cnMaestro Cloud IP keep changing

Products cnMaestro
1

Hi,

We are switching to cnMaestro Cloud. We do not want to expose our MGMT network to all of the internet. We are using our firewall to only permit a list of IPs on the internet.

Is it possible to get a list of static IPs for cloud cnMaestro to put on our firewall? We have tried building a list based on DNS responses. But it keeps changing.

2

Cambium cloud is hosted on AWS so unless you plan on unblocking all AWS IPs not a great idea then you may need to find a different option.

3

Thanks, Jesse-Nikola!

4

Hi Joshua,

As the AWS IP Addresses keep on changing you have to whitelist *.cloud.cambiumnetworks.com for requests to cnMaestro to work fine.

Thanks,
KR.

5

Hi,

I know this is an old topic, but is the solution for this still the solution today?

Working with a customer with legacy firewalls and adding *cloud.cambiumnetworks.com isn’t an option.
They can only add IP addresses and over the last 3 days they have made changes to the firewall 4 times to allow visibility of the APs through cnMaestro.

6

I hit this issue on a site with some real old and nasty firewalls.
Whilst not the greatest security , I had to use something like bgp.tools and lookup prefix the ip address belongs to and lock it down to the src IP Addresses of the AP’s.

Not great security but, firewalls that can’t do FQDN lookups in 2023 aren’t fit for purpose as well.