Gateway & AP – Set-Up Guide
CAMBIUM cnMaestro On-Premises Version 5.3x

This chapter describes how to configure Cambium cnMaestro On-Premises Version 5. Before proceeding further with the configuration, you need to configure Network Station with a domain and a gateway as described in Adding a New Gateway.

Prerequisites

The prerequisites required for configuration are:

  • Cambium cnMaestro on Premises Controller up and running version 5.3.x or later
  • Cambium cnMaestro Cloud connectivity, up and fully syncronised
  • AP compatible with cnMaestro On-Premises, already adopted
  • Network Station version > 12.0.340

Step 1

Inside Network Station, select your Gateway, click the dropdown menu, and choose Edit.

Step 2

Expand the General Data section.

Step 3

In the Hardware Type field, choose Cambium Network cnMaestro On Premises or cnPilot Standalone

Configuring and installing the SSL Certificate

Step 1

Log in to your Cambium cnMaestro Controller.

Step 2

Navigate to Administration > Server > SSL Certificates.

Step 3

Click Import.

Step 4

Select Import Signed Certificate and New Key, then upload your certificate in PEM format.

Step 5

Click View to verify that the certificate is properly loaded and with your CA authority.

Configuring the WLAN

Step 1

Now, go to Network Services > Guest Access Portal > Configuration.

Step 2

Set a valid hostname that points to your Controller IP and matches the certificate imported in the previous steps.

Step 3

Now, go to Shared Settings > Wi-Fi Profiles, select your AP Group, and click Add WLAN at the bottom right.

Step 4

Configure the WLAN section with your preferred network settings, including your SSID (we recommend using the same name as the Network Station’s Gateway, e.g. Cambium1111, Figure Gateway Name).

Figure Gateway Name

Step 5

In the AAA Server section, enter your Network Station IP for both the Authentication and Accounting Server fields, then enter your Radius secret.

Step 6

Under Advanced Settings, select Custom from the NAS-Identifier dropdown and enter your Network Station’s Gateway name.

Step 7

Now move to Guest Access, flag Enable, and select External Hotspot. Then tick RADIUS, and choose HTTPS.

Step 8

In External Page URL, enter your Gateway URL: https://YOUR_PLATFORM_FQDN/gatewayid/1234 (replace 1234 with your Network Station’s gateway ID Figure Gateway ID)

Figure Gateway ID

Step 9

Enable External Portal Post Through cnMaestro and set External Portal Type to Standard.

Step 10

Then, select Redirect User to Original URL and flag Prefix Query Strings in Redirect URL.

Step 11

Under Pre-Login Allowed Domains, add the Walled Garden entries downloaded from your Network Station, along with the hostname chosen for Cambium cnMaestro (configured earlier).

To know the accurate and relevant Walled Garden you need to add one by one, access your Network Station platform and click the contextual dropdown menu of your gateway. Select Download Walled Garden to get a .txt file with your accurate walled garden list as shown Figure Download Walled Garden.

Figure Download Walled Garden

Step 12

Click Save, and ensure your AP synchronises successfully.