Cambium Networks PMP 450 Series How to use

POINT TO POINT WIRELESS SOLUTIONS GROUP
Cambium
PMP / PTP 450
PMP 430 / PTP 230
PMP / PTP 100 Series
Release Notes
System Release 13.4

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 2 of 50
1INTRODUCTION
This document provides information for the Cambium Networks PMP/PTP 450, PMP 430,
PTP 230 and PMP/PTP 100 Series System Release 13.4.
Software updates for PMP products are available from:
https://support.cambiumnetworks.com/files
The information in this document is subject to change without notice. The
recommendations, technical data, configurations and statements in this document are
believed to be reliable and accurate, but are presented without implied or express
warranty. Users must take full responsibility for their applications of any product specified
in this document. The information in this document is proprietary to Cambium Networks
Ltd.
2PMP VARIANTS
System Release 13.4 is compatible with PMP/PTP 450, PMP 430, PTP 230 and PMP/PTP 100
Series modules. This document covers Release Notes for all equipment. For more
information on System Release 13.4, see:
https://support.cambiumnetworks.com/files
2.1 Embedded software
PMP / PTP 450
CANOPY134BUILDOFFICIAL_MIMO_DESAES_S.pkg3
PMP 430
DES Encryption: CANOPY134BUILDOFFICIAL_OFDM_DES.pkg3
AES Encryption: CANOPY134BUILDOFFICIAL_OFDM_AES.pkg3
PTP 230
DES Encryption: CANOPY134BUILDOFFICIAL_OFDM_DES.pkg3
AES Encryption: CANOPY134BUILDOFFICIAL_OFDM_AES.pkg3
PMP / PTP 100
DES Encryption: CANOPY134BUILDOFFICIAL_DES.pkg3
AES Encryption: CANOPY134BUILDOFFICIAL_AES.pkg3

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 3 of 50
2.2 Canopy Network Updater (CNUT) software
The latest version of CNUT should be used with 13.4. It can be found here:
http://www.cambiumnetworks.com/support/management-tools/cnut/
2.3 System Documentation
Provided with System Release 13.4 are five reference documents:
PMP / PTP 450, PMP 430, PTP 230, PMP 100 and PTP 100 Series Release Notes (This
document)
PMP 450 Planning Guide
PMP 450 Configuration and User Guide
PTP 450 User Guide
PMP 430 / PTP 230 Configuration and User Guide
PMP / PTP 100 User Guide
These documents are available at https://support.cambiumnetworks.com/files

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 4 of 50
3NEW FEATURES
The System Release 13.4 introduces the following new features:
Table 1 System Release 13.4 new features
Frequency
Products
Affected
Feature
Description
5.4 GHz
PTP 450
Listen-Before-Talk
(LBT) 5.4 GHz for
PTP 450
Allows configuration of Listen-Before-
Talk(LBT) ETSI for 5.4 GHz.
All
All
Security Banner
Enables the display of a security banner
and prompts user to accept security
requirements.
All
APs and
SMs only
RADIUS Change of
Authorization
Allows the user to change configuration
of SM via RADIUS while SM is in session.
All
All
RADIUS VSA for
Zero Touch
Adds support for using RADIUS VSA for
Zero Touch configuration.
All
APs and
SMs only
Microsoft RADIUS
support
PEAP is now supported as outer
authentication so that PEAP-MSCHAPv2
can be used to authenticate SM with
Microsoft RADIUS server.
3.5 /3.65
GHz
PMP/PTP
450
Custom frequency
configuration at 1
KHz raster
Allows the users to configure custom
frequency at 1 KHz raster for 3.5 and
3.65 GHz.
All
PMP/PTP
450, PMP
430, PTP
230
Extrapolated Link
Test
Estimate link throughput capacity
without service interruption by sending
few packets, and extrapolating results.
All
PMP/PTP
450
Frame Utilization
Statistics
Provides statistics of RF channel
utilization.
All
All
Last run time for
Link Capacity Test
This is an enhancement which displays
time stamp of last performed Link
Capacity Test.
All
PMP
450/430/1
00
Disable SM
authentication
Ability to disable SM authentication for a
SM connected via ICC (Installer Color
Code) to aid in Zero Touch Config.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 5 of 50
Frequency
Products
Affected
Feature
Description
All
PMP 450
AP
Interop SM
Registration
Allows the user to control whether PMP
430 SMs are allowed to register to PMP
450 AP’s.
All
All
Update the
SNMPv2c
community string
without reboot
Allows user to modify SNMP community
string without requiring reboot.
All
All
Event log for user
initiated reboot
Adds an event log entry for "user
initiated reboot" to the system log.
All
All
SNMP support to
do an AP Evaluation
from a SM
Provides an SNMP OID to force a SM to
rescan and do an AP Evaluation. This
performs the same functionality as the
clicking the "Rescan APs" button on the
SM's GUI.
5 GHz
PMP 450
Country code for
Malaysia
Allows operation within regulatory
allowances for Malaysia.
All
All
SNMPv3 Auth and
Privacy Password
length check
Requires that Auth and Privacy password
in SNMP setting is not less than 8 digits.
Note:
The user login name is case sensitive. It means that the login name can be
created as “ADMIN” and “admin” on the same radio.
Note:
The maximum uplink throughput for one VC is limited to 51 Mbps, when the
link is running with 5 ms frame period.
Note:
The User Authentication Method with RADIUS server will not work if AP is
running with 13.3 and SM is running with 13.4.
Please note that if AP and SM on same release i.e. 13.3 or 13.4, there will be
no issue with User Authentication Method.
Note:
PMP 400 radios are no longer supported and images are no longer included
in the OFDM CNUT package.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 6 of 50
Table 2 Features released previously but now are new to PMP/PTP 100
Frequency
Products
Affected
Feature
Description
All
All
Sector Spectrum
Analyzer
Allows the user to perform a sector wide
SA scan. The AP and the registered SMs
will go into a SA mode at the same time.
All
All
Read-only web user
Allows to create ‘Read-Only’ user account
where the user can view the configuration
but the user cannot make any changes
including the ability to reboot a radio.
All
All
SM to support 20
color codes
Support for number of color code
increased from 10 to 20 for all platforms.
All
All
Export of Session
Status
Allows to export session status from
AP/BHM web interface in XML format.
All
All
ICC indication and
CC Priority field in
Session Status
Displays SMs connected via Installation
Color Code (ICC) method and configured
Color Code (CC) Priority of respective
SMs.
All
All
HTTPS
Support for HTTPs enabled for all
platforms.
All
All
SNMPv3
Support for SNMPv3 enabled for all
platforms.
All
All
Enable/Disable
support for Telnet,
ftp and tftp
Allows to enable/disable telnet, FTP or
TFTP access for all platforms.
All
All
Import and export
of configuration file
Allows the user to configure a radio using
config file for all platforms.
All
All
DHCP Option 66
Allows automatic configuration of a radio
by downloading config file from a URL
provided via DHCP option 66.
All
All
Zero-touch Config
Use case for the config file feature which
allows the user complete configuration of
radio through a config file.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 7 of 50
3.1 Listen-Before-Talk (LBT) 5.4 GHz for PTP 450
In System release 13.4, the LBT 5.4 GHz is implemented for PTP series. This feature was
previously implemented on PMP in release 13.3 and is now implemented on PTP. BHM
listens during the RTG (Receive/Transmit Transition Gap). If the interference is detected,
the following frame is left empty, no symbol is used (not even the overhead symbols).
The BHS listens during the TTG (Transmit/receive Transition Gap) time. If interference is
detected, the BHS skips the whole Uplink frame, nothing is sent.
Web Management Interface
The alternate channels can be configured on the BHM (under the tab Configuration >
Radio). Same channel cannot be configured twice for Frequency Carrier, Alternate Channel
1 or 2.
Figure 1 LBT BHM configuration for 5.4 GHz
In order to enable LBT, the Regional and Country will have to be configured for an “Other
Regulatory/Other ETSI” or “Europe” followed by County that supports the ETSI standard.
This setting is available under Regional Settings tab of Configuration > General page.
Figure 2 LBT ETSI 5.4 GHz BHM Region and Country code
3.2 Security Banner
In system release 13.4, the security banner has been introduced. If enabled, the user has to
accept and acknowledge the security requirement before login into web management
interface.
This feature is supported for all PMP / PTP product series.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 8 of 50
Web Management Interface
The Security Banner is disabled by default. The user can view General Status configuration
and login to radio.
The user can enable Security Banner Configuration > Security > Security Banner tab.
Table 3 Security Banner
Attribute
Meaning
Enable Security Banner
during Login
Enable: The Security Banner Notice will be displayed
before login.
Disable: The Security Banner Notice will not be
displayed before login.
Security Banner Notice
User can enter ASCII (0-9a-zA-Z newline, line-feed are
allowed) text up-to 1300 characters.
User must accept
security banner before
login
Enable: login area (username and password) will be
disabled unless user accepts the security banner.
Disable: User can login to radio without accepting
security banner.
Once the security banner is enabled, the home login screen will be shown as below:

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 9 of 50
Figure 3 Login page - Security Banner
Note:
The user must accept “I have read, understood and accept the above
notice(s)” to proceed with login. The login button will not be enabled until
user accepts notice message.
Note:
The user is not allowed to save changes with empty Security Banner Notice if
the Security Banner is enabled. The user will be given a prompt stating
“Security Banner Cannot be empty”.
SNMP
Table 4 Security Banner SNMP objects
Name
OID
MIB
Access
Syntax / Description
enableSecuri
tyBanner
.1.3.6.1.4.1.161.19.
3.3.2.251.0
INTEGER
Read-write
1:enable, 0:disable
textSecurity
Banner
.1.3.6.1.4.1.161.19.
3.3.2.253.0
DISPLAYSTRIN
G
Read-Only
1200 characters of
Security Banner
acceptSecuri
tyBanner
.1.3.6.1.4.1.161.19.
3.3.2.254.0
INTEGER
Read-write
1: enable user must
accept before login,
0: disable, not
required.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 10 of 50
3.3 RADIUS Change of Authorization
Prior to 13.4 release, SM will get configuration parameters from a RADIUS server during
authentication process. This feature allows an administrator to control configuration
parameters in the SM while SM is in session. The configuration changes in SM are done
using RADIUS Change of Authorization method (RFC 3576) on the existing RADIUS
authentication framework for AP and SM. A typical use case could be changing the QOS
parameters after a certain amount of bandwidth usage by a SM.
The RADIUS CoA feature enables initiating a bi-directional communication from the
RADIUS server(s) to the AP and SM.
The AP listens on UDP port 3799 and accepts CoA requests from the configured RADIUS
servers. This CoA request should contain SM MAC address in ‘User-Name’ attribute as
identifier and all other attributes which control the SM config parameters. For security
reasons, a timestamp also needs to be added as ‘Event-Timestamp’ attribute. Hence the
time should also be synchronized between the RADIUS server(s) and the AP to fit within a
window of 300 seconds.
Once the configuration changes are applied on the SM, CoA-ACK message is sent back to
RADIUS server. If the validation fails, the AP sends a CoA-NACK response to the RADIUS
server with proper error code.
Note:
The RADIUS CoA feature will only enabled if Authentication mode is set to
RADIUS AAA.
Web Management Interface
The CoA Feature can be enabled or disabled under Configuration > Security >
Authentication Server Settings tab.
The feature is disabled by default.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 11 of 50
Table 5 RADIUS CoA configuration for AP
Attribute
Meaning
Authentication Mode
To enable CoA feature, the Authentication Mode should
be set to RADIUS AAA.
RADIUS Change of
Authorization
Enable RADIUS CoA: Allows to control configuration
parameters of SM using RADIUS CoA feature.
Disable RADIUS CoA: Disables RADIUS CoA feature.
SNMP
Table 6 RADIUS CoA SNMP object
Name
OID
MIB
Access
Syntax / Description
enableRadiu
sCoA
.1.3.6.1.4.1.161.19.
3.1.1.224
WHISP-APS-
MIB
read-write
0 - Disable RADIUS
CoA.
1 - Enable RADIUS
CoA.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 12 of 50
3.4 RADIUS VSA for Zero Touch
The RADIUS VSA (Vendor Specific Attributes) is updated for Zero Touch feature in system
release 13.4. This feature enables the ability for a SM to get its configuration via RADIUS
VSA. The RADIUS VSA is updated for an URL which points to the configuration file of SM.
The RADIUS will push the vendor specific attribute to SM after successful authentication.
The VSA contains URL of config file which will redirect SM to download configuration. If
there is any change in SM confirmation, the SM will reboot automatically after applying the
configuration.
The RADIUS VSA attributes concerning Zero Touch are as follows:
VSA Type String
Cambium-Canopy-ConfigFileImportUrl (29) string Maximum Length 127 characters.
Cambium-Canopy-ConfigFileExportUrl (30) string Maximum Length 127 characters.
The updated RADIUS dictionary can be downloaded from below link:
https://support.cambiumnetworks.com/files/pmp450/
Note:
The feature is not applicable to the AP.
3.5 Microsoft RADIUS support
This feature allows to configure Microsoft RADIUS (Network Policy and Access Services
a.k.a NPS) as Authentication server for SM and User authentication.
For SM Authentication, SM will user PEAP-MSCHAPv2 since NPS doesn't support TTLS
protocol.
For User Authentication, the Canopy software will use EAP-MD5 but the user has to do
certain configuration in order to enable EAP-MD5 on NPS.
Note:
All this configuration has been tested on Windows Server 2012
R2 version.
This feature is not supported on hardware board type P9 or lower
platforms.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 13 of 50
SM Authentication Configuration
Web Management Interface
There are no new configuration on AP. However SM has to be configured for PEAP
authentication protocol.
1. Go to Configuration > Security page
2. Select “eappeap” for Phase 1 attribute under tab AAA Authentication Settings.
Figure 4 EAPAPEAP settings
Note:
The Phase 2 will change automatically to MSCHAPv2 on select of Phase
1 attribute as EAP-PEAP. Other parameters of Phase 2 protocols like
PAP/CHAP will be disabled.
SNMP
Table 7 Microsoft RADIUS SNMP objects
Name
OID
MIB
Access
Syntax / Description
phase1
.1.3.6.1.4.1.161.19.
3.2.7.4.0
WHISP-SM-
MIB
read-write
2 - EAPAPEAP
phase2
.1.3.6.1.4.1.161.19.
3.2.7.5.0
WHISP-SM-
MIB
read-write
2 - EAPAPEAP
Note:
Please refer PMP 450 Configuration and User Guide for Windows Server
configuration and User Authentication configuration for Enabling EAP-MD5.
3.6 Custom frequency configuration at 1 KHz raster
This feature will allow users to configure custom frequency at 1 KHz raster. Prior to this
release, the custom frequency raster was 50 KHz.
In previous releases, the custom frequencies could be configured for 3356.10 MHz, 3302.35
MHz, 3680.40 MHz etc. whereas this feature allows to configure custom frequencies
3356.123 MHz, 3302.333 MHz, 3680.421 MHz etc. at granularity of 1 KHz.
This feature applies to 3.5 and 3.6 GHz radios only.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 14 of 50
Note:
If AP is running with 13.4 and transmitting at 1 KHz precision frequency,
the downgrade will be aborted.
If SM has ONLY 1 KHz precision frequencies selected in Custom Radio
Frequency Scan Selection List, the downgrade will be aborted. In
order to downgrade the radio successfully, at least one 50 KHz raster
frequency needs to be selected in Custom Radio Frequency Scan
Selection List.
AP and SMs will all need to be on at least release 13.4 to take advantage
of this feature.
SNMP
Table 8 Customer frequency list SNMP object
Name
OID
MIB
Access
Syntax / Description
addCustom
FreqList
.1.3.6.1.4.1.161.19.
3.3.2.53.0
WHISP-APS-
MIB2-MIB
read-write
Add Custom
Frequencies.
Frequencies list can
be separated by
commas. Max string
length entered can’t
exceed 128
characters.
RemoveCust
omFreqList
.1.3.6.1.4.1.161.19.
3.3.2.54.0
WHISP-APS-
MIB2-MIB
read-write
Remove Custom
Frequencies.
3.7 Extrapolated Link Test
This feature allows users to estimate the link capacity by sending few packets and
measuring link quality. This feature extrapolates the link capacity in terms of throughput
based radio quality during test. This is an approximation test to have minimal service
impact.
Note:
This is not supported for PMP/PTP 100
Web Management Interface
The test can be run from GUI menu Tools >Link Capacity Test by selecting
“Extrapolated Link Test”for Link Test Mode attribute.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 15 of 50
Table 9 Extrapolated link test
Attribute
Meaning
Link Test Mode
Select “Extrapolated Link Test” to run extrapolated link
test.
Current Subscriber Module
Select the SM or BHS from dropdown list on which the
“Extrapolated Link Test”to be performed.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 16 of 50
Figure 5 Extrapolated link test results

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 17 of 50
SNMP
Table 10 Extrapolated Link Test SNMP object
Name
OID
MIB
Access
Syntax / Description
linkTestMod
eBox
WHISP-BOX-
MIBV2-MIB
read-write
INTEGER
3.8 Frame Utilization Statistics
The Frame Utilization Statistics is a feature introduced for PMP 450 and PTP 450 in system
release 13.4 which helps the user to understand how effectively the RF channel is being
utilized. This feature allows to check Time Division Duplex (TDD) frame utilization pattern
and diagnose for any excessive usage in uplink or downlink direction.
This forms the first step for identifying the TDD frame utilization information. If the user
finds excessive utilization based on these statistics, the second step would be to take
several actions like sectorization, tuning the uplink/downlink ratio etc. to improve RF
channel utilization. The efficient use of TDD frame will help to achieve optimum
performance of link.
Note:
The backhauls (BHM and BHS) will have only the downlink scheduler based
statistics.
Web Management Interface
The test can be run GUI menu Statistics >Frame Utilization.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 18 of 50
Table 11 Frame utilization statistics
Attribute
Meaning
Frame Utilization Interval
Statistics Display interval
Selects how often the frame utilization statistics are
refreshed and displayed. The user can select display
interval as 1 minute (low interval), 5 minutes (medium
interval) or 15 minutes (high interval) based on
requirement.
Frame Utilization
Downlink
This indicates the percentage of downlink data slots used
against the maximum number of slots possible in
configured interval.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 19 of 50
Uplink
This indicates the percentage of uplink data slots used
against the maximum number of uplink slots possible in
configured interval.
Downlink Counts
Total
This indicates the sum of all downlink data slots used in
the configured interval.
Low Priority
The number of downlink data slots used for low priority
downlink traffic.
High Priority
The number of downlink data slots used for high priority
downlink traffic.
Broadcast/Multicast
The number of downlink data slots used for broadcast
and multicast traffic.
Canopy MAC
Acknowledgements
The number of downlink data slots used as ACKs.
Registration and Control
message slots
The number of downlink data slots used for registration
and other control messages.
Uplink Counts
Total
This indicates the sum of all uplink data slots used in
configured interval.
Low Priority
The number of downlink data slots used for low priority
uplink traffic.
High Priority
The number of downlink data slots used for high priority
downlink traffic.
Canopy MAC
Acknowledgements
The number of downlink data slots used as ACKs.
Maximum possible counts
Downlink
This indicates the maximum possible downlink data slots.
This is based on the configuration of Channel Bandwidth,
Frame period, uplink/downlink allocation, contention
slots and configured Statistics Display interval.
Uplink
This indicates the maximum possible uplink data slots.
This is based on the configuration of Channel Bandwidth,
Frame period, uplink/downlink allocation, contention
slots and configured Statistics Display interval.
Packet Discard counts

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 20 of 50
Ethernet indiscards
This indicates the number of Ethernet packets discarded
in the IN queue.
Ethernet outdiscards
This indicates the number of Ethernet packets discarded
in the OUT queue.
Radio indiscards
This indicates the number of packets discarded over radio
in the IN queue.
Radio outdiscards
This indicates the number of packets discarded over radio
in the OUT queue.
SNMP
Table 12 Frame Utilization Test SNMP Group objects
Name
OID
MIB
Access
Syntax / Description
whispApsFr
UtlStats
.1.3.6.1.4.1.161.19.
3.1.12
WHISP-APS-
MIB
-
-
whispApsFr
UtlStatsInter
valLow
.1.3.6.1.4.1.161.19.
3.1.12.1
WHISP-APS-
MIB
-
For low interval
whispApsFr
UtlStatsInter
valMedium
.1.3.6.1.4.1.161.19.
3.1.12.2
WHISP-APS-
MIB
-
For medium interval
whispApsFr
UtlStatsInter
valHigh
.1.3.6.1.4.1.161.19.
3.1.12.3
WHISP-APS-
MIB
-
For high interval
Table 13 Frame Utilization Test SNMP objects for low, medium and high intervals
Name
OID
Syntax / Description
Low Interval
Medium Interval
High Interval
frUtlHighTotalDow
nlinkUtilization
.1.3.6.1.4.1.161.19.
3.1.12.1.1
.1.3.6.1.4.1.161.19.
3.1.12.2.1
.1.3.6.1.4.1.161.19.
3.1.12.3.1
Percentage of total
downlink
frUtlLowTotalUplin
kUtilization
.1.3.6.1.4.1.161.19.
3.1.12.1.2
.1.3.6.1.4.1.161.19.
3.1.12.2.2
.1.3.6.1.4.1.161.19.
3.1.12.3.2
Percentage of total
uplink
frUtlLowTotalDown
linkSlots
.1.3.6.1.4.1.161.19.
3.1.12.1.3
.1.3.6.1.4.1.161.19.
3.1.12.2.3
.1.3.6.1.4.1.161.19.
3.1.12.3.3
Total downlink data
slots
frUtlLowDownlinkL
owPrioSlots
.1.3.6.1.4.1.161.19.
3.1.12.1.4
.1.3.6.1.4.1.161.19.
3.1.12.2.4
.1.3.6.1.4.1.161.19.
3.1.12.3.4
Number of data slots
used for downlink low
priority traffic