Configure Cambium Networks Devices

The following instructions outline how to setup a Cambium network for the Smart WiFi Platform.  This guide covers configuring RADIUS profiles and guest access settings. This guide assumes that your Cambium equipment is already operational and with a live network ready to configure for Guest WiFi. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform.

1. Login to your CnMaestro account.
2. Click on Configuration icon to the left and click on WiFi Profiles.
3. Click on the WLANs tab at the top
4. Press the Edit button to the right of your desired WLAN
5. WLAN Tab
   • Client Isolation- Local
   • cnMaestro Managed Roaming: Enabled
6. AAA Servers Tab
   • • • RADIUS Authentication Servers
         1. Host 1: This will be provided to you
         2. Port: 1812
         3. Secret: This will be provided to you
         4. Host 2: This will be provided to you
         5. Port: 1812
         6. Secret: This will be provided to you
         7. Timeout: 10
         8. Attempts: 3
       • RADIUS Accounting Servers
         1. Host 1: This will be provided to you
         2. Port: 1813
         3. Secret: This will be provided to you
         4. Host 2: This will be provided to you
         5. Port: 1813
         6. Secret: This will be provided to you
         7. Timeout: 10
         8. Attempts: 3
         9. Accounting Mode: Start-Interim-Stop
         10. Accounting Packet: Enable Accounting-On messages
       • Advanced Settings
         1. Server Pool Mode: Failover
         2. NAS-Identifier: This will be provided to you
         3. Dynamic VLAN: Unchecked
7. Guest Access Tab
   • Enable: Checked
   • Portal Mode:  External Hotspot
   • Access Policy: Radius
   • External Page URL: This will be provided to you
   • External Portal Type: Standard
   • Success Action: Redirect user to External URL
   • Prefix Query Strings in Redirect URL: checked
   • Redirect URL: This will be provided to you
   • Session Timeout: 86400
   • Inactivity Timeout: 43200
   • Whitelist: Add an entry for each of the wildcard walled garden entries found in the default walled garden list and any additional entries provided by support.
8. Press Save
9. If your AP Group does not Auto Sync you will need to schedule configuration updates for your APs.