Cambium cnMaestro Cloud

Overview

cnMaestro Cloud connects to MyPlace through the cnMaestro API. You issue an API client, paste its Client ID and Secret into MyPlace, pick the network that matches the venue, and we write the guest portal configuration onto your WLAN.

Follow this page for on-premises cnMaestro X as well — it exposes the same API and behaves identically here. If your controller is the free on-premises edition, it has no API and the setup is different: see cnMaestro On-Premises, or go back to the Cambium overview if you are not sure which you run.

What You Need

• Host — your cnMaestro address, reachable from the internet. Enter it without https:// and without a path
• Client ID and Client Secret from an API client issued in cnMaestro
• The network in cnMaestro that corresponds to the venue
• An SSID you can dedicate to guests — its security is adjusted for captive-portal use, so do not point it at a staff network

How Guest Access Works

A guest joining the SSID is held by the access point and shown the MyPlace portal. When they finish signing in, the portal confirms it and the access point lets the device online. Everything travels through cnMaestro, so nothing has to be forwarded inbound on your venue firewall.

Connecting cnMaestro Cloud to MyPlace

1. Open MyPlace Admin Panel → Networks → Network Controller tab
2. Click Add New Controller, select Cambium, then your cnMaestro edition

3. Enter the cnMaestro host and press Test IP/Host. MyPlace checks the format, confirms the address is publicly routable and pings it

Note: A failed check here is worth fixing before going further. If we cannot reach cnMaestro at this step, the guest portal will not work once the venue is live either.

4. Enter the Client Id and Client Secret from your API client

5. Choose the network that corresponds to the venue and click Finish. MyPlace authenticates against cnMaestro before saving anything
6. Click the + icon on the new controller’s row, pick the MyPlace location and the SSID guests will join, then click Add Location

What MyPlace Configures

Adding a location writes the guest configuration for you. There is no portal to build by hand:

• The guest portal on the chosen WLAN, pointed at your branded MyPlace login page and carrying your venue’s identifier
• The WLAN’s security adjusted for captive-portal use — a portal cannot run on a network with a shared password
• The walled garden, so the login page loads before the guest is online

Important: The portal address carries the identifier that tells MyPlace which venue a guest is standing in. Editing it by hand in cnMaestro breaks guest sign-in, and the symptom is guests being told the venue does not exist.

Checking It Worked

Open Settings → Local Network → Guest Portal Configuration for the location. It reads the live configuration back from cnMaestro, so what you see there is what the WLAN actually has. The Health Check button on the same page validates the whole set-up against what MyPlace expects.

Then connect a phone to the guest SSID and walk through the portal once. A successful sign-in shows up in Guests within a few seconds, and your access points appear under Devices.

Walled Garden

Before a guest is authorised, their device has to reach the login page and a short list of MyPlace and social-login hosts. MyPlace writes those entries for you when the location is added.

You need the list yourself only if your venue filters outbound traffic upstream of the access points. Open Networks → Network Controller and use the “Click here for a list of IP addresses” link under the controller table — it always shows the current list. We do not print it here on purpose: these addresses change as our platform moves, and an allow list copied from an old page looks correct and blocks guests anyway.

Troubleshooting

Issue	Resolution
There is no option to issue an API client	You are on the free on-premises edition. Follow the cnMaestro On-Premises guide instead
The host check fails	cnMaestro has to be reachable from the internet; a private address cannot be used. Enter the bare hostname, with no scheme or path
The credentials are refused	Re-issue the API client and copy the ID and Secret together — they are a pair and have to be replaced as one
The network list is empty	The credentials are valid but see no networks. Check the API client’s scope in cnMaestro
Guests see “Venue does not exist”	The portal address was edited in cnMaestro. Re-apply the configuration from Guest Portal Configuration
The portal never appears	The SSID still has a password, or the walled garden entries are missing

Known Limitations

• One Cambium network maps to one MyPlace location. A venue with several networks needs a MyPlace location for each.
• The credentials are tied to the API client that issued them. Revoke it in cnMaestro and the connection stops working.
• The guest WLAN’s security is managed by MyPlace. Re-adding a password to it in cnMaestro stops the portal from appearing.

Support

For assistance with setup issues or questions about the cnMaestro Cloud integration, contact the support team via the Contact Us page.