RELEASE NOTES

cnPilot Enterprise Wi-Fi Access

Points

System Release 4.1

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Introduction
This document provides information for Cambium Network’s cnPilot Enterprise AP system release 4.1.

The information in this document is subject to change without notice. The recommendations, technical data,
configurations and statements in this document are believed to be reliable and accurate but are presented
without implied or express warranty. Users must take full responsibility for their applications of any product
specified in this document. The information in this document is proprietary to Cambium Networks Ltd.

Note

System Release 4.1 is primarily meant for use on networks with IPv6/MAC Fallback
Authentication (MAB) / Policy Based Automation Auto-VLAN support or on networks with
the cnPilot devices e425H and e505 (Supported from System Release 4.0).

Note

Hostnames are only allowed to have the following characters 0-9/a-z/A-Z and hyphens. If
a previously configured hostname had other characters, those characters will be replaced
with hyphens.

Upgrade/Downgrade Guidelines

Section-1
Mandatory image extension verification to follow while upgrade/downgrade from 4.x to 4.x, 3.11.x to 4.x
and vice versa. This procedure is applicable on cnMaestro (On-Premise) and standalone AP UI/CLI. This
procedure will not be applicable on cnMaestro-Cloud since image upgrade/downgrade is automatic for
APs.

Note

This recommendation is applicable for all models of cnPilot APs.

2782_001v000 (September 2020) 2

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Please refer the below table and validate the image extension w.r.t the version before proceeding to
upgrade/downgrade.

Version Image
extension
From To

4.x 4.x CIMG

4.x 3.11.x IMG

3.11.x 4.x **IMG

**Note: For cnPilot e410/e430/e510/e600 and e700 APs, refer additional instructions mentioned in
Section-2 before proceeding to upgrade/downgrade.

Section-2

Attention

To upgrade/downgrade from 3.11.x (3.11.4-r9 /3.11.3.1-r4/3.11.3-r7 etc.) to 4.x (4.0/4.1 and

later subsequent images) and vice versa, mandatorily use 3.11.4.1-r3 and 4.1-r3 image.
Ignoring this suggestion can lead to failure in loading the image and resulting in flashed
partition (backup partition) getting corrupted. To recover the corrupted partition, user
may have to contact Cambium Support team.

For example: Image upgrade from 3.11.4-r9 to 4.1-r3, steps to follow are:

1. First upgrade the AP from 3.11.4-r9 to 3.11.4.1-r3

2. Then upgrade the AP from 3.11.4.1-r3 to 4.1-r3

Similarly, image downgrade from 4.1-r3 to 3.11.4-r9

1. First downgrade the AP from 4.1-r3 to 3.11.4.1-r3

2. Then downgrade the AP from 3.11.4.1-r3 to 3.11.4-r9

Note

This recommendation is only applicable for cnPilot e410/e430/e510/e600 and e700.

2782_001v000 (September 2020) 3

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Supported platforms
The following list provides details on the supported platforms in this release of cnPilot Enterprise AP:

cnPilot Indoor Outdoor 802.11ac 802.11ac

Access Point Wave 1 Wave 2

e400

e410

e425H

e600

e430

e505

e510

e700

e500

e501S

e502S

Note

Certain features may not be available on this product line and will be called out explicitly
where not applicable.

2782_001v000 (September 2020) 4

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Features introduced in 4.1 release

This section lists the supported features along with the enhancements introduced in 4.1 release of cnPilot
Enterprise AP:

Note

System release 4.1 includes all the features of System release 3.11.4.1 along with new
features and enhancements.

New features
Following are the new features supported in this release:
• Policy Based Automation Auto-VLAN (PBA)

• MAC Authentication Bypass on Ethernet Ports (MAB)

Policy Based Automation Auto-VLAN (PBA)

The PBA is intended to support zero-touch detection and configuration of connected Cambium devices
(cnPilot AP's). New Cambium vendor specific LLDP TLVs are introduced starting with cnMatrix Release 2.1.0
to support “pushing” PBA policy data from Cambium devices (e.g. cnPilot) to cnMatrix. The new PBA TLVs
are implemented as an extension to the LLDP standard, using its flexible extension mechanism. From a
functional perspective, cnMatrix, acting as the upstream device, includes the PBA Authentication TLV in the
regularly generated LLDPDUs for a port. The downstream device (e.g., cnPilot) receives the PBA
Authentication TLV and, if policy action data (e.g., VLANs, native VLAN) is present to be pushed to cnMatrix,
a PBA device settings TLV is constructed and added to the LLDPDU for the port.

Configuration:

Syntax:

Example:

2782_001v000 (September 2020) 5

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Note

By default, lldp-pba-auth-key is enabled.

Note

If more than 20 VLANs are configured on the AP, PBA does not function as expected.

MAC Authentication Bypass on Ethernet Ports (MAB)

MAB is used to authenticate non 802.1x capable devices (e.g. Printers, IP Phones). cnPilot should have the
MAC authentication bypass support on the ethernet ports. This is mostly useful for the hospitality
deployment, when a headless device or wired devices connecting directly to the ethernet port needs to be
getting authenticated with the backend authentication server. After successful authentication, RADIUS
based VLAN can be pushed from the AAA server.

2782_001v000 (September 2020) 6

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Enhancements (System release 4.1)

This section lists the enhancements in this release of cnPilot Enterprise AP:

Tracking Product Description

FLCN-7648 All BLE Location packet content changes:

• Detection Time from string to UNIX EPOCH format.

• RSSI values from string to integer format.

• Spelling mistake correction in string ble_discoverd_clients to

ble_discovered_clients.

FLCN-6829 All Display IPv6 address of the wireless client as part of the techdump
support.

FLCN-6526 All Additional IPv6 troubleshoot options (Ping6, DNS6 and Traceroute6)
added in UI.

FLCN-5560 All Additional NAS identifier options are added in RADIUS for WLAN.

FLCN-4511 e600 Added UI support for LTE dongle configuration.

2782_001v000 (September 2020) 7

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Fixed issues (System release 4.1)

This section lists the issues fixed in this release of cnPilot Enterprise AP:

Tracking Product Description

FLCN-7605 All With Guest access enabled in IPv6 network deployment, AP is rebooting
with low memory.

FLCN-7378 e425 Security support in Beacon is disabled after certain days of uptime (i.e.
Beacon corruption).

FLCN-7017 All Proto ACL rule for TCP and UDP was not working in
e410/e430/e510/e600/e700.

FLCN-6848 e410 Kernel panic - mod probe: page allocation failure.

FLCN-6748 e500 AP radio displayed OFF - missing firmware event during reboot/reset.

FLCN-6629 e700 Kernel panic observed on mesh client AP while re-discovering mesh base.

FLCN-6602 All Mesh clients did not scan 173 channels.

2782_001v000 (September 2020) 8

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Known issues (System release 4.1)

This section lists the known issues in this release of cnPilot Enterprise AP:

Tracking Product Description / Workaround

FLCN-8119 All With BLE feature enabled, upgrade initiated from cnPilot AP UI may fail
with the error message indicating “Upgrade failed: please retry”.

Workaround: Initiate upgrade operation from cnMaestro

FLCN-7809 e425H/e505 With MU location enabled, CPU utilization will be high, and AP may
reload.

Workaround: None

FLCN-6760 All Beacons miss observed when AP is operated in channel 179.

Workaround: None

FLCN-6560 All In WLAN profile, option to convert DHCP offer to unicast not working.

Workaround: Disable this option

FLCN-6461 All AP fragment IP packets with DF=1 bit set to 1 when PMTU is disabled.

Workaround: Enable PMTU

FLCN-6431 All Guest access redirection does not work when VLAN 1 interface is
removed.

Workaround: Do not remove VLAN 1 interface

FLCN-6417 All With DNS ACL enabled cnMaestro hosted guest access does not work.

Workaround: Whitelist the domain names to allow cnMaestro based

URLs.

FLCN-6405 All UDHCPD process will be restarting very frequently when request
option-all is not enabled on any L3 interface.

Workaround: Enable DHCP request option all at least on one interface.

FLCN-6091 e700, e600 Failed to login in member AP from CLI after changing the management
and e500 password twice in master AP GUI in autopilot mode only.

Workaround: None

FLCN-5823 Clients fails to connect to WLAN profile with 802.11r and EPSK
configuration.

Work around: Disable 11r feature

2782_001v000 (September 2020) 9

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Tracking Product Description / Workaround

FLCN-5264 All Changing VLAN 1 interface from DHCP client to Static IP configuration,
does not remove previously learned default gateway in route entry.

Workaround: Reboot the AP.

FLCN-5175 All With the RADIUS load balance option configured, if configured RADIUS
server is not reachable it will be excluded completely even when
RADIUS server comes back.

Workaround: Keep RADIUS server option as fail over method.

FLCN-4974 All AP sends wrong channel information on switching channel in case of

802.11k.

Workaround: Do not enable 802.11k with Auto-RF until this is resolved

in a new software release.

2782_001v000 (September 2020) 10

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Limitations (System release 4.1)

This section lists the limitations in this release of cnPilot Enterprise AP:

Tracking Product Description

FLCN-8180 All When AP Ethernet is in Trunk Mode with Native VLAN Tagged, the
VLAN information is not sent in PBA.

FLCN-8165 All GRE Tunnel over PPPoE is not supported.

FLCN-8157 All Auto-Pilot deployment is not supported with IPv6. Master and the
member AP cannot communicate over IPv6 as IPv6 feature is not
supported in Auto-Pilot mode.

FLCN-6211 All No support to add static IP on member APs in Auto-pilot mode.

FLCN-5775 All Cross cnPilot models are not recommended in Auto-Pilot deployment
mode.

FLCN-5740 e600 Gateway priority does not support WWAN interface.

2782_001v000 (September 2020) 11

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Appendix
Supported list of Wi-Fi features
The following table lists the features that are supported in cnPilot Enterprise AP.

Supported Features

Controller modes • Autonomous controller-less operations (E.g.: roaming)

• Cloud managed

• On-premise virtualized controller

Secure WLAN • WPA-TKIP, WPA2 AES, 802.1x

• 802.11w (Protected Management Frames)

Passpoint 2.0

Management Modes • cnMaestro cloud managed

• cnMasetro on-premises VM controller Managed

• Autopilot (AP as controller)

• Stand-alone with AP GUI (HTTP(s)), CLI (Telnet/SSH)

Authentication Secure web page, Radius based 802.1x including EAP-SIM/AKA,

EAP-PEAP, EAP-TTLS, and EAP-TLS
MAC authentication (local database or external RADIUS server).

Accounting Supports RADIUS based accounting to multiple AAAs.

Scheduled SSID Turn SSID ON/OFF on a daily/weekly/time of day basis.

VLAN • Dynamic VLAN assignment from Radius server.

• VLAN per SSID per user, VLAN load balancing

Data Limiting Dynamic rate limiting of client traffic per SSID & per client.

Subscriber QoS WMM

IP Protocols • IPv4

• IPv6

Client Isolation • Local

• Network-wide

2782_001v000 (September 2020) 12

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Supported Features

Controller-Less • Yes. 802.11r, opportunistic key caching supports enhanced

Fast Roaming roaming

• Disconnect for sticky clients

Auto-RF • Channel change based on channel utilization

• Channel change based on noise floor

• Channel change based on Packet Error Rate

DHCP Server

Firewall DoS protection

ACL L2, L3 or DNS based access control

Band Steering

Airtime Fairness

Tunneling • L2TP

• L2GRE
o Layer 2 GRE
o GRE over UDP
o Cambium GRE

• PPPoE

Tools • Packet Capture

• Wireless Sniffer

• IP Connectivity

• Wi-Fi Analyzer

• Tech Support (Logs)

Services • LDAP

• NAT Logging

• Location API

o BLE

o Neighbor APs

• Speed Test

• DHCP Option 82

2782_001v000 (September 2020) 13

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Supported Features

Certifications FCC, ETSI, CE

EN 60601-1-2 (Medical EMC)
UL2043 Plenum rated

Specifications
Please see the Specification Sheets listed on the Cambium Networks website for the most up to date
specifications: https://www.cambiumnetworks.com/resources/ .

2782_001v000 (September 2020) 14

cnPilot Enterprise AP Release Note CAMBIUM NETWORKS

Cambium Networks
Cambium Networks provides professional grade fixed wireless broadband and microwave solutions for
customers around the world. Our solutions are deployed in thousands of networks in over 153 countries, with
our innovative technologies providing reliable, secure, cost-effective connectivity that is easy to deploy and
proven to deliver outstanding metrics.

Our flexible Point-to-Multipoint (PMP) solutions operate in the licensed, unlicensed and federal frequency
bands, providing reliable, secure, cost effective access networks. With more than three million modules
deployed in networks around the world, our PMP access network solutions prove themselves day-in and day-
out in residential access, leased line replacement, video surveillance and smart grid infrastructure applications.

Our award-winning Point to Point (PTP) radio solutions operate in licensed, unlicensed and defined user
frequency bands including specific FIPS 140-2 solutions for the U.S. Federal market. Ruggedized for 99.999%
availability, our PTP solutions have an impeccable track record for delivering reliable high-speed backhaul
connectivity even in the most challenging non-line-of sight RF environments.

Cambium Networks’ solutions are proven respected leaders in the wireless broadband industry. We design,
deploy and deliver innovative data, voice and video connectivity solutions that enable and ensure the
communications of life, empowering personal, commercial and community growth virtually everywhere in the
world.

Feedback
We appreciate feedback from the users of our documents. This includes feedback on the structure,
content, accuracy, or completeness of our documents. To provide feedback, visit our support website.

Contacting Cambium Networks

Support website https://www.cambiumnetworks.com/support/

Main website https://www.cambiumnetworks.com/

Solutions enquiries https://www.cambiumnetworks.com/solutions/

Support enquiries https://www.cambiumnetworks.com/support/contact-support/

Repair enquires https://support.cambiumnetworks.com/

Telephone number list https://www.cambiumnetworks.com/contact-us/

Address Cambium Networks Limited,

Unit B2, Linhay Business Park, Eastern Road

Ashburton, United Kingdom, TQ13 7UP.

2782_001v000 (September 2020) 15