Configure Cambium Networks Devices

The following instructions outline how to setup a Cambium network for the Smart WiFi Platform.  This guide covers configuring RADIUS profiles and guest access settings. This guide assumes that your Cambium equipment is already operational and with a live network ready to configure for Guest WiFi. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform.

  1. Login to your CnMaestro account.
  2. Click on Configuration icon to the left and click on WiFi Profiles.
  3. Click on the WLANs tab at the top
  4. Press the Edit button to the right of your desired WLAN
  5. WLAN Tab
    • Client Isolation- Local
    • cnMaestro Managed Roaming: Enabled
  6. AAA Servers Tab
        • RADIUS Authentication Servers
          1. Host 1: This will be provided to you
          2. Port: 1812
          3. Secret: This will be provided to you
          4. Host 2: This will be provided to you
          5. Port: 1812
          6. Secret: This will be provided to you
          7. Timeout: 10
          8. Attempts: 3
        • RADIUS Accounting Servers
          1. Host 1: This will be provided to you
          2. Port: 1813
          3. Secret: This will be provided to you
          4. Host 2: This will be provided to you
          5. Port: 1813
          6. Secret: This will be provided to you
          7. Timeout: 10
          8. Attempts: 3
          9. Accounting Mode: Start-Interim-Stop
          10. Accounting Packet: Enable Accounting-On messages
        • Advanced Settings
          1. Server Pool Mode: Failover
          2. NAS-Identifier: This will be provided to you
          3. Dynamic VLAN: Unchecked
  7. Guest Access Tab
    • Enable: Checked
    • Portal Mode:  External Hotspot
    • Access Policy: Radius
    • External Page URL: This will be provided to you
    • External Portal Type: Standard
    • Success Action: Redirect user to External URL
    • Prefix Query Strings in Redirect URL: checked
    • Redirect URL: This will be provided to you
    • Session Timeout: 86400
    • Inactivity Timeout: 43200
    • Whitelist: Add an entry for each of the wildcard walled garden entries found in the default walled garden list and any additional entries provided by support.
  8. Press Save
  9. If your AP Group does not Auto Sync you will need to schedule configuration updates for your APs.

Disclaimer on hardware configuration guides in the KB:

This equipment has been integrated and tested in our labs with the Marketing4WiFi using the firmware versions below.

Active S/W Version 3.11.1-r2

LIMITED HARDWARE SUPPORT: Hardware manufacturers frequently make changes to firmware, controllers and GUI’s. The information below may be out of date or images may be different and is to be used as a general reference guide. We do offer additional limited support to help with trouble-shooting and we highly recommend that you have a hardware support agreement and/or access to a hardware support engineering representative from the manufacturer.

Updated on June 16, 2023

Was this article helpful?