cnMaestro 4.1.0 (On-Premises) Release Notes


This document highlights new features and significant updates in cnMaestro On-Premises.

Important: OVA Upgrade
cnMaestro 4.1.0 On-Premises is distributed as an OVA file, which can be installed as a new Virtual Machine or used to update an existing installation running cnMaestro 3.2.0/4.0.1.

Important: System Backup
It is strongly recommended to take a System Backup prior to upgrading to 4.1.0. This can be done in the UI at Administration > Server > Operations. This is required in case you ever want to downgrade to the previous version.

Site Level Assists X

Assists are now available at the Site level. This feature scans supported device configuration across a Site and generates an Assists Score, displayed as a percentage of successful evaluations. This provides valuable insights, recommendations, and troubleshooting assistance. With Assists, network administrators gain enhanced visibility, proactive recommendations, and improved efficiency in managing their networks.


ePSK Lifecycle Management X

ePSK (Enhanced Pre-Shared Key) Life Cycle Management offers a range of benefits for managed Wi-Fi services. ePSK ensures a secure and hassle-free experience for residents, eliminating the need to manage numerous PSKs (Pre-Shared Keys) manually. This new feature includes automatic expiry of ePSKs; seamless renewal of keys; and inline modification of ePSKs – all aimed at simplifying the management process. For added convenience, ePSKs deactivate automatically on specified future dates, such as the resident’s move-out date. Network managers can easily adjust these termination dates in the event of changes, ensuring a smooth and efficient Wi-Fi service for all residents.


Personal Wi-Fi X

Personal Wi-Fi addresses requirements in Multi-Dwelling Units (MDUs) and similar hospitality-related networks. Each user on the network effectively operates on their own secure Wi-Fi network as if they had a personal Wi-Fi router. Users can seamlessly roam across the property with ubiquitous connectivity while maintaining personal security via a unique ePSK and VLAN. This functionality is provided with a unique SSID for the user in their personal space (apartment, dormitory room, etc.) but with a common property SSID in public areas. The same personal ePSK credentials are used across both SSIDs, and roaming is seamless for the user. For property managers, this personalized approach ensures tenant privacy and security while minimizing administration overhead.


Graphical Reports X

Graphical Reports represent data visually to improve consumption and summarization. They can be generated and customized with logo, brand image, and theme by creating/editing Graphical Report Templates with selected widgets. These reports can be generated by clicking Add New Graphical Report at System and Site levels under Reports > Scheduled. Each report can be downloaded in PDF format and contains graphs, charts, and data tables.

To create Graphical Report Template, navigate to Configuration > Graphical Report Template and click on Add New button.


Add New Graphical Report Template window pops up with Name, Title, Scope, logo, brand image, and themes.


New widgets can be mapped to a System or Site scope.


To generate Graphical Reports, navigate to System/Site > Reports > Scheduled and click Add New Graphical Report. Enter the details and select the template.




Once the report is generated, download it in PDF format from the Completed tab.


Note : There is a limit of 50 Scheduled Reports at the cnMaestro Base Infrastructure level, and 15 Scheduled Reports for each Managed Account.

Wi-Fi Events

The Wi-Fi Events tab is introduced into the Notifications tab and helps administrators view wireless client events over the last 24 hours.


60 GHz cnWave Enhancements

Node and Link Throughput Tests in Map X

Node Throughput test is added in Map, which runs between the Node and PoP. An option is provided to test hop-by-hop and non-hop-by-hop throughput tests. Select CN/DN node on the Map and then select Node Throughput Test under the node menu options to run the throughput test.



A link Throughput test is added in Map, which runs between link endpoints. Select a link on the Map and then select Link Throughput Test under the link menu options to run the throughput test.



Current Best Route Scan X

The current best route of the selected node (CN/DN) will be plotted on the Map from a selected node (CN/DN) to the destination node (PoP). If multiple paths are available, each will be plotted with different colors. Select CN/DN node on the Map and then select Current Best Route(s) under node menu options.



Airtime/Throughput Statistics X

Airtime and Throughput options are available under Link Overlay mode on the Map. Once Airtime/Throughput option is selected, values are displayed on the Map. These details are available on the Links > Statistics page.




Added Rx/Tx Throughput Performance Graphs under Node > Performance.


Beam Azimuth and Elevation Angle in Links Statistics

Added Tx/Rx Beam Azimuth and Elevation Angle statistics for the links in the Links > Statistics page. These statistics can be exported.


Remote Command for Wired Interface Changes

Added a new remote command Show Wired Interface State Changes under E2E Network > Tools > Remote Command.


Assists for cnWave 5G Fixed X

Assists are now supported for cnWave 5G Fixed devices. This feature scans device configuration and generates an Assists Score, displayed as a percentage of successful evaluations. Assists summary scores are available in the hierarchy at System, Network, and Device (BTS and CPE) levels.

Assists Dashboard

The Assists Dashboard presents the Assists Score and the list of evaluated Assists.


Affected Devices

Devices failing evaluation are displayed in a table.


cnWave 5G Fixed BTS and CPE Dashboards with Assists Score



Link Test for cnWave 5G Fixed BTS

The Link Test measures the throughput of the RF link between the BTS and its CPE modules. The device’s link test only utilizes the spare sector capacity for this test; therefore, sector traffic will not be disrupted. To run Link Test, navigate to BTS > Tools > Link Test, choose the CPE and enter the duration of the link test to run.


Miscellaneous Changes

General UI Updates

These include improved data tables with rollover actions and docking the Action buttons at the bottom to improve vertical scrolling in NSE Groups, Switch Groups, and Wi-Fi Profiles pages.

Additionally, consistent status columns provide a cleaner and more intuitive interface for better navigation and management. Software update and download icons are also updated.



Data Reports X

Previously data reports were generated under the Reports tab. They have been moved to Reports > Scheduled. Data reports can be generated by clicking Add New Data Report. The maximum pagination count for Reports is 25.


Extended Historical Data X

Long term historical data has been increased from 12 to 14 months for enterprise products and 24 to 26 months for fixed wireless products.

Enterprise Products


Fixed Wireless Products


Custom Interval in Client Reports

Network administrators can configure Custom Time Range in Client Reports to provide more flexibility and precision in analyzing client data.


Unconnected Clients

Unconnected Clients are available under the Clients tab at System, Network, and Site levels with current, 24 hours (X), and 7 days (X) duration. The device level shows current unconnected clients.


Show KPIs at Network/Tower Levels for Managed Device Types

Managed device types KPI widgets will be shown at Network and Tower levels. Only four KPI widgets will be displayed by default when no devices are onboarded. Wireless client KPIs will be available if any Wi-Fi Access Points (APs) are onboarded.


Increased Email Subscribers from 2 to 10

Email notifications will support 2 subscribers in an Essentials account and 10 in an X account per scope (All Accounts, Managed Account, and Base Infrastructure).

API Updates X

The Swagger documentation for the updated RESTful API is available at: cnMaestro 4.0.1 API.

New APIs

Path Details
GET /api/v2/cnmatrix/switch_groups Return list of Switch Groups.
GET /api/v2/cnmatrix/switch_groups/{switch_group_name} Retrieve details of a specific Switch Group.
POST /api/v2/cnmatrix/switch_groups Create a Switch Group.
PUT /api/v2/cnmatrix/switch_groups/{switch_group_name} Update a Switch Group.
DELETE /api/v2/cnmatrix/switch_groups/{switch_group_name} Delete a Switch Group.
DELETE /api/v2/msp/managed_accounts/{managed_account}/cnmatrix/switch_groups/{switch_group_name} Delete a Switch Group under a managed account.
cnMatrix Port Configuration
PUT /api/v2/cnmatrix/ports Update port(s) based on MAC addresses and creates auto-sync job.
Wi-Fi Enterprise WLAN
PUT /api/v2/wifi_enterprise/wlans/{wlan_name}/epsk/edit Modify the existing ePSK entries within an ePSK Policy.

Supported Cambium Products

cnMaestro supports the following Cambium Networks products. The software versions are the minimum required to use cnMaestro (not the recommended versions).

Family Model Version
60 GHz cnWave V1000 1.0
V2000 1.2.2-beta3
V3000 1.0
V5000 1.0
cnMatrix EX2K/EX1K 2.0.4-r1
EX3K 5.0.1
cnPilot Home cnPilot R200, R200P 4.4.2-R2
cnPilot R201, R201P 4.4.2-R2
cnPilot R190V, R190W 4.4.2-R2
cnPilot R195P 4.5.2
cnPilot R195W 4.7
cnRanger Sierra 800
Tyndall 101
Tyndall 201
cnReach N500 5.2.17e
cnVision Hub 360r, FLEXr 4.6
Client Micro, Mini, Maxr 4.6
cnWave 5G Fixed B1000 (BTS) 2.0
C100 (CPE) 2.0
Edge Controller N/A 1.0.0
Enterprise Wi-Fi cnPilot e400/e500 2.5.2-r3
cnPilot e410/e430w/e600 3.5.2-R4
cnPilot e501S/e502S 3.2.1-r6
cnPilot e700 3.8
cnPilot e425/e505 4.0-r17
cnPilot e510 3.11.4-r9
XE3-4 6.4
XE3-4TN 6.5.1
XE5-8 6.4.1-r15
XV2-2 6.1
XV2-2T0 6.4
XV2-2T1 6.4.1-r15
XV2-21X 6.5
XV2-22H 6.5
XV2-23T 6.5
XV3-8 6.0
ePMP 1000 Hotspot ePMP 1000 Hotspot 2.5.2-r3
ePMP ePMP 1000, Force 180/200 2.6.2
ePMP 2000 3.0.1
ePMP Elevate XM/XW 3.2
ePMP Force 190 3.5
ePMP Force 300 4.1
ePMP PTP 550 4.1.1
ePMP Force 130 5 GHz 4.3.2
ePMP 3000L 4.3.2
ePMP Force 130 2.4 GHz 4.4
ePMP Force 300-19, 19R, 13 4.4
ePMP 3000 4.4.1
ePMP PTP 550 E 4.4.2
ePMP MP 3000 4.5
ePMP Force 300-13L 4.5.2
ePMP Force 300-13LC, 22L, 25L 4.6
ePMP Force 200L 4.7.0
ePMP 4000, Force 400 GPS, 400 CSM, 425 5.1.0
ePMP 4600, ePMP4600L, ePMP Force 4600C, ePMP Force 4525, ePMP Force 4500, ePMP Force 4625 5.4.0
PMP PMP 450i, PMP 450, PMP 450m, PMP 430 SM 15.0.1
PTP 450, and PTP 450i 15.0.1
MicroPoP Omni/Sector 16.2.1
PTP PTP 650 01-47
PTP 670 (650 Emulation) 01-47
PTP 670, PTP 700 02-67
PTP 820/850 PTP 820C, 820E, 820F, 820G, 820S 11.9
PTP 850C, 850E 11.9
Xirrus (Enterprise Wi-Fi) XA4-240 8.7.0
XD2-230 8.7.0
XD2-240 8.7.0
XD4-130 8.7.0
XH2-120 8.7.0
XH2-240 8.7.0
XR-620 8.7.0
XR-630 8.7.0
XR-2226 8.7.0
XR-2236 8.7.0
XR-2247 8.7.0
XR-2426 8.7.0
XR-2436 8.7.0
XR-2447 8.7.0
XR-4426 8.7.0
XR-4436 8.7.0
XR-4447 8.7.0

Supported Browsers

cnMaestro supports the following browsers:

Platform Browser Version
Linux Firefox 45 and above
Chrome 49 and above
MacOS Safari 9 and above
MS Windows Internet Explorer Deprecated
Microsoft Edge 44.17763.1.0
Firefox 45 and above
Chrome 49 and above

Significant Fixes

The following issues have been fixed:

Id Details
CNSSNG-10984 Server error on failed bulk delete.
CNSSNG-14152 Client Count graph plots incorrectly in an AP Group.
CNSSNG-15390 PMP software update and name change warning messages handled incorrectly.
CNSSNG-19406 ip_route is invalid configuration and cannot be deleted from AP Groups.
CNSSNG-23525 Bulk claim of APs (more than 100) at Site level with AP Group mapped, failed intermittently.
CNSSNG-26352 Unified onboarding API for Cloud/On-Premises with respect to MAC/MSN.
CNSSNG-26898 Unable to add new domain users.
CNSSNG-28973 cnMaestro-XP: Database indexing notification.
CNSSNG-29160 Clients intermittently show high max rates (max rate client has reached) or NaN.
CNSSNG-30044 cnMaestro-XP: APs show offline but are functional.
CNSSNG-30280 [AutoCell] Default Minimum Transmit Power should be 8.
CNSSNG-30936 The GPS firmware version reported by Canopy AP (with internal or external GPS) must be displayed in cnMaestro.
CNSSNG-31152 Only 1000 voucher sessions are allowed.
CNSSNG-31827 Template macros within replacement variables are broken
CNSSNG-32335 Not able to see channels.
CNSSNG-32511 In AP Dashboard, clicking on the Client Count KPI navigates to the System > Clients page.
CNSSNG-32756 cnWave 5G Fixed BTS shows offline in cnMaestro.
CNSSNG-32760 cnMaestro API accepts special character (linefeed, carriage return) as part of an AP’s hostname.
CNSSNG-33195 GET API fetches all records for devices API when limit is set to 0 in the API request
CNSSNG-33423 Sorting the client list is not working.
CNSSNG-33720 Application Visibility: Total bytes data at site level and System level are not same.
CNSSNG-33723 Unable to download packet capture file for devices under Managed Account.
CNSSNG-34600 Brand image is not showing in preview.

Known Issues

The following issues exist:

Id Issue Details
CNSSNG-11299 AP Regulatory Channel list support check needed for checking valid channels.
CNSSNG-11389 Microsoft Edge Browser does not support in system OVA file upgrade. Workaround : Use the Google Chrome browser
CNSSNG-12812 cnPilot R-series dual radio devices (r-201P, r-195W) AP Group country code/SSID configured from overrides getting applied only to 2.4 GHz radio.
CNSSNG-12888 Connected Clients count in the WLAN page is not properly shown when SSID is overridden for the WLAN at Device level.
CNSSNG-13054 Mismatch in Clients count for cnPilot E-series device at WLAN and AP Group configuration level.
CNSSNG-14030 CBRS race condition: SM “stuck” in cnMaestro during reparenting if import and start occurs as SMs arrive in onboarding queue. Workaround : To avoid this issue, follow the suggested SM reparenting procedures listed in the latest version of Cambium CBRS standalone procedures document.
CNSSNG-14518 Device Type selection needs to be provided at Site and AP Group for Report generation.
CNSSNG-14932 PMP/ePMP Configuration Backup: LAST BACKUP date and time is not updating if device under an MSP account.
CNSSNG-15356 If a device has a weak serial number in a non-CBRS build, and the sector is imported first, the device will not contact cnMaestro.
CNSSNG-15432 Deleting a device in Base Infrastructure and claiming it immediately to another Managed Account returns Device Registration Failed message.
CNSSNG-15595 cnMatrix Hostname fall backs to old Hostname if the template is pushed for the first time (if a Switch Group already exists).
CNSSNG-15656 Duplicate entries observed in 802.11ax Clients Report.
CNSSNG-16197 CBSDID search will not work when device was synced from tool without obtaining grant first. Workaround : Perform CBSDID search from domain proxy view on Cloud to obtain mac address, then perform MAC address search on tool to find the device.
CNSSNG-18856 cnVision Client is not shown under hub. Workaround : Reboot the Client
CNSSNG-18913 On resizing, the graph/widgets are not properly rendering.
CNSSNG-18923 After migration Reports Job page is empty due to cached data. Workaround : Clear Cache and Cookies after migration.
CNSSNG-18927 Configuration push from Onboarding page is getting device timeout error in ePMP 1000 Hotspot device.
CNSSNG-18936 Graph plotting is empty if the page is zoomed out/in.
CNSSNG-19264 Unmanaged expired device approve button is not disabled.
CNSSNG-19275 Issues related to offline alarm of expired devices.
CNSSNG-20508 Last Super Administrator deletion should be shown proper error message.
CNSSNG-20605 User-Defined Overrides (Advanced) should be handled from Switch Groups > Switches > Actions > Configuration tab.
CNSSNG-20745 AP Count is -1 in Anchor when deregistering the device from Anchor.
CNSSNG-20820 After server upgrade, device throws error [Invalid CBSD ID and Grant ID], even though the Domain Proxy shows the device is registered.
CNSSNG-21068 Not able to deregister or delete the SM when PMAC mismatched (SM reported different PMAC). Workaround: Reinitialize the SM from inside the sector of the AP, not by directly searching for the SM in the tool; then deregister and delete the device.
CNSSNG-21264 Auto refresh does not work when Site/Tower/Device details are updated in Network level map.
CNSSNG-21271 SM status is missing in AP details on map.
CNSSNG-21345 RF Statistics related information should not be available in reports for XV type device.
CNSSNG-21396 Issues related to cnMatrix onboarding overrides.
CNSSNG-22089 New Changes in Clients report in 3.1.0.
CNSSNG-23732 Min Data Rate and Multicast Data Rate configuration push always sets default for both bands.
CNSSNG-24529 Multi-floor issue with Firefox browser.
CNSSNG-24823 Device overrides and config apply will not work after Migration from 3.1.0 to 3.1.1 due to cache.
CNSSNG-24826 Site Floorplan: in Edit mode, able to drag devices outside the boundary without an error.
CNSSNG-25071 If ePSK entries exist under an MSP WLAN, then upon disabling MSP in the account, the MSP WLAN ePSK count persists.
CNSSNG-25150 AOS device Configuration Job times out if Device is in DHCP.
CNSSNG-25238 AOS device WebSocket does not disconnect for an X account downgraded to Pure ESS after Retention expired.
CNSSNG-25758 Able to see cnPilot R-series AP Groups in Enterprise View.
CNSSNG-26188 Error on deleting NSE device from the inventory page.
CNSSNG-26871 Client Local Table intermittently displays no data even when clients are connected.
CNSSNG-26911 NSE configuration page should use Management IP as clickable link, not WAN Address.
CNSSNG-27055 Port numbering in UI does not match physical labels.
CNSSNG-27223 Not able to override passphrase of SSID when SSID contains special character “.” when created at group level (for ex: dot).
CNSSNG-27314 No toast message displayed on deleting a NSE Group linked to a device.
CNSSNG-27416 NSE Groups - Firewall - Rule “Action” needs to be Deny only (read only).
CNSSNG-27581 Configuration Variables (Advanced) details are not displayed for Switch groups in onboarding page.
CNSSNG-28101 Logout option not visible in iPhone.
CNSSNG-28140 Graphs alignment issues when menu bar is expanded.
CNSSNG-28151 Total device count and count displayed in Recommended Software metrics do not match.
CNSSNG-28282 Scheduled Reports for Expired device are completed.
CNSSNG-28292 Major Alarm count does not match system level notifications.
CNSSNG-28306 Usage summary displays Available and Used slots in the same color.
CNSSNG-28326 AP Groups/Sites/Towers list all types of devices while generating reports.
CNSSNG-28377 Number of onboarding devices from Dashboard does not match number of devices on Onboarding page.
CNSSNG-28433 After rebooting a BTS, the Audit Log displays the entry as failed.
CNSSNG-28544 While moving from one managed account to another, PTP device details are not updated properly.
CNSSNG-29982 The LAN ports numbers on the NSE dashboard and the Network page of NSE group configuration should be identical.
CNSSNG-30024 Total Bytes and other KPIs doubled if navigated from Top User.
CNSSNG-30040 Change Bulk Edit and Import labels.
CNSSNG-30137 Inactive VPN Sessions cleared after an hour and not after 24 hours.
CNSSNG-30142 Some of the time ranges are missing for NSE performance graphs.
CNSSNG-30247 X Data are not getting cleared after Data Retention period completes.
CNSSNG-30593 In NSE, packet capture for VLAN 2000 fails with undefined error.
CNSSNG-30691 Should not allow configuration of duplicate subnet in remote subnet and local subnet.
CNSSNG-30693 DH group setting under IKE phase 2 of site-to-site tunnel cannot be set to disabled.
CNSSNG-30696 Changes required if the IKE version 1 is selected.
CNSSNG-30697 Remove the check box “enable inbuilt VPN server” from the VPN and RADIUS server page.
CNSSNG-30890 Clicking apply filters when in bottom of page should open the apply filter pop upwards.
CNSSNG-30927 Modify the remote subnet and local subnet fields under IPsec to have option to enter subnet in list form.
CNSSNG-30981 Load Balancing is not allowing WAN 1 backup WAN 2 shared combination.
CNSSNG-30982 Job Details popup should auto hide when navigated to device.
CNSSNG-31004 The status of SNMP v2c assist for cnMatrix does not change from failed to passed.
CNSSNG-31006 If the site contains NSE, cnMatrix, and Wi-Fi AP, the devices are not sorted correctly.
CNSSNG-31029 For responder role, Site-to-Site VPN tunnel, remote address field is not present.
CNSSNG-31072 VPN user Password and shared secret are not encrypted in exported configuration.
CNSSNG-31098 Navigation to client is not working from Impacted Clients pop-up.
CNSSNG-31115 Device type is blank for NSE in onboard reports.
CNSSNG-31116 Navigation is broken when accessed from Jobs Page in Enterprise View
CNSSNG-31131 Navigation is broken when accessed from Threats bar graph in System and Home in Enterprise View.
CNSSNG-31234 Client host name is not updated in System > Applications > Application Name.
CNSSNG-31238 Client host name alignment not proper in application tab. Workaround: Enter less than 64 characters for Host Name
CNSSNG-31439 Sponsor does not receive approval mail when we have multiple domains in Domain list.
CNSSNG-31487 Top Active Alarms link is not working for NSE in Enterprise View.
CNSSNG-31537 The alarms are not displayed upon selecting the alarms count on alarms severity grid.
CNSSNG-31538 DNS Filter page going blank if a DNS Policy is added with only name.
CNSSNG-31607 Voucher without enable access can save.
CNSSNG-31613 Reporting layer memory usage.
CNSSNG-31626 Device type is blank for NSE in System Level reports.
CNSSNG-31626 Export current page as CSV/PDF downloads all the client login events.
CNSSNG-31703 Switch port ID sorting order is not correct, for example, showing 10 first before 2 when ascending order is used
CNSSNG-31883 Techdump is not downloaded for PMP devices
CNSSNG-32091 Wireless clients grid data appears as ON and OFF.
CNSSNG-32155 Expired NSE Devices are not listed under System > Network > Tree and inventory after X-Trial ends.
CNSSNG-32313 Wired client list is empty when navigated back from a client.
CNSSNG-33336 Failed Reports are shown in green color.
CNSSNG-33442 Audit logs are not generating while creating graphical report template.
CNSSNG-33660 Template should have a scroll bar.
CNSSNG-33834 Switch port operations are getting disabled.
CNSSNG-33861 Completed reports should transfer to Completed column immediately when the jobs complete.
CNSSNG-33908 PMP performance reports has some fields missing.
CNSSNG-34438 In ESS: Clients connected to enterprise AP data is seen under Application history.
CNSSNG-34447 Both BTS and CPE when do config push with “sysName” field, under Configuration tab the change is not reflecting.
CNSSNG-34621 Renamed client host name not updated in site Analytics tab.
CNSSNG-34766 Remove NSE related widgets from System and Base Infrastructure dashboards from X and ESS account.
CNSSNG-34775 Selecting alarm count at System and Base Infrastructure dashboard does not match the alarm data displayed.
CNSSNG-34950 When initiating Link test with 40,50,60 as Duration, the Devices go Offline in cnWave 5G fixed.

Where to Get Help

There are several places to get help with cnMaestro.

Cambium Community : The cnMaestro Forum provides the best place to ask questions and get up-to-date information.

Cambium Support : The Cambium Support team is available 24x7 to answer questions and resolve issues.