Frictionless Wi-Fi Access Installation and Administration Certification

Frictionless Wi-Fi Access Installation and

Administration Certification
Cambium Network Solutions: cnPilot and cnMaesto

Rev: 2019_Q1
 1/9/2019

Course Agenda

Managing your 
Cambium cloud‐ Install, configure & 
solution with 
Working with Wi‐Fi Managed Wi‐Fi  monitor: cnPilot
cnMaestro
portfolio Wi‐Fi Access Points
Controller™

Technical Training Course Material:  This material is provided to assist you in the evaluation, deployment, troubleshooting and understanding of the technical aspects of Cambium 
Networks products and is not to be reproduced or distributed to others without permission of Cambium Networks. By attending this course and accepting all related software and 
materials, you agree to abide by the terms and conditions described above.

Join the Team: Cambium Networks Community

http://community.cambiumnetworks.com/

1
 1/9/2019

Cambium Networks Wi-Fi Solutions

Outdoor Park Wi‐Fi deployment Hotel Wi‐Fi deployment

Tradeshow Wi‐Fi deployment University Wi‐Fi deployment

Cambium Networks Wi-Fi Solutions

2
 1/9/2019

Frictionless Deployment: cnPilot + cnMaestro Controller

Claim Devices with Serial Number

34564567, 12367490, 1298620986, 
5285296

Setup Config and s/w Ver. Auto Registration

Config & Upgrade

Access Points

Section 1

Wi-Fi Fundamentals

3
 1/9/2019

Section 1: Wi-Fi Fundamentals Objectives

After completing this section you will

be able to:
 Explain the progression of Wi-Fi
 Define the role of Channels
and Bands
 List the characteristics of
radio frequencies
 Explain the basic fundamentals
of MIMO
 Identify types of Wi-Fi Security

Wi-Fi Organizations


Government 
Regulatory 
Bodies

4
 1/9/2019

History of 802.11 PHY/MAC standards

1999 2003 2009 2013

6.93 Gbps
600 Mbps
6 – 54 Mbps

6 – 54 Mbps
5.5 ‐11 Mbps

2.4 ‐ 5GHz
5GHz

5GHz
2.4GHz

2.4GHz

802.11a 802.11b 802.11g 802.11n 802.11ac

Channels in 2.4GHz or ISM Band

22/20 MHz

1 2       3       4        5       6 7        8     10    11 12     13 14

2400

2500

2.4 GHz Band
Channel 1 2 3 4 5 6 7 8 9 10 11 12 13 14
Center 
Frequency  2412 2417 2422 2427 2432 2437 2442 2447 2452 2457 2462 2467 2472 2484
(MHz)

5
 1/9/2019

UNII Bands and Channels in 5 GHz

Radio Frequency Behavior – Example- Reflection

6
 1/9/2019

Multipath advantageous for MIMO

• RF signal when bounces off a

smooth large surface, it changes the
direction of the signal causing the
signal to take multipath.

• MIMO leverages environmental

structures and takes advantage of
multipath signal reflections to actually
improve radio transmission
performance.

Wireless Site Survey – Meaning and its importance

7
 1/9/2019

Site Survey Procedures

Deployment
Gather Information

Planning
• Size of the facility • How many APs  • Pre audit survey of 
• How many users  required – Based on  the site
need access the site survey • Actual deployment 
• Bandwidth  • Coverage planning based on the 
expectations • Capacity planning planning
• Purpose for Wi‐Fi  ‐ • Post deployment 
Type of application performance report
• Guest Access  • Final 
Provision adjustments/Fine 
Tuning

Tools for Site Survey

Ekahau

Airmagnet iBwave

8
 1/9/2019

MIMO – Multiple Input Multiple Output

Transmit Beamforming
Maximal Ratio Combining
(TxBF)

Spatial Multiplexing 802.11n Enhancement

Units of Measurement

SNR

9
 1/9/2019

802.11 Terminology

• Physical Carrier Sense (CCA) – Clear Channel Assessment

CSMA/CA • Virtual Carrier Sense (NAV)
• Backoff 
• Interframe Spacing 

SSID • Service Set Identifier
• WLAN name (Shows up when you scan for the network)

BSSID • BSS Identifier
• MAC address of the AP’s wireless interface. 

WPA2 Personal and WPA2 Enterprise

• WPA2 PSK – Pre Shared Key

• Involves a single password to be
connected on the wireless network.
• WPA 2 Enterprise requires a RADIUS
server that handles the authentication
access.
• Authentication is based on 802.1X
• Access policy – you can whitelist /
blacklist wireless clients
• Disable
• Allow: Accept listed clients, reject all others
• Reject: Reject listed clients, allow all others

10
 1/9/2019

Security – WPA2 Enterprise

Authentication
Supplicant Authenticator
Server
802.11 Association Access 
EAPoL ‐ Start Blocked
EAP – response/identify (username)
RADIUS‐access‐request
EAP – request (challenge)
RADIUS‐access‐challenge
EAP – response (hashed resp)
RADIUS‐access‐request
EAP ‐ success

4 Way Handshake RADIUS‐access‐accept (PMK)
Access Granted

WMM

Wi‐Fi Alliance subset of 802.11e

Defines four Access Categories (AC)
Voice, Video, Best Effort, Background

Enforces priority by modifying contention windows and 
contention free tx parameters

WMM parameters mapped to DSCP and 802.1p priorities

11
 1/9/2019

Power Save

• Many wireless clients are battery operated, so power saving

features are important
• Devices can be in CAM (Constantly Awake Mode) or PSM
(Power Save Mode)
• The AP knows the power-save state of each client and buffers
frames for sleeping clients
• The beacon indicates which clients have buffered frames
• PSM wake up periodically to check the beacon and poll the
AP for frame delivery if required
• Broadcast / multicast frames are delivered every fixed
number of beacon intervals

Power Save - Enhanced

U‐APSD (Unscheduled Automatic Power Save Delivery) / WMM‐PS
• Client can request buffered frames at any time
• QoS aware ‐ can be enabled per‐priority queue
• Less common scheduled version S‐APSD exists

PSMP Power Save Multi‐Poll
• 802.11n extensions to APSD

MIMO Dynamic MIMO
• Reduces MIMO configuration when there is low traffic (e.g. 2x2 to 1x1)

12
 1/9/2019

Other 802.11 standards

802.11e : Quality of Service (QoS) enhancements and improves voice and video performance

802.11k:  Radio Resource Management Radio and network measurements

802.11r:  Fast secure roaming mechanisms, aka “Fast BSS Transition”

802.11w:  Protected Management Frames, prevents some security vulnerabilities

802.11u:  Interworking with external networks | Hotspot 2.0 enabler

Wireless Mesh

5 GHz 2.4 GHz
A mesh link can be created
between two radios by
configuring one of them as a
BASE and the other as a
CLIENT on the first WLAN of
5 GHz
the AP. A mesh radio can 2.4 GHz

service up to 5 mesh clients 5 GHz 2.4 GHz

connected to it

13
 1/9/2019

Section 1: Wi-Fi Fundamentals

Section 1: Lab

Based on your selected client 
scenario, sketch out a high level 
concept of the proposed Wi‐Fi 
solution.

Section 2

Cambium cloud-
Managed Wi-Fi
portfolio

14
 1/9/2019

Section 2: Cambium cloud-Managed Wi-Fi portfolio

After completing this section you will

be able to:
 Identify the Cambium Wi-Fi products
based on Access Point naming
 Recommend a Cambium Network
Wi-Fi product based on client
requirements

Cambium cnPilot
32
Copyright 2019 Cambium Networks, Ltd. All rights reserved.

15
 1/9/2019

cnPilot : at a Glance

INDOOR OUTDOOR

Enterprise
Access Points
E430 E410 E600 E700 E500 E501s E502s
Wallplate 11AC Ceiling 11AC Ceiling 11AC Outdoor 11AC Outdoor 11AC Outdoor 11AC Outdoor 11AC
2x2 wave 2 2x2 wave 2 4x4 wave 2 4x4 wave 2 2x2 wave 1 2x2, 120° Sector 2x2, 30° Sector

Network
Controller

cnMaestro Cloud cnMaestro VM cnMaestro c4000 AutoPilot

ISP managed
Residential
Access Point/router R190 R200P R201 R195 R240
11n, 2.4GHz 11n, 2.4GHz 11ac, dual band 11ac 2x2 11ac 4x4 
Voice optional Voice + Power With Voice, PoE optional dual band dual band + voice

33

E-Series Enterprise Class Products – Indoor / Outdoor Wi-Fi

Ideal AP for …
Cambium Networks e600 Ultra High Density Networks
4x4:4:3 11AC wave 2
Maximum MU‐MIMO speeds
tamper‐resistant USB for LTE client
Integrated BLE Retail / Enterprise / Education / Hotel

Cambium Networks e410 General use, high performance, rapid deployments
2x2:2:2 11AC wave 2
SMB Enterprise / Retail / Hotel
Integrated BLE

Cambium Networks e430 Micro‐cell Wi‐Fi, Dorm rooms, Hotel rooms, MDU
2x2:2:2 11AC wave 2 wallplate
Integrated BLE, PoE‐out, 4 GE, flex mount Hotel / Education / MDU

Cambium Networks e700
4x4:4 11AC wave 2 Outdoor
High performance, great range Outdoor Wi‐Fi
PoE‐in and PoE‐out; BLE; 32dBm EIRP
Quick install – mounting is included
Cambium Networks e501 General Enterprise use, and Sector coverage use case
2x2:2 11AC; 13dBi 120deg Sector antenna
Cambium Networks e502 Enterprise / Stadiums / Hotels / Events / MDU
2x2:2 11AC; 17dBi 30deg Sector antenna

16
 1/9/2019

R-Series Residential Wi-Fi for MSP Ideal AP for …

Cambium Networks R190V / R190W MDU and Low Cost Residential, basic services with 
R190W = 2x2:2 Single Band 2.4GHz 11n.  5 x FE Switch analog telephone/fax ports
R190V = Single Band 2.4GHz 11n + 2 x RJ11 ATA ports 

Cambium Networks R200P MDU and Low Cost Residential
2.4GHz 11n.  5 x FE Switch, 2 x ATA + PoE out for SM Connect to Cambium Subscriber Module to extend 
Broadband and telephony indoors.  WISP

Cambium Networks R201 / R201P Upgraded Residential customers and MDU
R201: 2x2:2 Dual Band 11AC.  5 x GE Switch, 2 x RJ11 ATA ports Small Business router
R201P: Dual Band 11AC, 2 x ATA + PoE Out for Cambium SM MDU voice service

Cambium Networks R195 Premium Residential and MDU AP with dual band 
2x2:2 11AC Wave 1, 5 x GE Switch, Dual Radio.   802.11AC

Cambium Networks R240V Small Medium Business Premium AP 
4x4:4 11AC Wave 2, 5 x GE Switch, Dual Radio with ATA.  Upgraded Residential and MDU
Telephony service

cnPilot Portfolio
cnPilot e430H cnPilot e410 cnPilot e600 cnPilot e50x cnPilot e700
Description Wallplate, dual radio wave 2 Indoor, general use wave 2  Indoor, high density  Outdoor wave 2, dual radio Outdoor wave 2, high density, 
dual radio wave 2, BLE  e500:  omni antenna performance
e501:  1200  sector antenna
e502:  300  sector antenna
Markets Hospitality, Dormitory  Retail, Small Business,  Enterprise, Education,  Public WiFi, Hotspots, Stadium,  High density outdoor, 
housing, MDU, micro‐cell Warehouse, Hospitality,  Retail, Conference Hotel Enterprise Transport hubs, event center
Hotspot

Wi‐Fi Standard, Radio 802.11n/ac wave 2, dual  802.11n/ac wave 2, dual  802.11n/ac wave 2, dual  802.11n/ac, dual radio 802.11n/ac wave 2, dual 

radio radio radio radio
RF Rate 2.4GHz:  400 Mbps 2.4GHz:  400 Mbps 2.4GHz:  400 Mbps 2.4GHz:  300 Mbps 2.4GHz:  400 Mbps
5GHz:      867 Mbps 5GHz:      867 Mbps 5GHz:      1267 Mbps 5GHz:      867 Mbps 5GHz:      1267 Mbps
EIRP 2.4GHz:  25.6 dBm 2.4GHz:  29.25 dBm 2.4GHz:  29.25 dBm 2.4GHz:  34.5 dBm 2.4GHz:  33 dBm
5GHz:      26 dBm 5GHz:      30.5 dBm 5GHz:      34 dBm 5GHz:      33 dBm 5GHz:      36 dBm

(e501/e502 are 36 dBm both 
bands)
Concurrent Users 256 256 512 256 512
SSIDs 16 16 16 16 16
MESH Yes, multi Hop, Auto 
Yes, multi Hop, Auto MESH Yes, multi Hop, Auto MESH Yes, multi Hop, Auto MESH Yes, multi Hop, Auto MESH
MESH
Ports 4 x GE, one with PoE Out 1 x GE 2 x GE 2 x GE; one with PoE Out 2 x GE; one with PoE Out
Power POE in, or DC POE in, or DC POE in, or DC

17
 1/9/2019

Wi-Fi for Enterprises and Service Providers

ENTERPRISE WI-FI HOME ROUTER MARKET

Enterprise Wi‐Fi SP Managed SP Managed Consumer Purchased

Public Wi‐Fi
Managed by IT, MSPs Enterprise Wi‐Fi Home Routers Self‐ managed Routers

✓ ✓ ✓ ✓
SERVICE PROVIDER WI-FI

Enterprise Wi‐Fi:   Managed Enterprise Wi‐Fi  Wireless ISP and ISP managed 

 Small Medium Businesses
Focused on  Industrial
 Education, Hospitality,
Retail, Events
 Managed by VARs, SIs or Service Indoor Home routers
Providers (ISPs, Cable Companies  More focus on Wireless ISPs
Public Wi‐Fi
 Indoor & Outdoor Public Wi‐Fi,
Rural Public Wi‐Fi

Access Point Naming Convention

E501S
AP CLASS
AP TYPE SPECIALIZED AP
E : Enterprise
EVEN: Indoor (Optional)
R : Residential
ODD: Outdoor S : Sector
W : Wallplate
E4xx, E6xx : indoor Skipped otherwise
E5xx: Outdoor

18
 1/9/2019

ISP Managed Home Router overview

PoE to PMP 450 
or ePMP SM WiFi PoE VoIP
Single, 2.4, 
Cambium ✓
Single band 
2.4 GHz 802.11n
802.11n
Dual band 
Single, 2.4, 
✓
802.11ac
–
802.11n
Dual band, 
Cambium ✓
802.11ac
Dual band, 
4LAN Ports 2 Phone Ports
– ✓
802.11ac
Dual band, 
– –
802.11ac
Desktop Internet TV Printer Network  FAX Phone
Storage

Enterprise Indoor overview

RF Security
• 802.11a/b/g/n/ac • HTTPS, SNMPv3, Firewall, NAT, Client 
• MIMO and MU‐MIMO isolation 
• 2.4/5GHz • Secure Configuration Store, 
• 2x2 and 4x4 versions Time based access
• Max TX power = 25dB (2.4, 5 GHz) Guest Access
Physical • Built‐in Hotspot, Interop with third Party Hotspot 
WISPr, Rate‐limiting (per client/per WiFi)
• Ceiling, Wall, Desk mount • 802.1x, EAP‐SIM/AKA, Hotspot 2.0
• Software controlled LED
WiFi
• Operating Temp  0‐45 C • WPA‐TKIP, WPA2 AES, 802.11i
Installation • Auto‐channel selection, WMM
• Installable shoes for table mount • 16 SSIDs, 256 Users
• Detached back‐plate for easy  Management
ceiling mount • Cloud/NOC Management, Autonomous 
Ports operation
• 802.3af PoE Gigabit • Quick troubleshooting
Ceiling, wall, or desktop  • GUI, SNMPv3, CLI
mount options

19
 1/9/2019

Enterprise Outdoor Overview

RF Ports
• 802.11a/b/g/n/ac  • 802.3af PoE Gigabit
• Dual band: 2.4, 5 GHz  • 2 output power options
• 2x2 MIMO, Omni and Sector (a) Canopy or (b) 802.3af PoE out
• Max TX power Operations
• 28dBm @ 2.4GHz,  • Max. Capacity: 256/512 users, 16 SSIDs
• 29dBm @ 5 GHz • Software controlled front LED
• LTE Coexistence filter • cnMaestro controller managed
Physical
• Ceiling, Wall, Desk mount
• Software controlled LED
• Operating Temp  0‐45 C
Same basic software 
Installation
• Installable shoes for table mount capabilities as Enterprise 
• Detached back‐plate for easy wall  Indoor since both are built 
mount off the same codebase.

Cloud based architecture

New UI Architecture Distributed Process Highly Scalable 

Support of Various Devices Architecture
• Distributed Processes, 
Message‐bus, Database
Distributed 
Message‐bus • Redundancy
Instant Discovery of APs
• Traditional SNMP Discovery 
is Slow and Requires Firewall  Distributed 
Configuration Database
• Cambium Devices Instantly 
Discovered communicating 
over HTTPS

ISP ISP ISP

A B C

Multi‐Tenancy
• Cambium Cloud Serves Multiple ISPs Securely
• ISPs can Serve Multiple Networks and Customers with Privacy 
and Security

20
 1/9/2019

Centralized Management and Operations ……All from your 

single Cambium 
See the status of all  account
Quickly find a  your devices
device using the  • PTP
Search function. • Point‐to‐Multipoint
• WiFi

Click to focus 
on problematic 
devices

Use Networks and Towers 
to organize your system.  
Devices are automatically 
organized hierarchically.

Centralized Troubleshooting
Preloaded Status of all the 
component of end to end 
network ‐ from mobile device 
having problem to the 
John Smith
backhaul

Remote Packet 
Capture and RF 
analysis tools

Easily identify the 
mobile device 
through their names 
and manufacturer

21
 1/9/2019

Section 2: Cambium cloud-Managed Wi-Fi portfolio

Question #1 Section #2: Lab

What can you tell me about Based on a client scenario,

the following radio based on what Cambium Networks
how it is named? Wi-Fi components will you
require?
A. E502S
B. R201

Section 3

Install and Configure

cnPilot

22
 1/9/2019

Section 3: Install and Configure cnPilot

After completing this section you will

be able to:
 Install a Cambium Networks
Wi-Fi product
 Connect to a Cambium Networks
Wi-Fi router to configure
 Troubleshoot common wireless
issues using on-device tools as
well as the cloud.

cnPilot LEDs

cnPilot™ E400, E500, E501S, E502S cnPilot E410, E600   (single LED)

Orange Powered up,  Orange Powering up

system starting up
Green Powered up, system operational

Green Powered up, 
system operational Managed by cnMaestro Controller or 
Blue
autopilot

Orange Not connected to  ePMP 1000 Hotspot

cnMaestro Power Green Powered up
Controller
Eth1 Green Link up
Green Connected to and  Blinking Link activity
managed by 
cnMaestro Eth2 Green Link up
Controller Blinking Link activity

23
 1/9/2019

Zero Touch Provisioning

Planning, installation, configuration,

and release notes are all available on
Cambium Support Center.

 Set up the cnPilot Access Point

IP address.
 DCHP Server (Preferred)
 Manually Configuring the IP

Note: The AP will register with cnMaestro Controller.

Section 3: Check Point

After completing this section you will

be able to:
 Install a Cambium Network Wi-Fi
product
 Connect to a Cambium Network
Wi-Fi router to configure
 Troubleshoot common wireless
issues using on-device tools as
well as the cloud.

24
 1/9/2019

Section 4

Onboarding to
cnMaestro Controller

Section 4: Onboarding to cnMaestro Controller

After completing this section you will be able to:

 Create a cnMaestro Controller Account and
add Administrators
 Onboard a Cambium cnPilot router to
cnMaestro Controller Cloud and place them
in a network
 Configure devices with AP Groups and
WLANs
 Interpret the wireless settings for each band
 Locate advanced radio settings
 Explain the difference between on premise
and cloud cnMaestro Controller

25
 1/9/2019

cnMaestro Controller: Connecting the unconnected

Free value  Planning
Network Management
added 
service
Inventory Management
Wi‐Fi Controller cnMaestro
Support & Warranty Services
Controller
From 2m to 245km | Indoor to Outdoor
Long Distance: PTP 650, 820 Distribution Access: PMP 450, ePMP Edge Access: cnPilot

Home + Small 
Business
Outdoor
‐ Single Band
‐ Dual Band

Indoor
Point to Point Point to Multipoint 802.11n, 802.11ac Indoor & Outdoor

cnMaestro Controller: Network Management…Simplified

Cloud Manager
cnMaestro
Local 
On‐Premise NOC

• Devices discover cnMaestro Controller

• Firewall-friendly -- all traffic over HTTPS
• Access from anywhere using a standard Web browser
• Full visibility from tower to edge
• Easy to create an account and get started!

26
 1/9/2019

cnMaestro Controller On-Premise Deployment

• cnMaestro Controller Installed in Local Virtualization Frameworks Supported

Data Center • Bare Metal Hypervisor
• Same Functionality as Cloud Service • VMware ESXi
• Desktop Virtualization
• Distributed as a Virtual Machine • VMware Workstation
• Packaged as an OVA (Open Virtualization Archive) • Oracle VirtualBox

• All components available in a single image

cnMaestro Controller On-Premise vs. Cloud

• Administrators
• Device Connectivity
• Onboarding
• Device Image Management
• cnMaestro Controller Software
Update
• Server Management
• Command Line Interface (CLI)

27
 1/9/2019

cnMaestro Controller: Benefits

Quick to Get Started  Create your cloud account and start onboarding 

Access from Anywhere
With a Standard Web
Browser
Scalable
Rich Feature Set
your devices
 No servers to purchase, setup, update, or manage
 No need for a VPN or a Java web client
 Supports individual cnMaestro Controller accounts 
up to 10,000 devices
 Customers can have multiple accounts
 Leverage the cloud to  manage 100,000s devices
 Designed for wireless networks
 End‐to‐end management of your Cambium network

cnMaestro Controller: Adaptive Architecture – 3 ways to deploy

1
Cloud
Local breakout (LBO)
Freedom!      cnMaestro

cnPilot APs

2 cnMaestro
Local Controller
controller

Full Control   Tunnel

Internet
Clients
3 autoPilot
Local breakout (LBO)
Autonomous

28
 1/9/2019

cnMaestro Controller: Architecture

• Devices Contact cnMaestro

Controller
• HTTPS Protocol
• NAT/Firewall: No Problem
• Edge Router Allows Outgoing
Packets

Wireless LAN Configuration

• Up to 16 WLANs on E400 and 8 on

ePMP 1000 Hotspot
• Each WLAN has its own:
• Name (SSID)
• Security Configuration
• Pre-shared keys
• RADIUS authentication
• MAC authentication
• VLAN
• Guest Access Policy
• Other policies such as ACLs, Rate-limit,
Access Schedules

29
 1/9/2019

cnMaestro Controller: Creating an Account

You Try It…

1. Create a User account on
test.cloud.cambiumnetworks.com
2. Add a Company account for the
course devices
3. Open the Dashboard
4. Open online help

cnMaestro Controller: Features

Hierarchical Dashboards Bulk Image Upgrade

AP Group and WLAN 
Advanced Troubleshooting Configuration

Notifications Maps and Map Modes

Device Inventory Zero Touch Onboarding

Statistics, Trending, and Reporting Multiple Administrators

30
 1/9/2019

cnMaestro Controller: Dashboard

cnMaestro Controller: AP Groups and WLANs

• AP Groups: shared device configuration

• WLANs: shared wireless network configuration
• cnPilot Enterprise and Home

Note: You need different WLANs and AP Groups for Home and Enterprise

31
 1/9/2019

Provisioning using DHCP / Config Polling

• cnPilot Enterprise can poll a

configuration file over the network and
apply new configuration on change
• Two ways of specifying file location
• Multiple triggers for polling
• Provisioning file is a set of key=value
pairs in plaintext

Section 4: Check Point

 Create a cnMaestro Controller Account

and add Administrators
 Onboard a Cambium cnPilot router to
cnMaestro Controller Cloud and place
them in a network
 Configure devices with AP Groups and
WLANs
 Map the AP Group to an Access Point
 View device override settings
 Interpret wireless settings for each band
 Locate advanced radio settings
 Explain the difference between on
premise and cloud cnMaestro Controller

32
 1/9/2019

Section 5

Additional cnMaestro
Controller Capabilities

Section 5: Software Updates Using cnMaestro Controller

After completing this section you will be able to:

 Update device software using cnMaestro
Controller
 Explain AutoRF Management and each
mode
 Explain the role of off Channel Scan
 List the differences between ACS and
AutoRF
 Define the concept of Band Steering
 Explain the challenge of airtime fairness
and options to resolve

33
 1/9/2019

cnMaestro Controller: Software Update

The Software Update feature allows users to deploy the latest software images to devices. Software
updates can be started at any level in the Device Tree, and individual devices can be selected for update.

Navigate Level in Device Tree
OVA Update Package Update
Select Device Type
• Includes complete virtual  • Includes cnMaestro
machine Controller software only
• Infrequent (every couple  • Replaces cnMaestro Select Image Version
months) Controller software
• New OVA installed on  • No data export required Select Devices to Update
virtualization  • Download package and 
infrastructure install through cnMaestro
• Manual export / import  Controller  Add to Active Jobs
of data from old to new • Only used for minor 
updates
Run Update

cnMaestro Controller: Firmware Upgrade Process

1. Upload firmware to master AP from browser GUI
2. Click Upgrade All Devices
a) Master AP will download firmware to others
b) All APs will upgrade their firmware, reporting back status periodically to master
3. Click Reboot All Devices to restart, and to activate new firmware.
4. (optional) click Upgrade next to any one device to upgrade just its firmware (Eg: 
replacement AP).

NOTE: AP needs 20‐25MB of free memory to cache the firmware file. Post upgrade if 
not rebooting immediately, delete the cached firmware file. 

34
 1/9/2019

cnMaestro Controller: Auto RF Management

Auto Channel Select  Individual AP scans list of channels and picks the best one
Auto RF  Group of APs periodically scan channels. Coordinate to 
assign non‐overlapping channels and avoid excess cell 
overlap (reduce tx power)
Interference avoidance  Trigger channel change if interference is above threshold 
for particular duration

Benefits:
 Automatically configure channel & power
 Choose appropriate channel to minimize interference and maximize throughput
 Choose optimal power for coverage while minimizing interference
 Constantly monitor operating channel and react appropriately when performance is not as per 
required standards

cnMaestro Controller: Auto RF Modes

Centralized Autonomous

• Channel & Power assignment is handled by  • Suitable for very large scale networks of 
a leader access point 1000’s of access points
• Suitable for networks with up to 128 access  • Decision is taken autonomously by every 
points single access point
• Data is collected by all access points and  • Every access point collects data and makes 
sent to a leader decision on channel and power by itself
• Leader makes the decision on best channel  • All neighboring APs including our own are 
and power for every access point treated as source of interference

35
 1/9/2019

cnMaestro Controller: Auto RF Modes Power Assignment

Centralized Power Assignment Autonomous Power Assignment

• We are always monitoring current channel  • Operates on max power by default
and keep track of our own neighboring APs • No power reduction based on neighbors
• When we have no neighbors on the current  • AP can be configured to use a specific power 
operating channel, maximum power is  if max power is not suitable
chosen
• When we have neighbors and if they are 
above ‘RSSI threshold’, we reduce power 
by 1dB.  
• Happens every 3 minutes 

cnMaestro Controller: Off Channel Scan

• Performed every configured ‘Off

channel period’
• A configured number of ‘samples’ are
taken and APs switch channel every
configured ‘interval’
• A special broadcast probe is sent
when we go off channel which is
used for discovering neighbors
• Channel load and interfering sources
are identified on all channels

36
 1/9/2019

cnMaestro Controller: Interference Avoidance

• Once chosen, channel is fixed for channel hold time period

• OCS happens only on configured period
• Interference avoidance constantly monitors current channel and forces a
channel change if required
• Run every 10 seconds
• Configured number of samples are taken
• If the channel is not usable for over a configured usage percentage for number
of samples, avoidance kicks in
• Forces an off channel scan
• New channel is assigned based on collected data

cnMaestro Controller: Auto RF Configuration

• AutoRF Configuration is done on a

per radio basis
• Exists under Configuration > Radio
• Configured separately for 2.4GHz
and 5GHz radio
• Channel needs to be ‘Automatic’ for
AutoRF channel assignment
• Power needs to be ‘Auto’ for AutoRF
power assignment

37
 1/9/2019

cnMaestro Controller: ACS and AutoRF

Currently ACS and AutoRF are independent. ACS both scheduled and polled work irrespective of AutoRF 
configuration.  Disable scheduled / polled ACS when AutoRF is enabled. The Initial channel upon boot‐up is chosen 
by ACS.  AutoRF then monitors and chooses appropriate channel.

Enable ACS and Interference

Enable Auto RF when
Avoidance when

• Non‐overlapping channels can be  easily  • APs are deployed with many overlapping 
found cells
• APs are located at a distance from each  • Dense small cell deployments
other so there is low self‐interference For example
For example • >3 indoor AP deployments
• 1‐3 AP indoor deployments • Small cell outdoor deployments like 
• Sparse outdoor deployments like parks,  stadiums
beaches

cnMaestro Controller: Band Steering

Band steering is a technology that detects whether or not the wireless client is dual-band
capable, and if it is, it will push the client to connect to the less congested 5GHz network. It does
this by actively blocking the client's attempts to associate with the 2.4GHz network.

5 GHz
2.4 GHz
2.4 GHz

5 GHz
5 GHz

Dual‐Radio 
AP

38
 1/9/2019

cnMaestro Controller: Band Steering

• Clients tend to connect to the first radio they discover.

• 2.4GHz is a narrower (fewer channels), crowded (legacy devices) and slower
(no 802.11ac benefits) band.
• User experience would be better if clients are ‘nudged’ towards the 5GHz radio
of the AP.
• Typical implementation: Don’t respond to Probes and Association attempts on
2.4GHz from new clients and give it a chance to go to 5GHz.
• Persistent clients are allowed on to 2.4GHz.

• If 5GHz is fairly heavily loaded, clients are allowed on 2.4GHz

cnMaestro Controller: Data Rate Tweaking

• APs support several data rates that clients use based on their capability and
connection quality.

• A client at 1Mbps or 2Mbps is using up shared airtime and reducing the efficiency of
the cell.

• Disabling lower data rates in radio configuration ensures that such clients are dropped
off rather than struggle and maintain a poor connection. For the greater good.

• Depending on client mix and capability minimum rate of 12Mbps could help improve
cell efficiency.

• CAVEAT: if you have very old devices (11b-only) they will be unable to connect unless
data rates such as 5.5 or even 1 or 2Mbps are enabled. So check client mix.

39
 1/9/2019

cnMaestro Controller: Airtime Fairness

• Problem:
• Wi-Fi is a shared medium, all clients
compete for access.
• A 11g client has a nearly equal shot at
getting access to the medium than a
‘fast’ 11n client.
• Each 11g transmit takes up airtime that a
11n client could have sent a lot more
data in (higher modulation, aggregation,
wider channel usage etc).
• Solution:
• Throttle the slower clients in the
presence of traffic from higher data rate
clients. More data is transmitted in the
same amount of time over that AP.

Section 5: Check Point

After completing this section you will be able to:

 Update device software using cnMaestro
Controller
 Explain AutoRF Management and each
mode
 Explain the role of off Channel Scan
 List the differences between ACS and
AutoRF
 Define the concept of Band Steering
 Explain the challenge of airtime fairness
and options to resolve

40
 1/9/2019

Section 6

Monitoring Using
cnMaestro Controller

Section 6: Monitoring using cnMaestro Controller

After completing this section you will

be able to:
 Investigate and acknowledge
issues using alarms
 Troubleshoot common deployment
issues
 Interpret common reports

41
 1/9/2019

cnMaestro Controller: Monitoring Dashboard

Section 6: Check Point

 Open the AP dashboard and verify the

status information
 View Inventory dashboard
 View notifications and explain the
difference between Events and Alarms
 Interpret the Alarm page
 Download latest firmware
 Create a software update job, add to
queue and update lab device software
 Access available reports
 Use the API to export report data

42
 1/9/2019

Section 7

Troubleshooting

Section 7: Troubleshooting

After completing this section you will

be able to:
 View dashboards to determine
status of the system
 Drill down to device level details
 Run Wi-Fi Analyzer
 View device logs and run packet
capture

43
 1/9/2019

cnMaestro Controller: General troubleshooting steps

 Dashboard – check RF quality

 Dashboard client table – check SNR (Excellent >40dB, poor performance below 20dB)
 Run WiFi analyzer
 Is the client able to associate and stay associated? (Check unconnected client table)
 Does the client have an IP address?
 Use on-device packet capture with filters to isolate problem to wireless interface /
Ethernet interface
 Wireless captures using other tools (Wireshark on MacBook | Omni peek)
 Use cnMaestro Controller troubleshooting page to get a comprehensive view of the
wireless backhaul and access
 If you need to contact Cambium support make sure you download Tech Support data

cnMaestro Controller: Troubleshooting

44
 1/9/2019

Section 7: Check Point

 View dashboards to determine status of

the system
 Drill down and view device level details
 Run Wi-Fi Analyzer
 Open device logs
 Start Packet Capture
 Create a Cambium Networks
Community Login

Section 8

Setting Up Guest
Access

45
 1/9/2019

Section Guest Access

After completing this section you will

be able to:
 Explain the guest access
functionality
 Configure a basic guest access
splash screen

cnMaestro Controller: Guest Access

“Wi-Fi is equally or more effective at

making patrons feel welcome than
other amenities such as magazines,
community bulletin boards, candy or
water”
Brendin Research

46
 1/9/2019

cnMaestro Controller: Guest Access

cnMaestro Controller allow you to

provide internet access to 3rd parties.
• Click to sign on
• Freemium | Free Service
• Voucher based
• Payment portal
• Integration with other systems
• Username / password with RADIUS
backend
• SMS Authentication
• Social Login

cnMaestro Controller: Guest Access – Hotspot 2.0

• Wi-Fi Certification Passpoint

• Secure and seamless public access
over existing service provider public
Wi-Fi network
• Wireless client can discover whether
AP supports their home service
provider
• AP authenticates client against
various home provider’s system
• No need to advertise all SSIDs
• Encrypted communications

47
 1/9/2019

Section 8: Check Point

 Create a free Access portal that allows

users to connect for 30 minutes
 Create a guest access splash page
 Configure the device for guest access
with rate time and byte limits

Section 9

AP Installation Notes

48
 1/9/2019

Indoor APs : Wall and Ceiling Mounts

Indoor APs : T-Bar mounting (AP backplate, or on Bracket)

49
 1/9/2019

Outdoor AP: Use of Surge Protection During Installation

Section 10 (Optional)

AUTOPILOT : AP as a
Controller

50
 1/9/2019

AUTOPILOT : AP as a Controller

After completing this section you will

be able to:
 Explain the value added features
inside the AP
 Explain the concept of Autopilot
 Configure APs for Autopilot and
Monitor them
 Define the role of meshing
 List Use Cases when the AP should
be used as a Controller

What is Autopilot

AP as a controller
• In a small network (up to 32 APs)
one of the APs acts as a controller
for:
• Configuration of all APs
• Aggregating Statistics from all APs
• Aggregating Events from all APs
• Currently independent of cnMaestro
Controller
• APs managed just by the Master-AP
• Future plans for cnMaestro Controller
integration for backup and services

51
 1/9/2019

Why would you use Autopilot

• Optimal for small networks that

• do not want to use cloud
• do not want to install on-premises
cnMaestro Controller on a server
(cost, extra hardware etc)
• Does not include all cnMaestro
Controller features
• SMS Authentication, Payment
Gateway etc

Master AP Function

• Some memory and CPU Capacity Numbers

dedicated to autopilot
functionality (depending on size
of network)
• No functions removed, can
service wireless clients on its
own radio even when it is a
Master-AP.
• Configured by user. Should be
set on one AP.
• 32 APs in total
• One Master‐AP managing up to 31 
others
• APs can be mixed types (E400, E500, 
E501 all in one network if necessary)
• 1000 clients
• Statistics tracked and managed for 
upto 1000 clients
• 16 SSIDs
• Can be grouped into 4 wlan‐groups.

52
 1/9/2019

Autopilot Initial Setup

• Any AP Firmware with version > 3.4.2

• Any cnPilot Enterprise AP
• No special licenses or different
firmware

53