cnPilot Enterprise AP Beta Release Notes

ePMP1000 Hotspot, cnPilot E400, cnPilot E500

System Release 3.0

Sections Included:

Supported Platforms
Supported Features
Problems Corrected
Known Limitations
Technical Support

cnPilot Enterprise AP Release Notes

CAMBIUM NETWORKS

Introduction
This document provides information for the Cambium Networks ePMP 1000/cnPilot Enterprise AP system
release 3.0.
The information in this document is subject to change without notice. The recommendations, technical data,
configurations and statements in this document are believed to be reliable and accurate, but are presented
without implied or express warranty. Users must take full responsibility for their applications of any product
specified in this document. The information in this document is proprietary to Cambium Networks Ltd.

pmp-1456 August 2016

cnPilot Enterprise AP Release Notes

CAMBIUM NETWORKS

Supported Platforms
The following table provides details on the supported platforms:

Model #/HVIN

Part #

Description

C000100P400A

C000100W400A

C000100P401A

C000100W401A

C000100P402A

C000100W402A

C000100P403A

C000100W403A

C000100P404A

C000100W404A

C050900A021A

C005095H021A

C050900A023A

C005095H023A

C058900A122A

C005095H122A

C050900A221A

C005095H221A

C024900A021A

C024095H021A

C024900A221A

C024095H221A

cnPilot E500
Outdoor

PL-E500INTA-US

cnPilot E400 (FCC) 802.11ac dual band concurrent

Enterprise class ceiling mount access point with PoE
injector with cord and CAT5 Ethernet cable
cnPilot E400 (EU) 802.11ac dual band concurrent
Enterprise class ceiling mount access point with PoE
injector with Cord and CAT5 Ethernet cable
cnPilot E400 (AUS, NZ) 802.11ac dual band concurrent
Enterprise class ceiling mount access point with PoE
injector and CAT5 Ethernet cable
cnPilot E400 (BR) 802.11ac dual band concurrent
Enterprise class ceiling mount access point with PoE
injector and CAT5 Ethernet cable
cnPilot E400 (ROW) 802.11ac dual band concurrent
Enterprise class ceiling mount access point with PoE
injector and CAT5 Ethernet cable. No Country Cord
ePMP 1000 hotspot (ROW, no cord) 802.11n 5 GHz
Single Band WLAN access point
ePMP 1000 hotspot (EU) 802.11n 5 GHz Single Band
WLAN access point
ePMP 1000 hotspot (FCC) 802.11n 5 GHz Single Band
WLAN access point
ePMP 1000 hotspot (ROW, EU Cord) 802.11n 5 GHz
Single Band WLAN access point
ePMP 1000 hotspot (US cord) 802.11n 2.4 GHz Single
Band WLAN access point
ePMP 1000 hotspot (EU cord) 802.11n 2.4 GHz Single
Band WLAN access point
E500 (FCC) Outdoor 2x2 Integrated Gigabit 11ac access
point with PoE Injector

cnPilot E500
Outdoor

PL-E500INTA-EU

E500 (EU) Outdoor 2x2 Integrated Gigabit 11ac access

point with PoE Injector

cnPilot E500
Outdoor

PL-E500INTA-RW

E500 (ROW) Outdoor 2x2 Integrated 11ac access point

with PoE Injector, No country cord

pmp-1456 August 2016

cnPilot Enterprise AP Release Notes

CAMBIUM NETWORKS

Supported Features
The following table lists the features that are supported in ePMP 1000/cnPilot Enterprise AP:
Feature

Capacity

Security

Client Traffic
Management

Guest Access

Wired bridging and

routing services

Troubleshooting
Tools
Management

cnPilot E400/E500
WLANs: 16
Clients: 127 for 11ac radio and 256 for 11n radio
ePMP 1000 Hotspot
WLANs: 8
Clients: 127
Open
WPA-PSK, WPA2-PSK (Pre-shared Keys)
WPA-Enterprise, WPA2-Enterprise (802.1x with EAP-TLS, EAPTTLS, EAP-PEAP, EAP-SIM, EAP-AKA)
MAC Authentication (Static list, RADIUS based)
Rate limit upstream and downstream per-client, per-WLAN
Scheduled WLAN access (time-based SSID)
VLAN trunking support (Static VLAN, RADIUS assigned VLAN)
Access Control Lists (IP and MAC based ACLs)
DNS based Access Control (DNS based whitelist, blacklist)
Captive portal splash pages
Multiple authentication options (click-through, RADIUS)
WISPr interoperable
Walled Garden Support

pmp-1456 August 2016

NAT, port forwarding

DHCP Server
DNS proxy server
Firewall, DoS attack prevention
Connectivity test tools (ping, traceroute)
Packet Capture for traffic analysis
WiFi Analyzer for radio/802.11 analysis
Support for cnMaestro cloud based onboarding with certificate
validation for cnPilot E400/E500 and ePMP 1000
Enterprise class CLI accessible over Telnet and SSH
On-Device GUI (http, https)
SNMP v2c, v3 based monitoring

cnPilot Enterprise AP Release Notes

CAMBIUM NETWORKS

New features introduced in this release

This section lists the new features introduced in system release 3.0:
Feature

Products

Description

Passpoint

cnPilot E400/E500, ePMP

1000

The Passpoint (Hotspot 2.0) feature provides

WPA2 hotspot network access and online sign
up. For more details, see Passpoint.

L2TPv2 tunnel

cnPilot E400/E500

Access points are now capable of creating

layer 2 L2TPv2 tunnels. For more details, see
L2TPv2 tunnel.
LDAP guest access authenticates a guest user
from Lightweight Directory Access Protocol
(LDAP) server like Active Directory (AD) as the
backend database. For more details, see LDAP
guest access.

LDAP guest access

cnPilot E400/E500, ePMP

1000

Mesh Recovery

cnPilot E400/E500, ePMP

1000

Mesh recovery feature is used to recover the

failure mesh client node. For more details, see
Mesh recovery.

Multi-Hop mesh

cnPilot E400/E500, ePMP

1000

Multi-hop mesh is used to extend the range for

longer distances. For more details, see Multihop Mesh.

cnPilot E400/E500, ePMP

1000

Airtime Fairness is a solution on access points

(AP) to increase the performance of 11n and
11ac clients (HT clients) in the presence of
legacy 11abg clients. For more details, see
Airtime Fairness.

Airtime Fairness

Passpoint
Passpoint enables a secure, automatic connection experience for users and supports operator goals of
leveraging Wi-Fi technology for data offload of cellular networks. The Passpoint feature is configurable per
WLAN.
To configure passpoint feature using CLI:
In wlan scope use passpoint command
To configure passpoint feature using UI:
In WLAN configuration page, click Passpoint tab to configure passpoint.

pmp-1456 August 2016

cnPilot Enterprise AP Release Notes

CAMBIUM NETWORKS

Airtime Fairness
Legacy clients need more air time to transmit/receive the data compared to HT clients (11n and 11ac clients).
Because of this the overall throughput of the HT clients falls down. Enabling this feature improves the
performance of HT clients by throttling the legacy clients.
By default, Airtime Fairness is disabled on all the radios.
To enable Airtime Fairness per radio,
1. Navigate to Configure > Radios and select the radio.
2. Select the Enable Airtime Fairness checkbox.

LDAP guest access

When the user enters a valid username and password on the web authentication login page and clicks
Submit, the user is authenticated based upon the credentials submitted and a successful authentication
from the backend database (LDAP in this case). The web authentication system then displays a successful
login page and redirects the authenticated client to the requested URL.

AP configuration
In WLAN configure page, select Guest Access tab and perform the following:
1. Select Access Policy as LDAP.
2. In the BaseDN field, if user domain name is corporation.com, then enter dc=corporation and
dc=com.
3. In UserDN field, enter the distinguished name (DN) of the subtree in LDAP server that contains a list
of all the users. For example, ou=organizational unit and dc=corporation, dc=com.
In Services configure page,
Enter the IP address of the LDAP server and its port number.

L2TPv2 tunnel
The L2TPv2 tunnels are created with external routers such as Cisco 7200 series or Microtiks RB750r2,
RB3011 (or any other router which provides L2TPv2 tunnel concentration capability).
To create L2TPv2 tunnel using CLI:

tunnel l2tp
no shutdown
remote-ip <ip-addr>
auth admin
To create tunnel mode per WLAN,

host (config)# wireless wlan<id>

host (config-wlan-1)# tunnel-mode
To create L2TPv2 tunnel using UI:
1. Navigate to Configure > Networks page

pmp-1456 August 2016

cnPilot Enterprise AP Release Notes

CAMBIUM NETWORKS

2. Select L2TP Tunnel tab

3. Select Enable checkbox.
4. Enter Remote IP and Authentication Info details.
To create tunnel mode per WLAN,
Navigate to Configure> WLAN page and provide the details.

Multi-hop mesh
Multiple-Hop mesh allows the administrator to increase the range of the meshed network by daisy chaining
wireless backhaul links across multiple Access Points. Note that since the mesh radio would typically
receive, then transmit, on the same channel, throughput after each hop would degrade by 50-60%. However,
for hard to cable areas the multi-hop mesh might be the only way to provide connectivity to clients.

Wired-Connection >=== AP1 ...(mesh)... AP2 ...(mesh)... AP3

Configuration
AP1:

Wlan1
<< mesh base>>
AP2:

Wlan1
{
<<mesh client>>
}
Wlan2
{
<<mesh base>>
}
AP3:
<<mesh client>>

Mesh recovery
Mesh recovery can be used in two cases.
Recover a mesh AP that was stranded from the network because of a mismatched configuration in
radio, Mesh SSID or security passphrase.
An AP with default configuration, running firmware version 3.0.
Mesh Base:
On mesh base user needs to configure mesh recovery profile in one of the WLAN
<<mesh recovery>>

pmp-1456 August 2016

cnPilot Enterprise AP Release Notes

CAMBIUM NETWORKS

Mesh Client:
On mesh client mesh recovery profile will be configured when it is out of box case with no backhaul
connection or when mesh client lost connection with the mesh base.
On the mesh client, the user does not need to configure anything, mesh recovery is enabled by default.

Problems Corrected (System Release 3.0)

This section lists the problems corrected in this release of ePMP 1000/cnPilot Enterprise AP:
Tracking

Product

Description

FLCN-1292

cnPilot
E400/E500,
ePMP1000

Customer has to struggle to configure Mesh clients using default IPs. [Plug &
Play Concept is missing]

FLCN-1333

cnPilot
E400/E500,
ePMP 1000

Configuration backup should be supported to recover mesh link in case of

configuration error.

FLCN-1674

cnPilot
E400/E500,
ePMP 1000

IP/MAC validation failed in ACL rules.

FLCN-1741

cnPilot
E400/E500,
ePMP 1000

Tx power for Russia country code should be equal to Ukraine.

FLCN-1742

cnPilot
E400/E500,
ePMP 1000

Client count was not displayed properly.

Known Issues (System Release 3.0)

This section lists the known issues and limitations in this release of ePMP 1000/cnPilot Enterprise AP:
Tracking
FLCN-1144

FLCN-1162

Product

Description / Workaround

cnPilot
E400/E500,

On-device GUI graphs are not populated when there are 20 clients with
20Mbps of traffic

ePMP 1000

Workaround: Use cnMaestro for historical graphs and statistics.

cnPilot
E400/E500,

Export of very large configuration files (over 60KB) fails when done through
the device GUI.

ePMP 1000

Workaround: Use cnMaestro for configuration management.

pmp-1456 August 2016

cnPilot Enterprise AP Release Notes

Tracking
FLCN-1450

CAMBIUM NETWORKS

Product

Description / Workaround

cnPilot E500

The power LED glows GREEN when the device is powered UP.
Workaround: None

FLCN-1637

FLCN-1786

cnPilot
E400/E500,

The special characters such as $h!@#$%^&*() are not supported in

hostname.

ePMP 1000

Workaround: Use any characters other than the special characters.

cnPilot
E400/E500,

Intermittently we observe that the show config command is stuck on the CLI.
Workaround: Press ctrl+c and try again.

ePMP 1000

pmp-1456 August 2016

cnPilot Enterprise AP Release Notes

CAMBIUM NETWORKS

Technical Support
For technical support, see
http://www.cambiumnetworks.com/support

Cambium Networks Community Forum

Join the conversation
http://community.cambiumnetworks.com

pmp-1456 August 2016

10