-24613 Y-axis of Tx Packet Error Ratio shows same value in performance graph.
CNSSNG-24933 ePMP CPU Performance Graph plotting should be in sync with device values.

Known Issues

The following issues exist:

Id Issue Details
CNREACH-139 Radio Software Update is not happening for EP-based devices.
CNSSNG-4083 DHCP errors after cnMaestro reboot When cnMaestro On-Premises is rebooted, after Data Import, sometimes DHCP and Disk Errors are encountered.
Workaround: Explicitly run the dhclient command from the Command Line (accessed through the CLI) after reboot to assign the IP address.
CNSSNG-5365 RADIUS Proxy drops packets after retrying exhausted After RADIUS Proxy Retries are exhausted in cnMaestro On-Premises, all subsequent RADIUS packets are dropped.
Workaround: Reboot cnMaestro server.
CNSSNG-9631 High Availability: Network cable unplug: Device count is taken from Primary and jobs/users list is taken from Secondary.
CNSSNG-9632 High Availability: Network cable unplug: Devices onboarded during network disconnect need to be reapproved by user.
CNSSNG-10145 Certificate exports are not part of Data Backup and Restore. Certificates must be exported manually.
CNSSNG-10187 During Migration, moving, or deleting a device from the Managed Account will mark all events and alarms as undefined once Migration has completed.
CNSSNG-11299 AP Regulatory Channel list support check needed for checking valid channels.
CNSSNG-11389 Microsoft Edge Browser does not support in system OVA file upgrade. Workaround : Use the Google Chrome browser
CNSSNG-11987 Failed - Bad Certificate errors while downloading the generated report after a period of report generation.
CNSSNG-12812 cnPilot R-series dual radio devices (r-201P, r-195W) AP Group country code/SSID configured from overrides getting applied only to 2.4 GHz radio.
CNSSNG-12888 Connected Clients count in the WLAN page is not properly shown when SSID is overridden for the WLAN at Device level.
CNSSNG-13054 Mismatch in Clients count for cnPilot E-series device at WLAN and AP Group configuration level.
CNSSNG-14030 CBRS race condition: SM “stuck” in cnMaestro during reparenting if import and start occurs as SMs arrive in onboarding queue Workaround : To avoid this issue, follow the suggested SM reparenting procedures listed in the latest version of Cambium CBRS standalone procedures document.
CNSSNG-14518 Device Type selection needs to be provided at Site and AP Group for Report generation.
CNSSNG-14932 PMP/ePMP Configuration Backup: LAST BACKUP date and time is not updating if device under an MSP account.
CNSSNG-15432 Deleting a device in Base Infrastructure and claiming it immediately to another Managed Account returns Device Registration Failed message.
CNSSNG-15595 cnMatrix Hostname fall backs to old Hostname if the template is pushed for the first time (if a Switch Group already exists).
CNSSNG-15656 Duplicate entries observed in 802.11ax Clients Report.
CNSSNG-15838 Issues related to Monetization Subscription Events.
CNSSNG-16019 Subscriptions are not listed in the correct order.
CNSSNG-16197 CBSDID search will not work when device was synced from tool without obtaining grant first. Workaround : Perform CBSDID search from domain proxy view on Cloud to obtain mac address, then perform MAC address search on tool to find the device.
CNSSNG-17011 After the migration completed for PPPoE with server update, devices still show in sync. Workaround : User must manually apply the AP Group again on devices with minor changes to the AP Group.
CNSSNG-18710 Tier issues related to 450i, 450i AP, and 450i SM.
CNSSNG-18856 cnVision Client is not shown under hub. Workaround : Reboot the client
CNSSNG-18913 On resizing, the graph/widgets are not properly rendering.
CNSSNG-18923 After migration Reports Job page is empty due to cached data. Workaround : Clear Cache and Cookies after migration.
CNSSNG-18927 Configuration push from Onboarding page is getting device timeout error in ePMP 1000 Hotspot device.
CNSSNG-18936 Graph plotting is empty if the page is zoomed out/in.
CNSSNG-19264 Unmanaged expired device approve button is not disabled.
CNSSNG-19273 Expired Wi-Fi devices are not handled for AP Group dashboards and tree level.
CNSSNG-19274 Expired devices count should not be added to connection health graph.
CNSSNG-19275 Issues related to Offline alarm of expired devices.
CNSSNG-20508 Last Super Administrator deletion should be shown proper error message.
CNSSNG-20605 User-Defined Overrides (Advanced) should be handled from Switch Groups > Switches > Actions > Configuration tab.
CNSSNG-20745 AP Count is -1 in Anchor when deregistering the device from Anchor.
CNSSNG-20820 After server upgrade, device throws error [Invalid CBSD ID and Grant ID], even the Domain Proxy shows the device is registered.
CNSSNG-21068 Not able to deregister or delete the SM when PMAC mismatched (SM reported different PMAC) Workaround: Reinitialize the SM from inside the sector of the AP, not by directly searching for the SM in the tool; then deregister and delete the device.
CNSSNG-21264 Auto refresh is not working when Site/Tower/Device details are updated in Network level map.
CNSSNG-21271 Map: SM status is missing in AP details.
CNSSNG-21345 RF Statistics related information should not be available in reports for XV type device.
CNSSNG-21396 Issues related to cnMatrix onboarding overrides.
CNSSNG-21443 System generated critical alarms are not counted for Aggregation.
CNSSNG-21703 SM icon is missing in Network-level Maps.
CNSSNG-22089 New Changes in Clients report in 3.1.0.
CNSSNG-23732 Min Data Rate and Multicast Data Rate configuration push always sets default for both bands.
CNSSNG-24487 AP Group Migration issues from 3.1.0 to 3.1.1 Workaround: clear cache after upgrade to 3.1.1 from 3.1.0 for the overrides to reflect properly
CNSSNG-24529 Multi-floor issue with Firefox browser.
CNSSNG-24649 Others filter is not working for old events.
CNSSNG-24750 Node Performance graphs are plotting 5 minutes delay.
CNSSNG-24823 Device overrides and config apply will not work after Migration from 3.1.0 to 3.1.1 due to cache.
CNSSNG-24826 Site Floorplan: In Edit mode, able to drag devices outside the boundary without an error.
CNSSNG-25071 If ePSK entries exist under an MSP WLAN, then upon disabling MSP in the account, the MSP WLAN ePSK count persists.
CNSSNG-25150 AOS device Configuration Job times out if Device is in DHCP.
CNSSNG-25238 AOS device WebSocket does not disconnect for an X account downgraded to Pure ESS after Retention expired.
CNSSNG-25264 Bulk edit tab at radios is removed/hidden in 3.1.1 release.
CNSSNG-25587 cnVision Hub Retransmission UL values not shown in performance graphs.

Where to Get Help

There are several places to get help with cnMaestro.

Cambium Community : The cnMaestro Forum provides the best place to ask questions and get up-to-date information.

On-Premises Quick Start Guide : This guide walks you through the initial management process and allows you to get onboard quickly. It is embedded into the cnMaestro image and can be accessed on the Home Page of the UI. It can also be downloaded in PDF format from the Cambium Support website.

Cambium Support : The Cambium Support team is available 24x7 to answer questions and resolve issues.


A post was split to a new topic: Connection Health graph bouncing up and down