Maintaining Wi-Fi client connections when AP disconnects from cnMaestro

Products cnMaestro
1

Dear.

I use E500 Cambium AP with cnMeastro. User connect to use local network and internet services
Currently, MAC Authentication Policy is on cnMaestro.
If the internet line has problem. E500 APs can not reach to cnMeastro. User client can still connect to E500 APs or not? If they are cannot, there is any solution to user can connect to use local network via Cambium AP

Thank you
Trong Pham

2
  • If AP is not connected to cnMaestro, then new clients that try to connect during this AP connection state, fails to connect.
    * AP stores cached information of connected clients for 60 min from the time of client connection. If already connected client tries to reconnect, it will be successful within cache timeout period.
1 Like
3

Thank you for your information
In case user roaming this time. All AP have the same caching Mac address?
I can increase the priod of cache?

4

In case of roaming across APs,

  • Sceaniro 1
    • Client is connected to both APs
      • If the client is roamed across APs before cache timeout, they will be connected.
  • Scenario 2
    • Client is connected to AP1 but not AP2
      • When client is roaming to AP2 from AP1, cnMaestro connection to AP2 is required else client will fail to connect.

User cannot configure cache timeout.

5

Thank you
So, is there any solution for my case? Sometime internet has problem then user must stop working.
Ex: sync Mac Address to AP or something else

6

Please brief on your requirements.

  • No of clients for MAC authentication
  • How often you change MAC list in ACL Policy
  • Is there any local RADIUS server that you have hosted or can be hosted which is not dependent on internet.

Based on above reply, I can help you with solution if feasible.

7

Thank you for your support
About your mention

  • No of clients for MAC authentication
    => No
  • How often you change MAC list in ACL Policy
    => When I have new clent. Just add new MAC to list in ACL
  • Is there any local RADIUS server that you have hosted or can be hosted which is not dependent on internet.
    => No, there is not
8

I would recommended to use MAC ACL hosted on AP, rather than cnMaestro ACL.

You can update client MAC from cnMaestro whenever you edit.

image
image1897×686 55.1 KB

9

That great. Thank you

I have the small questions

  1. It seems in on WLAN configure. If I have how many WLAN, I will repeat that for as WLAN, is that right?
  2. This ACL will update in all APs have this WLAN interface?
10

@Trong_Pham

  • on a WLAN profiles, 300 MAC ACLs are supported per WLAN.
  • Create a WLAN profile with MAC ACL and append it in a AP Group.
    • Then push AP group to all APs as per your requirement.
  • Whenever you change any MAC ACL from cnMaestro, it will be pushed to all APs it has been configured.
  • There will be no disruption of traffic for the clients that are connected when you update MAC ACL list.
1 Like
11

I will try. Thank you very much

1 Like