Cambium Networks PMP 450 Series How to use

POINT TO POINT WIRELESS SOLUTIONS GROUP
Cambium
PMP / PTP 450
PMP 430 / PTP 230
PMP / PTP 100 Series
Release Notes
System Release 13.4

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 2 of 50
1INTRODUCTION
This document provides information for the Cambium Networks PMP/PTP 450, PMP 430,
PTP 230 and PMP/PTP 100 Series System Release 13.4.
Software updates for PMP products are available from:
https://support.cambiumnetworks.com/files
The information in this document is subject to change without notice. The
recommendations, technical data, configurations and statements in this document are
believed to be reliable and accurate, but are presented without implied or express
warranty. Users must take full responsibility for their applications of any product specified
in this document. The information in this document is proprietary to Cambium Networks
Ltd.
2PMP VARIANTS
System Release 13.4 is compatible with PMP/PTP 450, PMP 430, PTP 230 and PMP/PTP 100
Series modules. This document covers Release Notes for all equipment. For more
information on System Release 13.4, see:
https://support.cambiumnetworks.com/files
2.1 Embedded software
PMP / PTP 450
CANOPY134BUILDOFFICIAL_MIMO_DESAES_S.pkg3
PMP 430
DES Encryption: CANOPY134BUILDOFFICIAL_OFDM_DES.pkg3
AES Encryption: CANOPY134BUILDOFFICIAL_OFDM_AES.pkg3
PTP 230
DES Encryption: CANOPY134BUILDOFFICIAL_OFDM_DES.pkg3
AES Encryption: CANOPY134BUILDOFFICIAL_OFDM_AES.pkg3
PMP / PTP 100
DES Encryption: CANOPY134BUILDOFFICIAL_DES.pkg3
AES Encryption: CANOPY134BUILDOFFICIAL_AES.pkg3

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 3 of 50
2.2 Canopy Network Updater (CNUT) software
The latest version of CNUT should be used with 13.4. It can be found here:
http://www.cambiumnetworks.com/support/management-tools/cnut/
2.3 System Documentation
Provided with System Release 13.4 are five reference documents:
PMP / PTP 450, PMP 430, PTP 230, PMP 100 and PTP 100 Series Release Notes (This
document)
PMP 450 Planning Guide
PMP 450 Configuration and User Guide
PTP 450 User Guide
PMP 430 / PTP 230 Configuration and User Guide
PMP / PTP 100 User Guide
These documents are available at https://support.cambiumnetworks.com/files

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 4 of 50
3NEW FEATURES
The System Release 13.4 introduces the following new features:
Table 1 System Release 13.4 new features
Frequency
Products
Affected
Feature
Description
5.4 GHz
PTP 450
Listen-Before-Talk
(LBT) 5.4 GHz for
PTP 450
Allows configuration of Listen-Before-
Talk(LBT) ETSI for 5.4 GHz.
All
All
Security Banner
Enables the display of a security banner
and prompts user to accept security
requirements.
All
APs and
SMs only
RADIUS Change of
Authorization
Allows the user to change configuration
of SM via RADIUS while SM is in session.
All
All
RADIUS VSA for
Zero Touch
Adds support for using RADIUS VSA for
Zero Touch configuration.
All
APs and
SMs only
Microsoft RADIUS
support
PEAP is now supported as outer
authentication so that PEAP-MSCHAPv2
can be used to authenticate SM with
Microsoft RADIUS server.
3.5 /3.65
GHz
PMP/PTP
450
Custom frequency
configuration at 1
KHz raster
Allows the users to configure custom
frequency at 1 KHz raster for 3.5 and
3.65 GHz.
All
PMP/PTP
450, PMP
430, PTP
230
Extrapolated Link
Test
Estimate link throughput capacity
without service interruption by sending
few packets, and extrapolating results.
All
PMP/PTP
450
Frame Utilization
Statistics
Provides statistics of RF channel
utilization.
All
All
Last run time for
Link Capacity Test
This is an enhancement which displays
time stamp of last performed Link
Capacity Test.
All
PMP
450/430/1
00
Disable SM
authentication
Ability to disable SM authentication for a
SM connected via ICC (Installer Color
Code) to aid in Zero Touch Config.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 5 of 50
Frequency
Products
Affected
Feature
Description
All
PMP 450
AP
Interop SM
Registration
Allows the user to control whether PMP
430 SMs are allowed to register to PMP
450 AP’s.
All
All
Update the
SNMPv2c
community string
without reboot
Allows user to modify SNMP community
string without requiring reboot.
All
All
Event log for user
initiated reboot
Adds an event log entry for "user
initiated reboot" to the system log.
All
All
SNMP support to
do an AP Evaluation
from a SM
Provides an SNMP OID to force a SM to
rescan and do an AP Evaluation. This
performs the same functionality as the
clicking the "Rescan APs" button on the
SM's GUI.
5 GHz
PMP 450
Country code for
Malaysia
Allows operation within regulatory
allowances for Malaysia.
All
All
SNMPv3 Auth and
Privacy Password
length check
Requires that Auth and Privacy password
in SNMP setting is not less than 8 digits.
Note:
The user login name is case sensitive. It means that the login name can be
created as “ADMIN” and “admin” on the same radio.
Note:
The maximum uplink throughput for one VC is limited to 51 Mbps, when the
link is running with 5 ms frame period.
Note:
The User Authentication Method with RADIUS server will not work if AP is
running with 13.3 and SM is running with 13.4.
Please note that if AP and SM on same release i.e. 13.3 or 13.4, there will be
no issue with User Authentication Method.
Note:
PMP 400 radios are no longer supported and images are no longer included
in the OFDM CNUT package.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 6 of 50
Table 2 Features released previously but now are new to PMP/PTP 100
Frequency
Products
Affected
Feature
Description
All
All
Sector Spectrum
Analyzer
Allows the user to perform a sector wide
SA scan. The AP and the registered SMs
will go into a SA mode at the same time.
All
All
Read-only web user
Allows to create ‘Read-Only’ user account
where the user can view the configuration
but the user cannot make any changes
including the ability to reboot a radio.
All
All
SM to support 20
color codes
Support for number of color code
increased from 10 to 20 for all platforms.
All
All
Export of Session
Status
Allows to export session status from
AP/BHM web interface in XML format.
All
All
ICC indication and
CC Priority field in
Session Status
Displays SMs connected via Installation
Color Code (ICC) method and configured
Color Code (CC) Priority of respective
SMs.
All
All
HTTPS
Support for HTTPs enabled for all
platforms.
All
All
SNMPv3
Support for SNMPv3 enabled for all
platforms.
All
All
Enable/Disable
support for Telnet,
ftp and tftp
Allows to enable/disable telnet, FTP or
TFTP access for all platforms.
All
All
Import and export
of configuration file
Allows the user to configure a radio using
config file for all platforms.
All
All
DHCP Option 66
Allows automatic configuration of a radio
by downloading config file from a URL
provided via DHCP option 66.
All
All
Zero-touch Config
Use case for the config file feature which
allows the user complete configuration of
radio through a config file.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 7 of 50
3.1 Listen-Before-Talk (LBT) 5.4 GHz for PTP 450
In System release 13.4, the LBT 5.4 GHz is implemented for PTP series. This feature was
previously implemented on PMP in release 13.3 and is now implemented on PTP. BHM
listens during the RTG (Receive/Transmit Transition Gap). If the interference is detected,
the following frame is left empty, no symbol is used (not even the overhead symbols).
The BHS listens during the TTG (Transmit/receive Transition Gap) time. If interference is
detected, the BHS skips the whole Uplink frame, nothing is sent.
Web Management Interface
The alternate channels can be configured on the BHM (under the tab Configuration >
Radio). Same channel cannot be configured twice for Frequency Carrier, Alternate Channel
1 or 2.
Figure 1 LBT BHM configuration for 5.4 GHz
In order to enable LBT, the Regional and Country will have to be configured for an “Other
Regulatory/Other ETSI” or “Europe” followed by County that supports the ETSI standard.
This setting is available under Regional Settings tab of Configuration > General page.
Figure 2 LBT ETSI 5.4 GHz BHM Region and Country code
3.2 Security Banner
In system release 13.4, the security banner has been introduced. If enabled, the user has to
accept and acknowledge the security requirement before login into web management
interface.
This feature is supported for all PMP / PTP product series.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 8 of 50
Web Management Interface
The Security Banner is disabled by default. The user can view General Status configuration
and login to radio.
The user can enable Security Banner Configuration > Security > Security Banner tab.
Table 3 Security Banner
Attribute
Meaning
Enable Security Banner
during Login
Enable: The Security Banner Notice will be displayed
before login.
Disable: The Security Banner Notice will not be
displayed before login.
Security Banner Notice
User can enter ASCII (0-9a-zA-Z newline, line-feed are
allowed) text up-to 1300 characters.
User must accept
security banner before
login
Enable: login area (username and password) will be
disabled unless user accepts the security banner.
Disable: User can login to radio without accepting
security banner.
Once the security banner is enabled, the home login screen will be shown as below:

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 9 of 50
Figure 3 Login page - Security Banner
Note:
The user must accept “I have read, understood and accept the above
notice(s)” to proceed with login. The login button will not be enabled until
user accepts notice message.
Note:
The user is not allowed to save changes with empty Security Banner Notice if
the Security Banner is enabled. The user will be given a prompt stating
“Security Banner Cannot be empty”.
SNMP
Table 4 Security Banner SNMP objects
Name
OID
MIB
Access
Syntax / Description
enableSecuri
tyBanner
.1.3.6.1.4.1.161.19.
3.3.2.251.0
INTEGER
Read-write
1:enable, 0:disable
textSecurity
Banner
.1.3.6.1.4.1.161.19.
3.3.2.253.0
DISPLAYSTRIN
G
Read-Only
1200 characters of
Security Banner
acceptSecuri
tyBanner
.1.3.6.1.4.1.161.19.
3.3.2.254.0
INTEGER
Read-write
1: enable user must
accept before login,
0: disable, not
required.

Release Notes
System Release 13.4
pmp-0979 - July 2015 Page 10 of 50
3.3 RADIUS Change of Authorization
Prior to 13.4 release, SM will get configuration parameters from a RADIUS server during
authentication process. This feature allows an administrator to control configuration
parameters in the SM while SM is in session. The configuration changes in SM are done
using RADIUS Change of Authorization method (RFC 3576) on the existing RADIUS
authentication framework for AP and SM. A typical use case could be changing the QOS
parameters after a certain amount of bandwidth usage by a SM.
The RADIUS CoA feature enables initiating a bi-directional communication from the
RADIUS server(s) to the AP and SM.
The AP listens on UDP port 3799 and accepts CoA requests from the configured RADIUS
servers. This CoA request should contain SM MAC address in ‘User-Name’ attribute as
identifier and all other attributes which control the SM config parameters. For security
reasons, a timestamp also needs to be added as ‘Event-Timestamp’ attribute. Hence the
time should also be synchronized between the RADIUS server(s) and the AP to fit within a
window of 300 seconds.
Once the configuration changes are applied on the SM, CoA-ACK message is sent back to
RADIUS server. If the validation fails, the AP sends a CoA-NACK response to the RADIUS
server with proper error code.
Note:
The RADIUS CoA feature will only enabled if Authentication mode is set to
RADIUS AAA.
Web Management Interface
The CoA Feature can be enabled or disabled under Configuration > Security >
Authentication Server Settings tab.
The feature is disabled by default.