# Cambium cnMaestro
## cnMaestro setup
First step, you need to create a WLAN configured to support ePSKs.
Form the **Configuration** menu, select **WiFi Profiles**. Open the **WLANs** tab.
Add a new WLAN. Set the **Name** and the **SSID** (e.g. "Residents WiFi"). Set the Security to WPA2 Pre-Shared Key and change the default Passphrase with a complex value (no one will use this passphrase).
Set **Client** **Isolation** to **Disable** (each resident will have its own VLAN and all the devices will be able to communicate regardless of the AP they are connected to)
{% hint style="warning" %}
Cusna implements an automatic VLAN management to segregate each resident traffic. Cusna uses by default the slot of VLANs 2000-4000 so you should avoid using these VLANs for any other purposes.
{% endhint %}
Once you have a **WLAN** you can assign it to one or multiple **AP Groups**.
ePSK are managed at the WLAN level by cnMaestro, so if you assign the same WLAN to multiple AP groups (for example on different Network), a user will be able to connect to WiFi with the same ePSK on all the APs where such WLAN is deployed.
**Distributed communities scenario**
If you want users to be able to connect with the same ePSK in multiple Networks (or AP groups), you should create one WLAN and assigned to multiple AP groups.
In Cusna you can still create a dedicated Network for each physical site, even if multiple Networks are assigned to the same WLAN profile. In the alternative, you can create a single "virtual" Network matching all the AP groups where the WLAN is deployed.
In Cusna, an Account is always associated with one Network. If the Account visits a different Network where the same WLAN is deployed, he would be able to connect with the same ePSK.
If you are assigning VLANs to the Account, the same VLAN should be enable on all the sites.
In Cusna, an email address can be associated to ONLY one Account in the same Organization.
**Isolated communities scenario**
If you want to create isolated communities, where a user is able to connect only in one specific Network, you need to create a dedicated WLAN for each AP Group (assuming you are using a dedicated AP Group per each Network).
Note that a user, with the same email, cannot exists with different Accounts on different Networks.
## Cusna setup
To connect Cusna to your Cambium account you need to get the **hostname** of your cnMaestro account. You can easily identify the hostname form the URL base of your browser once you are logged in in your cnMaestro account.
Then you need to generate an API Client and retrieve a client ID and Client Secret. Go to **Network Services** and open **API Client**
Click Add API Client and fill the Basic Information form as follow:
* **Name**: any name, such as *Cusna*
* **Description**: any text such as *Cusna*
* **Expiration Time**: Cusna will refresh the API access automatically, but we recommend enter a greater value than the default one, such as 10000
* **Token Renewal** Time: enter the same value as entered above
Click **Save**.
Copy the Client ID and Client Secret that appear on the screen after saving
Go to Settings in your Cusna account and select Cambium (cnMaestro).
Enter the requested value;
* hostname
* Client ID
* Client Secret
Click **Setup**.
After clicking **Setup**, you'll see the Cambium integration in the list.
{% hint style="info" %}
You can change the Client ID and Client Secret in future, but you can't change the account hostname
{% endhint %}
## Operating Cusna
### Creating Networks
When you create or edit a Network in the Cusna dashboard, in the WiFi configuration section, you have to pick the **WLAN** that you have enabled on the Access Point of the related to property.
###
### Creating Accounts
When you create a new Account, a new PSK user will be created in your cnMaestro account with a predefined WiFi Passphrase. The Account of type Tenant and Visitors, receive an activation email with the default passphrase and QR code, and a link to the **WiFi Portal** where can change the passphrase.
{% hint style="danger" %}
To avoid synchronization problems, do not manage manually the ePSKs in the cnMaestro interface
{% endhint %}
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.cusna.io/wifi-integration/summary-of-supported-wifi-vendors/cambium-cnmaestro.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.