So how screwed are we?

With everything that happened… I assume we are all on borrowed time with our Cambium WiFi installs.

Anyone already offloaded there sites from cnmaestro?

Is there a guide for this yet?

Offload as far as in, migrating to another vendor hardware or to on-prem instance?

I’m in process of trying on-prem… but messy without ability to split or have new cnMaestro X licenses. I’ve imported some configs for non licensed ‘essentials’ hardware.

Further question is how will Cambium and disti honor existing CCAV subscriptions for HW replacement on RMA’

Unsure what we will do four all the NSE appliances we now have in the wild.
This is a mess.

Further… if cambium licensing goes dark and TAC [which TAC has, but still only a few days].

without cloud.cambium and without licensing.cambium – we are stuck. I’m scrambing to POC the on-prem. But the issue remains of moving existing entitlements to on-prem anchor.

Only option for outdoor wifii is Umbiggi, otherwise be larger enterprise vendor - but price delta is maybe 3x…

Aruba Instant ON is also uncertain option, given the DOJ is requiring they sell their IP and portfolio.

Our options for outdoor guest wireless [enterprise] and fixed wireless are very slim. [Fixed 60Ghz is not so bad].

If I understand correctly, even if you have on premise version, if the cloud.cambium is lost then alerts and onboarding are obsolete?

Yep, i believe there is still dependency. As we wont be able to claim hardware. Would have to manually import and adopt to on-prem - similar to Umbiggy.

I hope a decent network company picks up the SKU’s and cnMaestro platform… I doubt Umbiggy will… most likely be PE or a channel picking up the scraps.

Unless the RSK advisors and UK pulls head out of their arses.

Very worried here about cnMaestro Cloud being killed on October 1st.

How are we to support NSE appliances…??? Now we need to tell customers, hey - we just deployed new NSE’s to your sites last week - we have to replacement. We will take a significant financial hit if we have to eat replacement costs on switching vendor.

If one used the on prem version, could one setup snmp to send notifications? Just trying to find work around if OCt1 is deadline

You can setup SMTP email for notifications. Unsure what you would want to do with SNMP.

I stood up on-prem cnMaestro last night. But without any cloud communication, no licensing, no anchor sites, nothing.

We are stuck – as we need to manage the NSE appliances. The hardware should all run with local configs and perhaps local management. But any NGFW features will be nuked without the cloud.

Thank you for your reply, yes this a nightmare, SNMP to monitor tx/rx, lan ports, rssi etc of our epmp and pmp devices

Unsure if can use on-prem to deliver SNMP alerts, as that require full NMS or network monitoring. I can maybe test.

Or if others show up here that have experience with on-prem cnMaestro

According to CNMaestro… I have 239 WiFi client serving APs deployed across 70 sites, and maybe another 20 or so on the shelf.

Configuring them to be standalone is gonna be a problem for the sites that use EPSK for certain.

I have on-prem up and running. Going to start adopting a few lab/home office AP’s.

Auto-approve enabled for on-prem. Have to go into each device and modify the management:

If cloud.cambiumnetworks.com goes dark – I assume devices will no longer care who owns the NMS and or where devices are registered.

cnmaestro url
cnmaestro cambium-id YOUR_ANCHOR_ID
cnmaestro onboarding-key YOUR_KEY
no cambium-remote validate-server-cert
cnmaestro enable

Then you can onboard each devices - re-assigning all your customer network profile settings / configs.

might test this out actually, can just block outbound to cloud.cambiumnetworks.com in lab and see what it does.

Exactly :wink: that. I had also planned to do that and maybe give some validations.

Our issue is NSE security appliances… RIP. Unless someone internal Cambium leaks or they [Cambium] do something worthwhile - but doubtful given the path they’re taking. its sickening.

I hope the CEO feels great about himself.

On your cnMaestro on prem, if you go to administration → Settings → Cloud Connectivity, you can disable connecting your on prem instance to your Cloud anchor account. This means its free from the cloud and will run independently. However, you will need to make sure you download firmware versions from the support website and then upload them to your on Prem as it wont have access to these if you disable the connection to cloud.

Thanks @CraigN. That is the conclusion I have come to.

Cloud Anchor allows issuance and assignment of entitlements and also hook to cloud.cambiumnetworks.com to poll for OVA updates and firmware updates to pull down to devices.

I’ve already staged my system with as much firmware as possible.

@CraigN
Can you please beg cnMaestro or NSE team to issue ONE last on-prem version.. sneak it into our support portal for downloads? WE NEED NSE MANANGEMENT! <3. Without NSE management we’re cooked. The SD-WAN security appliances are pc-load-letter, dead to us.

Didn’t stop my APs from reaching the cloud.

Went into torch and found the actual IPs

100.57.117.44

35.153.29.30

Blocking those showed my APs as offline.

Most likely a MikroTik thing not being able to block via FQDN due to the AWS CDN? Most likely Cambium has DNS failover configured I’m sure if you create address-list in your MikroTik and block via those dst-address – it’ll work.

If we can by some AP in stock will not be able to onboard AP on onpremise server if cloud anchor is down. right ?