Cambium Wi-Fi in Schools

[FragglePete]

I have my on prem cnMaestro up and running in it's initial state....

 

Things that I noted on mysetup so far.

• Had to convert to Hyper-V .VMDX files using Starwind V2V. - On start up of the VM on the Hyper-V console after a few seconds of a blinking cursor I just get a blank screen... No setup, nothing.  It was however claiming an IP address from DHCP and using a web browser I could connect to the WebUI.  Need to see if I can SSH to the box or something if need be?
• I initially got 'Cookies Missing' when entering my Cambium ID and Onboard Key, but I used the link to login in the Anchor account again, changed the onboard key to something else, saved and tried again.  After a short while it seemed to sort itself out and let me do the initial password setup, name, etc.
• It looks slightly different from the version we have in the Cloud.  I know On Prem is 6.0.0., and cloud is 6.2.0 - icons are slightly different.  But then noticed in the Administration > Settings > General - the account view defaults to 'Access and Backhau'l whereas it should just be on 'Enterprise'.  Set that, and all looks the same.
• You need to import the WLANs first and then followed by the AP Groups in the 'Shared Settings > Wi-Fi Profiles' - but these seemed to have come across ok
• I've not 'adopted' any APs just yet, that's the next step but I need to RTFM before I jump in too much as this stage. 

Just comparing side by side now before I move on to the next step, but that won't be until early next week for me now.

 

Pete

 

 

[Andycat]

54 minutes ago, smarties11 said:

 

I think the insurmountable issue here is ongoing compliance.

 

A local controller will solve the immediate problem of the cloud controller going dark, but how long will it be before a security vulnerability is discovered in either the controller itself or the WAP firmware? If that vulnerability carries a CVSS score of 7.0 or higher, there goes any realistic chance of maintaining Cyber Essentials or Cyber Essentials Plus accreditation.

 

Unless there is a buy out from a competitor I don't see how schools will be able to continue with this solution for anything more than a stop gap.

 

Out of interest, how many others are in the same position as me, having had a brand-new Cambium deployment installed as recently as August? I'm massively regretting not sticking with Ruckus now 😭

We're in the same position, but we're struggling configuring it to a decent standard. No support available and we're shooting in the dark. Unusable in most of the building.

[smarties11]

1 hour ago, Andycat said:

We're in the same position, but we're struggling configuring it to a decent standard. No support available and we're shooting in the dark. Unusable in most of the building.

 

Oh no 😞 Our experience on the deployment side has been really positive. And it's performing really well. But that's not much use if the whole ecosystem is shelved 😞

 

Is there anything I can help with? Could it be interference - have you scaled back your radio power at all. Redway recommended the following for us (with an AP in each classroom)

- 2.4ghz - 8 to 14dBm, 20Mhz channel width

- 5ghz - 11 to 17dBm, 40Mhz channel width (with channels 144 and 165 turned off)

- 6ghz - 12 to 18dBm, 80Mhz channel width

[Andycat]

8 minutes ago, smarties11 said:

 

Oh no 😞 Our experience on the deployment side has been really positive. And it's performing really well. But that's not much use if the whole ecosystem is shelved 😞

 

Is there anything I can help with? Could it be interference - have you scaled back your radio power at all. Redway recommended the following for us (with an AP in each classroom)

- 2.4ghz - 8 to 14dBm, 20Mhz channel width

- 5ghz - 11 to 17dBm, 40Mhz channel width (with channels 144 and 165 turned off)

- 6ghz - 12 to 18dBm, 80Mhz channel width

We'll give it  a try thanks!

[FragglePete]

Looks like some official guidance has come out, but if your using Cambium if you got to get this done before 1st Oct.

 

https://community.cambiumnetworks.com/t/guidance-for-cnmaestro-enterprise-customers-17-sep-2026/108849

 

Pete

[synaesthesia]

Just seen that too, that's something a bit more positive to wake up to today and hopefully means I get a bit of sleep this weekend

Reassuring news that they are planning to release a non-anchored version if any rescue/buyout fails.

[snagrat]

What virtual spec are people using? I know the instructions show the recommendation but we don;t push any authentication through cnMaestro so really only need management.

 

Looking to host in Azure but don't want to spend too much monthly on it

[synaesthesia]

2 cpu 4gb here on hyperV but haven't started putting much on it yet - can't see it needing any more than that though for a standard secondary wifi deployment

[snagrat]

How did you convert it from ova to vhdx?

[synaesthesia]

Extract ova using 7zip or similar to get the vmdks then used starwinds V2V to convert from VMDK to VHDX

[andy_nic]

Managed to get the local controller setup, profiles imported only losing the ability to use Microsoft365 for BYOD sign in.  Exported a list of AP's S/N all other information going to test an AP import. 
but in the FAQ
What happens if Anchor is discontinued or disconnected?
cnMaestro on-premises will continue to work, but you will not be able to add or delete any devices.
If the Enterprise business is acquired by an entity, they will guide you at that time.
"If not, we plan to release an on-premises image for Wi-Fi and Switches only, without any dependency on the Cloud Anchor or licenses."

This bit would be an issue if we cannot add to on-prem without the anchor or delete from the cloud version after the 1st. Also is the "on-premises image for Wi-Fi and Switches only, without any dependency on the Cloud Anchor or licenses" is this going to be upgrade to the local one we are advised to setup? or another install instance. Not used the on prem one for over 4 years when I moved it to the cloud.   I guess its wait for more information.

[synaesthesia]

No idea, just a matter of waiting. If it goes belly up on or near the 1st and they don't manage to do anything re the cloud reliance, then indeed we're fairly stuffed. But already by this point it's worth considering you may need to replace your wifi infrastructure sooner rather than later.

[RobFuller]

Not sure if this helps anyone, but I noticed that switches and APs on the same VLAN as the controller appear to auto-discover for onboarding, which is quite neat.

It might not matter if we can't add any more devices after the 1st (note to self: get the spares added before then!), but it could save someone a bit of time.

[synaesthesia]

Indeed they do. 

Our supplier (part of CtC) is Redway Networks and they've been awesome - they've suggested to us to hold fire until Wednesday in the hope we either get more guidance or of course buyout/rescue, but as we've done the bulk of testing then getting everything over to local between then and the 1st is simple enough.

 

[Andycat]

Our supplier is in meetings with Purdicom this afternoon, and says that things are still changing by the hour. Also told us to hold off with On Prem.

[DavR]

Just had an email saying that my RMA for a faulty AP has been processed, and I should get the new one on Monday! 

 

I'll believe it when I see it, but if so, that's one less worry with this situation. 

[snagrat]

2 minutes ago, DavR said:

Just had an email saying that my RMA for a faulty AP has been processed, and I should get the new one on Monday! 

 

I'll believe it when I see it, but if so, that's one less worry with this situation. 

You probably will as they have stock lying around to get rid of now

[DavR]

1 minute ago, snagrat said:

You probably will as they have stock lying around to get rid of now

 

Well, quite. 

 

I also put out the feelers to buy a spare AP, but haven't had anything back yet.

[JazzFlute]

Definitely not going to move to an on-premises solution without any official announcement. However, I do want to make sure our cloud setup is up to date and organised, just in case data needs to be backed up and downloaded in the future. There is simply too much going on at the moment, especially with it still being the start of the school year.

[RobFuller]

I've tested migrating one switch and, to be fair it wasn't too bad. For now I'm going to hold fire, hope for the best and rely on what is clearly a certified business strategy.😄