{"id":3508,"date":"2020-08-20T12:25:00","date_gmt":"2020-08-20T17:25:00","guid":{"rendered":"http:\/\/www.incredigeek.com\/home\/?p=3508"},"modified":"2021-12-01T14:48:20","modified_gmt":"2021-12-01T20:48:20","slug":"cambium-r195w-cnpilot-routers-randomly-dropping","status":"publish","type":"post","link":"https:\/\/www.incredigeek.com\/home\/cambium-r195w-cnpilot-routers-randomly-dropping\/","title":{"rendered":"Cambium R195W cnPilot Routers Randomly Dropping"},"content":{"rendered":"\n

The Problem<\/strong><\/p>\n\n\n\n

We have been experiencing a problem with our Cambium routers where they randomly drop and are unresponsive till a reboot. They’ll also stop handing out addresses on the LAN side.<\/p>\n\n\n\n

A reboot “fixes” the problem, until it does it again. You can trigger the behavior by running a port scan against the router. Wondering if the CPU\/Memory get overloaded?<\/p>\n\n\n\n

nmap -T4 -A -v 192.168.11.1<\/pre>\n\n\n\n
While running a scan on the LAN side, the web interface slows down, but doesn’t seem to take it down as fast as a scan on the WAN side.<\/p>\n\n\n\n
goahead.sh is a script that may be maxing out the cpu, but could be completely unrelated.<\/p>\n\n\n\n
Resolution<\/strong><\/h2>\n\n\n\n
Configuring the “Allowed Remote IP(IP1;IP2;)” to limit WAN access effectively blocks port scans and resolves the issue.  Setting is under Administration -> Management -> Web Settings.  You can add multiple ranges with<\/p>\n\n\n\n
10.0.0.0\/8;172.16.0.0\/12;192.168.0.0\/16<\/pre>\n\n\n\n
\"\"
Configure Allowed Remote IP cnPilot R195W<\/figcaption><\/figure>\n\n\n\n
It looks like the public ip ranges are limited to \/24’s so if you you have a block of public IP addresses larger than a \/24, you’ll need to break it down into 24’s to work properly.<\/p>\n\n\n\n
Template for cnMaestro<\/h2>\n\n\n\n
You can also create a template in the Cambium Cloud so you can apply the change to multiple routers fairly easily.<\/p>\n\n\n\n
Go to Configuration -> Templates and add a new template.<\/p>\n\n\n\n
WebRemoteLegalIP=10.0.0.0\/8;192.168.0.0\/16;172.16.0.0\/12<\/pre>\n\n\n\n
\"\"
WebRemoteLegalIP template for cnMaestro<\/figcaption><\/figure>\n\n\n\n
And then you can go to your device -> Configuration and apply your new config.<\/p>\n\n\n\n
\"\"
Apply Allowed WAN IPs Template<\/figcaption><\/figure>\n\n\n\n
Do note that if you run a scan from an allowed range, it still seems to cause problems.  But at least setting the Allowed Remote IPs will keep others from scanning your network and causing problems on your R195’s.<\/p>\n","protected":false},"excerpt":{"rendered":"
The Problem We have been experiencing a problem with our Cambium routers where they randomly drop and are unresponsive till a reboot. They’ll also stop handing out addresses on the LAN side. A reboot “fixes” the problem, until it does … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[637,1266],"tags":[628,627,1072,619,729,1071,703],"class_list":["post-3508","post","type-post","status-publish","format-standard","hentry","category-cambium","category-cnpilot","tag-cambium","tag-cnmaestro","tag-cnpilot","tag-ip","tag-nmap","tag-r195","tag-scan"],"_links":{"self":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/3508","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/comments?post=3508"}],"version-history":[{"count":5,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/3508\/revisions"}],"predecessor-version":[{"id":4286,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/3508\/revisions\/4286"}],"wp:attachment":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/media?parent=3508"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/categories?post=3508"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/tags?post=3508"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}