cnPilot Enterprise AP Release Notes

ePMP1000 Hotspot, cnPilot E400, cnPilot E500

System Release 3.1.1.1

Sections Included:
Supported Platforms
Supported Features
Problems Corrected
Known Limitations
Technical Support
cnPilot Enterprise AP Release Notes CAMBIUM NETWORKS

Introduction

This document provides information for the Cambium Networks ePMP 1000/cnPilot Enterprise AP system
release 3.1.1.1.

Version 3.1.1.1 is a minor release over 3.1.1 to address an issue with onboarding the Access Points into
cnMaestro On-Premises under some circumstances.

The information in this document is subject to change without notice. The recommendations, technical data,
configurations and statements in this document are believed to be reliable and accurate, but are presented
without implied or express warranty. Users must take full responsibility for their applications of any product
specified in this document. The information in this document is proprietary to Cambium Networks Ltd.

pmp-1515 December 2016 2

cnPilot Enterprise AP Release Notes CAMBIUM NETWORKS

Supported Platforms

The following table provides details on the supported platforms:

Model #/HVIN Part # Description

C000100P400A C000100W400A cnPilot E400 (FCC) 802.11ac dual band concurrent
Enterprise class ceiling mount access point with PoE
injector with cord and CAT5 Ethernet cable
C000100P401A C000100W401A cnPilot E400 (EU) 802.11ac dual band concurrent
Enterprise class ceiling mount access point with PoE
injector with Cord and CAT5 Ethernet cable
C000100P402A C000100W402A cnPilot E400 (AUS, NZ) 802.11ac dual band concurrent
Enterprise class ceiling mount access point with PoE
injector and CAT5 Ethernet cable
C000100P403A C000100W403A cnPilot E400 (BR) 802.11ac dual band concurrent
Enterprise class ceiling mount access point with PoE
injector and CAT5 Ethernet cable
C000100P404A C000100W404A cnPilot E400 (ROW) 802.11ac dual band concurrent
Enterprise class ceiling mount access point with PoE
injector and CAT5 Ethernet cable. No Country Cord
C050900A021A C005095H021A ePMP 1000 hotspot (ROW, no cord) 802.11n 5 GHz
Single Band WLAN access point
C050900A023A C005095H023A ePMP 1000 hotspot (EU) 802.11n 5 GHz Single Band
WLAN access point
C058900A122A C005095H122A ePMP 1000 hotspot (FCC) 802.11n 5 GHz Single Band
WLAN access point
C050900A221A C005095H221A ePMP 1000 hotspot (ROW, EU Cord) 802.11n 5 GHz
Single Band WLAN access point
C024900A021A C024095H021A ePMP 1000 hotspot (US cord) 802.11n 2.4 GHz Single
Band WLAN access point
C024900A221A C024095H221A ePMP 1000 hotspot (EU cord) 802.11n 2.4 GHz Single
Band WLAN access point
cnPilot E500 PL-E500INTA-US E500 (FCC) Outdoor 2x2 Integrated Gigabit 11ac access
Outdoor point with PoE Injector

cnPilot E500 PL-E500INTA-EU E500 (EU) Outdoor 2x2 Integrated Gigabit 11ac access
Outdoor point with PoE Injector

cnPilot E500 PL-E500INTA-RW E500 (ROW) Outdoor 2x2 Integrated 11ac access point
Outdoor with PoE Injector, No country cord

pmp-1515 December 2016 3

cnPilot Enterprise AP Release Notes CAMBIUM NETWORKS

Supported Features

The following table lists the features that are supported in ePMP 1000/cnPilot Enterprise AP:

Feature
cnPilot E400/E500
WLANs: 16
Clients: 127 for 11ac radio and 256 for 11n radio
Capacity
ePMP 1000 Hotspot
WLANs: 8
Clients: 127
Security Open
WPA-PSK, WPA2-PSK (Pre-shared Keys)
WPA-Enterprise, WPA2-Enterprise (802.1x with EAP-TLS, EAP-
TTLS, EAP-PEAP, EAP-SIM, EAP-AKA)
MAC Authentication (Static list, RADIUS based)
Client Traffic Rate limit upstream and downstream per-client, per-WLAN
Management Scheduled WLAN access (time-based SSID)
VLAN trunking support (Static VLAN, RADIUS assigned VLAN)
Access Control Lists (IP and MAC based ACLs)
DNS based Access Control (DNS based whitelist, blacklist)
Guest Access Captive portal splash pages
Multiple authentication options (click-through, RADIUS)
WISPr interoperable
Walled Garden Support
Wired bridging and NAT, port forwarding
routing services DHCP Server
DNS proxy server
Firewall, DoS attack prevention
Troubleshooting Connectivity test tools (ping, traceroute)
Tools Packet Capture for traffic analysis
WiFi Analyzer for radio/802.11 analysis
Management Support for cnMaestro cloud based onboarding with certificate
validation for cnPilot E400/E500 and ePMP 1000
Enterprise class CLI accessible over Telnet and SSH
On-Device GUI (http, https)
SNMP v2c, v3 based monitoring

New features introduced in system release 3.1.1

This section lists the new features introduced in system release 3.1.1:

pmp-1515 December 2016 4

cnPilot Enterprise AP Release Notes CAMBIUM NETWORKS

MAC Authentication Bypass

In this release, MAC authentication can be used to bypass Captive Portal. You can configure this using the
CLI and the UI.

Using CLI:

(cnPilot Enterprise AP) (configure)# wireless wlan <WLAN_ID>

(cnPilot Enterprise AP) (config-wlan-<WLAN_ID>)# guest-access mac-auth fallback

Using GUI:

Navigate to Configure > WLAN > Guest Access page and select MAC Authentication Fallback checkbox.

New features introduced in system release 3.1

This section lists the new features introduced in system release 3.1:

Feature Products Description

Layer-2 Over Generic Routing Encapsulation
cnPilot E400/E500 and
(L2GRE), also known as SoftGRE is a tunneling
ePMP Hotspot protocol that allows the Access Point to bridge
L2GRE all the wireless traffic from an SSID across
different Layer-3 networks to a GRE
concentrator.
Point-to-Point Protocol over Ethernet is a
cnPilot E400/E500 and
method for connecting the users on an
PPPoE ePMP Hotspot Ethernet to the Internet through a DSL line,
wireless device or a cable modem.
Location-API provides an interface with which
cnPilot E400/E500 and
a wireless client locationing engine can receive
ePMP Hotspot periodic updates of data such as MAC address
Location-API
and signal strengths of all the nearby wireless
clients.
cnPilot E400/E500 and With DNS logging enabled, the Access Point
ePMP Hotspot can generate syslogs of all DNS requests from
DNS Logging
the wireless clients, for analytics and reporting
purposes.

cnPilot E400/E500 and Access Points can now be used with Purple
Purple WiFi Support
ePMP Hotspot WiFis guest access solution.

cnPilot E400/E500 and Support for built-in username/password based

Internal Guest
ePMP Hotspot guest authentication, in addition to the external
Account
RADIUS authentication already supported.

pmp-1515 December 2016 5

cnPilot Enterprise AP Release Notes CAMBIUM NETWORKS

Feature Products Description

cnPilot E400/E500 Support for logging every NAT record

generated on the AP. Useful for reporting
NAT-Logging Internet access details of clients when the AP
is the gateway to the internet and performing
NAT.

Problems Corrected (System Release 3.1.1)

This section lists the issues fixed in this release of ePMP 1000/cnPilot Enterprise AP:

Tracking Product Description

FLCN-1973 Reinitialize GRE tunnel on local IP address changes.
cnPilot
E400/E500,
ePMP 1000
FLCN-2032 Added GUI support for configuring DSCP and PMTU over L2GRE tunnels.
cnPilot
E400/E500,
ePMP 1000
FLCN-2034 In Captive-Portal block all IPv6 traffic also, for un-authenticated guests.
cnPilot
E400/E500,
ePMP 1000
FLCN-2049 Show back-up partition information in CLI and GUI.
cnPilot
E400/E500,
ePMP 1000
FLCN-2050 Fix mss-clamping issues on epmp1000, make MSS configurable.
ePMP 1000
FLCN-2052 Fix handling of power and antenna gain when configuration is pushed from
cnPilot
cnMaestro.
E400/E500,
ePMP 1000
FLCN-2053 Fix issues with MAC-Authentication when used with WPA2-Pre-shared Keys.
cnPilot
E400/E500,
ePMP 1000
FLCN-2054 Fix issues with Captive-Portal authentication and Windows 10 Edge browser.
cnPilot
E400/E500,
ePMP 1000
FLCN-2058 Delay RADIUS Accounting-Start until IP address of client is known. Support
cnPilot
RADIUS FRAMED-IP Address attribute.
E400/E500,
ePMP 1000

pmp-1515 December 2016 6

cnPilot Enterprise AP Release Notes CAMBIUM NETWORKS

Known Issues (System Release 3.1)

This section lists the known issues and limitations in 3.1 release of ePMP 1000/cnPilot Enterprise AP:

Tracking Product Description / Workaround

FLCN- Drop in throughput on 5GHz with some clients when 802.11w/PMF is
cnPilot
1946 enabled. Workaround is to disable PMF. Fix will be made available in an
E400/E500 upcoming release.

FLCN- DHCP pool does not honor configured MAC binding as the clients get
cnPilot
2008 assigned an IP address other than the one configured.
E400/E500,
ePMP 1000

Technical Support
For technical support, see
http://www.cambiumnetworks.com/support

Cambium Networks Community Forum

Join the conversation
http://community.cambiumnetworks.com

pmp-1515 December 2016 7