MerakiMX系列智能管理路由器
传输独立性
智能路径控制
4
Cisco Systems, Inc. |
应用优化 安全连接
内置802.11ac无线技术
MX64W 和 MX65W 紧密集成了 Cisco Meraki 屡获大奖的无线技术和 强大的MX网络安全特性，是分支机构或小型企业的理想选择。
• 双频段 802.11n/ac，2x2 双重空间串流 MIMO • 统一管理网络安全和无线技术 • 内置企业安全性和访客访问
Z系列 Telecommuter Gateway
Z系列 Telecommuter Gateway（远程办公网关）Cisco Meraki 控制面 板和基于远端的集中管理延伸至在家办公的IT员工和管理人员。 借助 Cisco Meraki Auto VPN 专利技术，管理员可一键将 VoIP、 远程 桌面（RDP）等网络服务延伸至远端员工，提供有线和无线访问，并通 过7层流量整形和优先级划分提高最终用户的生产力。 • 2 x 802.11a/b/g/n/ac (2.4GHz or 5GHz) 射频，2x2 双重空间串
• 内置DHCP、NAT、QoS和VLAN管理服务。
• Web缓存：加快常用内容的访问速度。
• 负载均衡：将多条WAN链路整合为一个高速接口，并提供QoS、流 量整形和故障切换策略。
• 智能连接监测：自动检测2层和3层中断，并进行快速故障切换，包 括3G/4G USB调制解调器。
CISCO MERAKI MX 内面
内置PoE+
MX65 和 MX65W 包含两个 802.3at（PoE+）端口。此项内置供电能力 无需额外硬件即可为重要的分支机构设备供电。 • 两个 802.3at（PoE+）端口共可提供60W电力 • 可为 AP、话机、摄像头以及其它支持 PoE 的设备供电，不需要
AC适配器、PoE 转换器或非管理型交换机。
Meraki 服务提供无缝状态防火墙和安全签名更新，自动建立站点间 VPN 隧道，并提供 24x7 网络监测。此外，MX 直观的基于浏览器的管 理界面无需用户参加昂贵、耗时的培训。
产品手册 l MX 系列路由器
Cisco Meraki智能管理架构
组织级安全评估
自动配置站点间 VPN
端到端网络可视性和故障排除
产品手册│MX 系列路由器
Meraki MX 系列智能管理路由器
产品手册
概述
Cisco Meraki MX 路由器是那些拥有众多分散站点的企业的理想选择。由于MX是 100% 智能管理解决方案，其安装和远程管理都很简单。MX 拥 有一整套网络服务，因此无需多个设备。这些服务包括 SD-WAN、7层防火墙、web缓存、4G故障切换和 Auto VPN。
墙和流量整形
3G/4G Modem 支持 自动切换和排解故障
多色 LED 状态显示灯 随时掌握设备状态
10G WAN双接口 SD-WAN和平衡负荷
管理接口 支持本地设备连接
1G/10G 以太/SFP+ 接口 10G SFP+ 接口提供高速 LAN 连线
3
Cisco Systems, Inc. |
基于身份的策略管理
让 SD-WAN 变得简单
产品手册 l MX 系列路由器
传输独立性 具备负载均衡和故障切换功能的双 WAN 端口可让用户使用 MPLS 和/或冗余的商用互联网连接，从而获得更大带宽和更高的可靠性。
3G/4G 故障切换 Cisco Meraki MX 支持全球各地的 3G/4G 服务提供商，可实现WAN连接的故障切换。Web 缓存功能临时存储视频、媒体和 web 文档，从而降 低带宽使用量，加快互联网内容的下载速度。
应用优化 7 层流量整形和应用优化优先级划分可为任务关键型应用优化流量和用户体验。
智能路径控制 MX 采用动态 VPN 路径选择技术，根据丢包率、时延和抖动选择最佳 VPN 上行链路。可定义用于通过相应路径发送相应流量的策略（例如，通 过 MPLS 发送语音，通过 VPN 和宽带发送http）。
安全连接 Cisco Meraki MX 路由器自动学习建立和维护使用 128 位 AES 加密技术的 VPN 会话所需的 VPN 参数。一个独特、基于远端集中式的机制能 够跨越 WAN 自动互连 VPN 对等体和路由 WAN，并在动态的 IP 环境中让它们保持更新。
图中显示的是 MX450，功能随型号而异。 冗余电源 可靠、节能设计， 可拆除更换
密码加速 硬件加密，减低 负荷
网页缓存 128 GB SSD
CISCO MERAKI MX 正面
图中显示的是 MX450，功能随型号而异。
产品手册 l MX 系列路由器
模块化散热风扇 全方位高性能散热风扇， 可拆除更换
业内领先的智能管理解决方案
分支机构网关服务
• 通过一个直观的web控制面板提供统一的状态防火墙、交 换、WLAN和移动设备管理。
• 基于模板的设置便于客户从小规模部署扩展至数万个设备。
• 基于角色的管理，可针对不同重要事件进行配置的邮件提醒，便于 审计的变更日志。
• 包含用户、设备和应用使用详情的汇总报告在Meraki数据中心归 档。
流 MIM • 使用 Cisco Meraki Auto VPN 的站点间（IPsec）VPN • 7 层应用可视性和流量整形
基于MERAKI SD-WAN的智能站点间VPN
• 配备主用/主用 VPN 的 SD-WAN，含基于策略的路由和动态 VPN路径选择。
• 遵从标准的 IPsecVPN 互联互通。
• 从 MPLS 到 VPN 的自动故障切换。
• 客户端 VPN：为本地 Windows、Mac OS X、iPad和 Android 客 户端提供 L2TP IPsec 支持，无须每个用户支付许可费用。
2
Cisco Systems, Inc. |
智能管理架构
MX 建立在 Cisco Meraki 屡获大奖的智能管理架构基础之上，是业内 唯一的 100% 智能管理解决方案。MX 设备实现了自行配置，从远端自 动接收策略和设置。强大的远程管理工具提供全网可视性和可控性， 让用户无需网络知识也能进行管理。
Meraki MS390 交换机数据手册说明书
MS390 DatasheetOverviewThe Meraki MS390addresses the most demanding enterprise applications by combining the simplicity of the Meraki dashboard with powerful switching hardware. To satisfy high-bandwidth applications and the deployment of high-speed802.11ax/wifi-6access points,the MS390provides multigigabit ports,480G stacking, and modular10/40G uplinks.The MS390delivers resiliency with fast stack convergence and StackPower.The MS390provides Adaptive Policy using an over-the-wire tag which segments traffic into security groups to deliver scalable security.The MS390is integrated under the Meraki dashboard to provide a simply powerful solution to the most demanding wired access applications.Adaptive Policy provides simple&scalable security policies to segment traffic using Security Groups.Security Groups are created in the dashboard using natural language such as“IOT device”&“Guest.”The security policy intent(e.g.,Permit or Deny)is then simply provisioned between Security Groups which results in the segmentation of each group’s traffic.By making security policy management intuitive and scalable relative to legacy IP-address based Access Control Lists, Adaptive Policy empowers operators to confidently secure their network traffic independent of future network changes.By pooling&distributing power across MS390s using a series of StackPower cables,StackPower provides simple and resilient power distribution across the stack.ModelsNumber of Ports Model DescriptionMS390-24-HW24-port GbE switchMS390-24P-HW24-port GbE PoE+ switch24 Ports MS390-24U-HW24-port GbE UPoE switch MS390-24UX-HW24-port mGbE UPoE switch48 Ports MS390-48-HW48-port GbE switchMS390-48P-HW48-port GbE PoE+ switchMS390-48U-HW48-port GbE UPoE switchMS390-48UX-HW36-port 2.5GbE+ 12-port mGbE UPoE switch MS390-48UX2-HW48-port 5GbE UPOE switchFeaturesCategory FeaturesHighlights •Layer-3•40G or 10G modular uplink options on all models •mGig support•Dual Dedicated 120G Hardware Stacking Ports•PoE+ and UPoE Support•StackPower in a ring topology supporting upto 4 switchesManagement •Managed via Cisco Meraki Dashboard•Zero-touch remote provisioning (no staging needed)•Basic configuration capability via local management page•Detailed historical per-port and per-client usage statistics•Operating System, device, and hostname fingerprinting•Automatic firmware upgrades with scheduling control•SNMP and SYSLOG support for integration with other network management solutions*Remote Diagnostics •Email, SMS and Mobile push notification alerts1•Ping, traceroute, cable testing, and link failure detection with alerting •Remote packet capture•Dynamic and interactive network discovery and topology •Combined event and configuration change logs with instant searchStacking •Physically stack up to 8 switches with 480 Gbps of stacking bandwidth on all models•Virtual stacking supports thousands of switch ports in a single logical stack for unified management, monitoring, and configuration•Faster convergence•StackPower in a ring topology supporting upto 4 switchesEthernet Switching Capabilities •802.1p Quality of Service, 8 queues (w/ 6 configurable for DSCP-to-CoS mapping)•802.1Q VLAN and trunking support for up to 4,094 VLANs (1000 active VLANs with STP enabled)•Single Instance of 802.1s Multiple Spanning Tree Protocol (interoperable with RSTP, STP, PVST, RPVST)•STP Enhancements: BPDU guard, Root guard, Loop guard, UDLD•Broadcast storm control•802.1ab Link Layer Discovery Protocol (LLDP) and Cisco Discovery Protocol (CDP)•802.3ad Link aggregation with up to 8 ports per aggregate, Multichassis aggregates supported on stacked switches •Port mirroring•IGMP snooping for multicast filtering•MAC Forwarding Entries: 32KLayer 3•Static routing, OSPFv2•Multicast routing (PIM-ASM)•Warm Spare (VRRP) *•DHCP Server, DHCP RelaySecurity •Integrated multi-factor authentication for Dashboard management•Role-based access control (RBAC) with granular device and configuration control •Corporate wide password policy enforcement•IEEE 802.1X RADIUS and MAB, hybrid authentication and RADIUS server testing •Single-Host/Multi-Domain/Multi-Host/Multi Authentication•Port security: Sticky MAC, MAC whitelisting *•DHCP snooping, detection and blocking, Dynamic ARP Inspection•IPv4 and IPv6 ACLs•Secure Connect *•Adaptive Policy *MS390 LicensingMS390license structure includes two feature tiers:Enterprise and Advanced. The MS390 also introduces a new and simpler license to hardware mapping, specifically 24-port or 48-port licenses. As with all MS, every MS390 license is available in 1, 3, 5, 7, and 10 year terms.MS390 License Structure24-Port Model48-port ModelAdvanced Features LIC-MS390-24A LIC-MS390-48A* Available in a future software releaseEnterprise Features LIC-MS390-24E LIC-MS390-48EThe features available with advanced licensing are:•Adaptive policy *•Greater than 1,000 routes for OSPFContext and Comparisons24 Port Models48 Port ModelsDescriptionMS350-24XMS355-24X2MS390-24UXMS350-48FPMS355-48X2MS390-48UX21GbE RJ4516--4824-mGbE RJ4582424-244810GbE SFP+44Modular 44Modular 40GbE QSFP+n/a 2Modular -2Modular Hardware Stack Port 2x 40G 2x 100G2x 120G2x 40G 2x 100G2x 120GManagement Interface 111111Hot Swap PS Yes, Dual Yes, Dual Yes, Dual Yes, Dual Yes, Dual Yes, Dual Hot Swap Fans Yes, 2x Yes, 3x Yes, 3x Yes, 2x Yes, 3x Yes, 3x Layer 3 Routing Yes Yes Yes YesYes Yes UPoE CapableYes, 740W Yes, 740W Yes, 560W No, 740W(only PoE/PoE+)Yes, 740W Yes, 645W Max Switching Capacity 176 Gbps 640 Gbps 640 Gbps 176 Gbps 688 Gbps 640 Gbp Max Stacking Bandwidth160 Gbps400 Gbps480 Gbps160 Gbps400 Gbps480 Gbps* Available in a future software releaseIn the Co-term licensing model (most existing Organizations), an Organization must either have all MS390 Enterprise or all MS390 Advanced licenses - they cannot be mixed. In the Per-device licensing model, a mix of Enterprise and Advanced can be added to a single Organization, but certain features may require all devices in a Network to have Advanced licenses, e.g. Adaptive Policy.For more information on licensing, refer to Meraki Licensing Models article .Technical Breakdown Interfaces SpecificationsModel InterfacesUplink10/40GbE(SFP+, QSFP+)120G HardwareStack PortDedicatedManagementInterfacePoE/UPoECapabilitiesMS390-24-HW24 x1GbE RJ45Modular21n/a MS390-24P-HW24 x1GbE RJ45Modular21PoE MS390-24U-HW24 x1GbE RJ45Modular21UPoEMS390-24UX-HW 24 x 100M/1G/2.5G/5G/10G RJ45Modular21UPoEMS390-48-HW48 x1GbE RJ45Modular21n/a MS390-48P-HW48 x1GbE RJ45Modular21PoE MS390-48U-HW48 x1GbE RJ45Modular21UPoEMS390-48UX-HW36 x100M/1G/2.5G +12 x100M/1G/2.5G/5G/10GModular21UPoEMS390-48UX2-HW48 x100M/1G/2.5G/5G Modular21UPoE Physical SpecificationsModelDimensions(h x w x d)Weight Mount Type Hot Swap Fans Operating Temperature HumidityAll models are available with modular uplinks that have been listed under the Accessories list. For supported SFP modules please refer the SFP Datasheet.Cabling Best Practices for Multi-Gigabit operations:While Category-5e cables can support multigigabit data rates upto 2.5/5 Gbps, external factors such as noise, alien crosstalk coupled with longer cable/cable bundle lengths can impede reliable link operation. Noise can originate from cable bundling, RFI, cable movement, lightning, power surges and other transient event. It is recommended to use Category-6a cabling for reliable multigigabit operations as it mitigates alien crosstalk by design.W/ Default Power Supply1.73” x 17.5” x17.7”MS390-24-HW16.03 lb (7.27 kg)1U Rack Mount Yes, 3x-5°C to 45°C 5 to 90%(4.4 x 44.5 x 44.9cm)1.73” x 17.5” x17.7”16.33 lb (7.4 kg)1U Rack Mount Yes, 3x-5°C to 45°C 5 to 90% MS390-24P-HW(4.4 x 44.5 x 44.9cm)1.73” x 17.5” x 19.2”16.63 lb (7.54 kg)1U Rack Mount Yes, 3x-5°C to 45°C 5 to 90% MS390-24U-HW(4.4 x 44.5 x 44.8cm)1.73” x 17.5” x 20.2”MS390-24UX-HW18.18 lb (8.25 kg)1U Rack Mount Yes, 3x-5°C to 45°C 5 to 90%(4.4 x 44.5 x 51.3cm)1.73” x 17.5” x17.7”16.43 lb (7.45 kg)1U Rack Mount Yes, 3x-5°C to 45°C 5 to 90% MS390-48-HW(4.4 x 44.5 x 44.9cm)1.73” x 17.5” x17.7”16.73 lb (7.59 kg)1U Rack Mount Yes, 3x-5°C to 45°C 5 to 90% MS390-48P-HW(4.4 x 44.5 x 44.9cm)1.73” x 17.5” x 19.2”MS390-48U-HW17.03 lb (7.72 kg)1U Rack Mount Yes, 3x-5°C to 45°C 5 to 90%(4.4 x 44.5 x 48.8cm)1.73” x 17.5” x 22.2”20.50 lb (9.34 kg)1U Rack Mount Yes, 3x-5°C to 45°C 5 to 90% MS390-48UX-HW(4.4 x 44.5 x 56.4cm)1.73” x 17.5” x 22.2”20.05 lb (9.09 kg)1U Rack Mount Yes, 3x-5°C to 45°C 5 to 90% MS390-48UX2-HW(4.4 x 44.5 x 56.4cm)PerformanceSwitching Capacity Stacking Bandwidth Forwarding rateModelMS390-24-HW208 Gbps480 Gbps154.76 MppsMS390-24P-HW208 Gbps480 Gbps154.76 Mpps MS390-24U-HW208 Gbps480 Gbps154.76 Mpps MS390-24UX-HW640 Gbps480 Gbps476.19 Mpps MS390-48-HW256 Gbps480 Gbps190.48 Mpps MS390-48P-HW256 Gbps480 Gbps190.48 Mpps MS390-48U-HW256 Gbps480 Gbps190.48 Mpps MS390-48UX-HW580 Gbps480 Gbps431.54 Mpps MS390-48UX2-HW640 Gbps480 Gbps476.19 MppsPower Options and SpecificationsModel Default PowerSupplyHot Swap PowerSupplyAvailable PoE W/Primary PSAvailable PoE W/ SecondaryPS***Power Load(idle/max)MS390-24-HWMA-PWR-350WAC**Yes, Dual n/a n/a79.2 / 99 WMS390-24P-HWMA-PWR-715WAC**Yes, Dual445W720W84.1 / 554.4WMS390-24U-HWMA-PWR-1100WACYes, Dual830W1440W85.4 / 990.3WMS390-24UX-HWMA-PWR-1100WACYes, Dual560W1440W162.7 / 809.9WMS390-48-HWMA-PWR-350WAC**Yes, Dual n/a n/a83.9 / 109.9WMS390-48P-HWMA-PWR-715WAC**Yes, Dual437W1152W92.6 / 555 WMS390-48U-HWMA-PWR-1100WACYes, Dual822W1800W145 / 844.9WMS390-48UX-HWMA-PWR-1100WACYes, Dual490W1590W218.5 / 785.5WMS390-48UX2-HWMA-PWR-1100WACYes, Dual645W1745W157.9 / 843.8W** Upgrade options to715W and 1100W PSU are available.*** The PoE values are provided considering the secondary PS to be the default power supply of the respective model.What's includedModel Package ContentsMS390-24-HW 1 x Power Supply (MA-PWR-350WAC), Rack mount brackets and screw kit,3 x Pre-Installed Fans, Cable guide MS390-24P-HW 1 x Power Supply (MA-PWR-715WAC), Rack mount brackets and screw kit, 3 x Pre-Installed Fans, Cable guide MS390-24U-HW 1 x Power Supply (MA-PWR-1100WAC), Rack mount brackets and screw kit, 3 x Pre-Installed Fans, Cable guide MS390-24UX-HW 1 x Power Supply (MA-PWR-1100WAC), Rack mount brackets and screw kit, 3 x Pre-Installed Fans, Cable guide MS390-48-HW 1 x Power Supply (MA-PWR-350WAC), Rack mount brackets and screw kit, 3 x Pre-Installed Fans, Cable guide MS390-48P-HW 1 x Power Supply (MA-PWR-715WAC), Rack mount brackets and screw kit, 3 x Pre-Installed Fans, Cable guide MS390-48U-HW 1 x Power Supply (MA-PWR-1100WAC), Rack mount brackets and screw kit, 3 x Pre-Installed Fans, Cable guide MS390-48UX-HW 1 x Power Supply (MA-PWR-1100WAC), Rack mount brackets and screw kit, 3 x Pre-Installed Fans, Cable guide MS390-48UX2-HW 1 x Power Supply (MA-PWR-1100WAC), Rack mount brackets and screw kit, 3 x Pre-Installed Fans, Cable guideOptional AccessoriesAccessory Description Supported ModelsMA-PWR-350WAC350W AC Power Supply MS390-24-HW, MS390-48-HWMA-PWR-715WAC715W AC Power Supply All ModelsMA-PWR-1100WAC1100W AC Power Supply All ModelsMA-MOD-2X40G 2 x 40G Uplink Module All ModelsMA-MOD-4X10G 4 x 10G Uplink Module All ModelsMA-MOD-8X10G8 x 10G Uplink Module All ModelsMA-CBL-120G-50CM Meraki 120G Stacking Cable, 0.5Meter All ModelsMA-CBL-120G-1M Meraki 120G Stacking Cable, 1Meter All ModelsMA-CBL-120G-3M Meraki 120G Stacking Cable, 3Meter All ModelsMA-CBL-SPWR-30CM Meraki MS390 30CM StackPower Cable All ModelsMA-CBL-SPWR-150CM Meraki MS390 150CM StackPower Cable All Models MA-FAN-16K2System Fan All Models MA-RCKMNT Meraki MS390 Rack Mount Kit All ModelsRegulations and ComplianceElectromagnetic CompatibilityCertifications FCC Part 15 (CFR 47) Class A, ICES-003 Class A, CISPR22 Class A,CNS13438, EN 300 386 V1.6.1,EN 55022 Class A, EN 61000-3-2,EN61000-3-3, KN 32, TCVN 7189 Class A, EN 55032 , CISPR 32 Class A, V-2/2015.04, V-3/2015.04, VCCI-CISPR 32 Class A, CISPR24, EN 300 386 V1.6.1, EN 55024, KN35, TCVN 7317SafetyCAN/CSA-C22.2 No. 60950-1, UL 60950-1, EN 60950-1, IEC 60950-1, AS/NZS 60950.1 Environmental Reduction of Hazardous Substances (RoHS)Warranty Full lifetime hardware warranty with next-day advanced replacement included MTBF RatingModelMTBF at 25°CMS390-24-HW314,790MS390-24P-HW299,000MS390-24U-HW238,410MS390-24UX-HW214,760MS390-48-HW305,870MS390-48P-HW277,770MS390-48U-HW227,410MS390-48UX-HW202,160MS390-48UX2-HW198,647Installation GuideFor instructions on how to install and configure the MS390 series switch please refer the MS390 Series Installation Guide。
MX云管理路由器系列-Cisco
CiscoMeraki 云管理架构
组织级安全评估
2
自动配置站点间 VPN
段端到端网络可视性和故障排除
基于身份的策略管理
让 SD-WAN 变得简单
传输独立性 具备负载均衡和故障切换功能的双 WAN 端口可让用户使用 MPLS 和/或冗余的商用联网连接，从而获得更大带宽和更高的可靠性。
3G/4G 故障切换 CiscoMerakiMX 支持全球各地的 3G/4G 服务提供商，可实现 WAN 连接的故障切换。Web 缓存功能临时存储视频、媒体和 web 文档，从 而降低带宽使用量，加快互联网内容的下载速度。
3
内置 802.11ac 无线技术
MX64W 和 MX65W 紧密集成了 CiscoMeraki 屡获大奖的无线技术和 强大的 MX 网络安全特性，是分支机构或小型企业的理想选择。 • 双频段 802.11n/ac，包含 2 个空间串流的 2x2MIMO • 统一管理网络安全和无线技术 • 内置企业安全性和访客访问
90WDC（含）
6W/72（MX65） 9W/79W（MX65W
32°F － 104°F （0°C － 40°C）
5%－95%
6.46” x 4.55” x 1.14”(164 mm x 116
mm x29 mm)
0.9lbs（0.408kg）
12V/1.5A 电源（含）
N/A
32°F － 104°F （0°C － 40°C）
应用优化 7 层流量整形和应用优化优先级划分可为任务关键型应用优化流量和用户体验。
智能路径控制 MX 采用动态 VPN 路径选择技术，根据丢包率、时延和抖动选择最佳 VPN 上行链路。可定义用于通过相应路径发送相应流量的策略（例如， 通过 MPLS 发送语音，通过 VPN 和宽带发送 http）。
思科全数字化网络架构 (DNA) 就绪型基础设施
思科 Wi-Fi 和 Beacon 数 据点 思科无线接入点交付模块 化架构 自动化和保证 思科高密度体验 (HDX) 思科灵活的无线电频段分配 思科 DNA 中心
Apple FastLane
© 2017 思科和/或其附属公司。版权所有。
宣传册 思科公开信息
思科 DNA 就绪型无线产品： • 思科 Aironet 3800 系列 • 思科 Aironet 2800 系列 • 思科 Aironet 1800 系列 • 思科 8540 无线控制器 • 思科 5520 无线控制器 • 思科 Meraki® MR
借助实时威胁情报，保护网络不受恶意软件、僵尸网 络、网络钓鱼和针对性网络攻击困扰。 通过数据包捕获和机器学习（2900 和 3900 系列 ISR 需要部署思科 UCS® E 系列刀片），获得分支机构网 络可视性和设备级事件响应能力。 利用高性能加密保护广域网安全。
多核硬件 VPN 加速
服务
借助思科服务加速步入网络新时代，并获得更高的 价值。从规划到迁移，我们屡获殊荣的支持服务能 够为您提供端到端指导和专业知识，加快您的转型 步伐。
适用于无线产品的思科 DNA 核心价值 移动功能 支持即插即用和服务质 量 (QoS) 的思科应用策略 基础设施控制器企业模块 (APIC-EM) 思科 Jabber® 和 Lync SDN API 安全性和合规性 思科身份服务引擎 (ISE) 2.2 移动优势 借助可通过自动调配端到端基础设施来部署应用和服 务的控制器，推动软件定义网络 (SDN) 技术的采用。
适用于路由器的思科 DNA 核心价值 洞察力与体验 路由功能 思科应用可视性与可控性 (AVC) 智能路径选择（思科高性 能路由 [PfR] v3） 广域网优化（思科广域 应用服务 [WAAS] 和 Akamai） 自动化和保证 “随增长，随投资”的性 能与服务 思科 DNA 中心 路由优势 获得对超过 1000 种应用的可视性，促进容量规划和 优先级划分。 利用实时分析实现智能路径选择，在降低成本的同时 为应用体验提供保障。 借助 4 至 7 层优化和智能缓存技术增强应用性能， 实现广域网负载分流。
Meraki MS 系列交换机
支持所有部署类型的强大的特性集
Meraki交换机包含高端产品所具备的所有传统Ethernet特性， 其中包括： • 用于为语音、视频等任务关键型链路划分优先级的服务质量
（QoS） • 用于实现基于端口的网络访问控制的IEEE 802.1X支持 • 基于MAC的RADIUS认证和MAC白名单 • 用于简化VoIP部署的语音VLAN • 用于以线速监测网络流量的端口镜像 • 用于防止用户在网络上添加非法DHCP服务器的DHCP监听 • 用于优化组播流量的网络性能的IGMP监听 • 用于实现大容量中继、堆叠和更高可用性的链路聚合控制协
3
Meraki 聚合交换产品组合
系列
MS410
部署类型 接口1 上行链路 电源配置 堆叠能力 路由能力
型号
1G光纤聚合
16 / 32 x 1GbE SFP
2 x 10GbE SFP+（MS410-16） 4 x 10GbE SFP+（MS410-32）
模块化 可选冗余PSU（单独出售）
160G物理 + 虚拟
设置一台Meraki交换机只需将其联网，没有必要进行重复、 基于命令的配置。交换机联网后数分钟之内就可以启动和运 行。
一个功能强大的集中管理界面可让管理员深入了解网络及其 使用情况，查看那些交换机接近数百个站点的容量，快速配 置和重配置交换机端口的安全、QoS等策略。Meraki控制面 板提供统一策略、事件日志和监测功能，便于用户管理网络 部署，而且不会对性能产生任何影响。
· 灵活堆叠，可扩展配置和提升高性能。 · 智能管理可降低成本和开销，缩短问题解决时间。 · 行业标准特性使其能够轻松整合到现有和混合基础设
施中。 · 基于角色的管理，通过web实现自动安全的固件设计。
未来已来 LINKSYS MX5300 Wi-Fi 6路由器评测
未来已来 LINKSYS MX5300 Wi-Fi 6路由器评测作者：来源：《计算机应用文摘》2020年第11期就外观来看，M X5 3 0 0是个十足的“大家伙”，其整体造型呈长方体，尺寸为11.3mm×11.3mm×243.mm。
MX5300方方正正的外观，加上纯白色的配色，看上去十分简洁大方。
虽然MX5300的体积较大，但是直立型的设计并不会占用太多空间，和家具搭配起来视觉观感也会更立体。
MX5300的顶部分布着密密麻麻的散热孔，通过散热孔带走热量，保证了空气的流通。
除了散热孔，顶部的一角还设计有状态指示灯，通过不同的颜色、闪烁状态指示MX5300不同的工作状态。
接口方面，MX5300提供了1个USB 3.0接口、4个千兆LAN接口和1个千兆WAN接口。
4個千兆LAN接口不仅可以给设备提供局域网络，还能进行有线或者是“有线+无线”的混合组网，而USB 3.0接口插上U盘或者移动硬盘，还能化身成简易的NAS，实现局域网内资源共享。
MX5300的底座设计了一圈橡胶脚垫，稳定性自不必多言。
为了散热需要，底座和外壳间留有间隙，路由器的“死机”往往是由于散热设计太差，长期使用积热而导致的。
至少目前来看，MX5300在散热上考虑得很周到，并非“焖罐”的设计。
另外，开关键、WPS键和重置键等都“隐藏”在底部。
与市面上常见的路由器相比，MX5300的体积着实较大。
不过，想想这是一款采用了高通全新四核2.2GHz处理器，具备“旗舰级”的512MB闪存和1GB内存，拥有13根高增益天线的Wi-Fi 6产品，笔者也就释然了。
更大的体积自然能容纳更好的配置，也能带来更好的散热条件，更好的信号覆盖，满足大吞吐量的应用，即便是8K电视的流媒体共享MX5300也能轻松应对，可以满足全家的影音娱乐需求。
另外，MX5300拥有12个空间流传输，单台MX5300同时允许接入设备数量可达50个以上，适合3居室～5居室的家庭，完全能满足现代家庭日益丰富的智能家居需求。
Meraki MR66户外云管理无线局域网说明书
The Meraki MR66 is an enterprise class, dual-concurrent 802.11n cloud managed accesspoint designed for high-density deployments in harsh outdoor locations and industrialindoor environments. The MR66 features dual-concurrent, dual-band operation andadvanced 802.11n technologies such as MIMO and beamforming, delivering the highcapacity, throughput and reliable coverage required by the most demanding businessapplications, even in harsh environments.MR66 and Meraki Cloud Management: A Powerful CombinationThe MR66 is managed via the Meraki cloud, with an intuitive browser-based interfacethat lets you get up and running quickly without training or certifications. Since theMR66 is self-configuring and managed over the web, it can even be deployed at aremote location without on-site IT staff.The MR66 is monitored 24x7 via the cloud, which delivers real-time alerts if your networkencounters problems. Remote diagnostics tools also enable real-time troubleshootingover the web.The MR66’s firmware is always kept up to date from the cloud. New features, bugfixes, and enhancements are delivered seamlessly over the web, so you never haveto manually download software updates or worry about missing security patches. Product Highlights• Ideal for outdoor and industrial indoor environments• Dual-concurrent 802.11n radios with up to 600 Mbps throughput • Point-to-point links with optional panel antennas • High performance multi-radiomesh routing• Layer 7 application fingerprintingand QoS• Built-in enterprise security, guestaccess, and NAC• Self-configuring, plug-and-playdeployment• Automatic cloud-based RF optimizationwith spectrum analysis• Real-time WIPS with Air Marshal802.11n Access PointRecommended Use CasesOutdoor coverage for high client density corporate campuses, educational institutions, and parks • Provide high-speed access to a large number of clients• Point-to-multi-point mesh Indoor coverage for industrial areas(e.g., warehouses, manufacturingfacilities)• Reliable coverage for scanner guns,security cameras, and POS devices• High speed-access for iPads, tabletsand laptopsZero-touch point-to-point• Build a long-distance bridge betweentwo networks• Extend hotspot networks via mesh whilesimultaneously serving clientsFeaturesDual enterprise class 802.11n radios, up to 600 MbpsThe MR66 features two powerful radios and advanced RF design for enhanced receive sensitivity. Combined with 802.11n technolo-gies including MIMO and beamforming, the MR66 delivers up to 600 Mbps throughput and up to 50% increased capacity compared to typical rugged enterprise-class 802.11g access points, meaning fewer access points are required for a given deployment. In addition, dual-concurrent 802.11n radios and band steering technology allow the MR66 to automatically serve legacy 802.11b/g clients using the 2.4 GHz radio and newer 802.11n clients using the 5 GHz radio, thus providing maximum speed to all clients.Rugged industrial designThe MR66 is designed and tested for salt spray, vibration, extreme thermal conditions, shock and dust and is IP67-rated, making it ideal for extreme environments. Despite its rugged design, MR66 has a low profile and is easy to deploy.Application-aware traffic shapingThe MR66 includes an integrated layer 7 packet inspection, classification, and control engine, enabling you to set QoS policies based on traffic type. Prioritize your mission critical applications, while setting limits on recreational traffic, e.g. peer-to-peer and video streaming.Automatic cloud-based RF optimization with spectrum analysisThe MR66’s sophisticated, automated RF optimization meansthat there is no need for the dedicated hardware or RF expertise typically required to tune a wireless network. An integrated spectrum analyzer monitors the airspace for neighboring WiFi devices as well as non-802.11 interference – microwave ovens, Bluetooth headsets, etc. The Meraki cloud then automatically optimizes the MR66’s chan-nel selection, transmit power, and client connection settings, provid-ing optimal performance even under challenging RF conditions. Integrated enterprise security and guest accessThe MR66 features integrated, easy-to-configure security technologies to provide secure connectivity for employees and guests alike. Advanced security features such as AES hardware-based encryption and WPA2-Enterprise authentication with 802.1X and Active Directory integration provide wire-like security with the convenience of wireless mobility. One-click guest isolation provides secure, Internet-only access for visitors. Our policy firewall (Identity Policy Manager) enables group or device-based, granular access policy control. PCI compliance reports check network settings against PCI requirements to simplify secure retail deployments. Secure wireless environments using Air MarshalMeraki wireless comes equipped with Air Marshal, a built-in wireless intrusion prevention system (WIPS) for threat detection and attack remediation. APs will scan their environment opportunistically or in real-time based on intuitive user-defined preferences. Alarms and auto-containment of malicious rogue APs are configured via flexible remediation policies, ensuring optimal security and performance in even the most challenging wireless environments.High performance meshThe MR66’s advanced mesh technologies like multi-channel routing protocols and multiple gateway support enable scalable, high throughput coverage of hard-to-wire areas with zero configuration. Mesh also improves network reliability - in the eventof a switch or cable failure, the MR66 will automatically revert to mesh mode, providing continued gateway connectivity to clients. Self-configuring, self-optimizing, self-healingWhen plugged in, the MR66 automatically connects to the Meraki cloud, downloads its configuration, and joins your network. It self optimizes, determining the ideal channel, transmit power, and client connection parameters. It also self heals, responding automatically to switch failures and other errors.Low profile, environmentally friendly designIn addition to eliminating excess packaging and documentation, 90% of the access point materials are recyclable. A maximum power draw of only 10.5 watts and a cloud-managed architecture mean that pollution, material utilization and your electric bill arekept to a minimum.SpecificationsRadioOne 802.11b/g/n and one 802.11a/n radioDual concurrent operation in 2.4 and 5 GHz bandsMax throughput rate 600 Mbit/s2.4 GHz 26 dBm peak transmission power5 GHz 24 dBm peak transmission powerMax transmission power is decreased for certain geographies to comply with local regulatory requirementsOperating bands:FCC (US) EU (Europe)2.412-2.484 GHz 2.412-2.484 GHz5.150-5.250 GHz (UNII-1) 5.470-5.600, 5.660-5.725 GHz (UNII-2)5.725 -5.825 GHz (UNII-3)802.11n Capabilities2 x 2 multiple input, multiple output (MIMO) with two spatial streamsMaximal ratio combining (MRC)BeamformingPacket aggregationCyclic shift diversity (CSD) supportPowerPower over Ethernet: 24 - 57 V (802.3af compatible)Power consumption: 10.5 W maxPower over Ethernet injector sold separatelyMountingMounts to walls and horizontal and vertical polesMounting hardware includedPhysical SecuritySecurity screw includedEnvironmentOperating temperature: -4°F to 122°F (-20°C to 50°C)IP67 environmental ratingPhysical Dimensions10.5” x 7.6” x 2.2” (267mm x 192mm x 57mm)Weight: 1.9 lb (862g)Interfaces1x 100/1000 Base-T Ethernet (RJ45) with 48V DC 802.3af PoEFour external N-type antenna connectorsSecurityIntegrated policy firewall (Identity Policy Manager)Mobile device policiesAir Marshal: Real-time WIPS (wireless intrusion prevention system) with alarmsRogue AP containmentGuest isolationTeleworker VPN with IPsecPCI compliance reportingWEP, WPA, WPA2-PSK, WPA2-Enterprise with 802.1XTKIP and AES encryptionVLAN tagging (802.1q)Quality of ServiceWireless Quality of Service (WMM/802.11e)DSCP (802.1p)Layer 7 application traffic shaping and firewallMobilityPMK and OKC credential support for fast Layer 2 roamingL3 roamingLED Indicators4 signal strength1 Ethernet connectivity1 power/booting/firmware upgrade statusRegulatoryFCC (US), IC (Canada), CE (Europe), C-Tick (Australia/New Zealand)Cofetel (Mexico), TK (Turkey)RoHSMean Time Between Failure (MTBF)450,000 hoursWarranty1 year hardware warranty with advanced replacement includedOrdering InformationMR66-HW: Meraki MR66 Cloud-Managed Dual-Radio 802.11n Ruggedized Access Point POE-INJ-3-XX: Meraki 802.3af Power over Ethernet Injector (XX = US, EU, UK or AU) ANT-10: Meraki 5/7 dBi Omni Antenna, Dual-band, N-type, Set of 2ANT-11: Meraki 14 dBi Sector Antenna, 5 GHz MIMO, N-typeANT-13: Meraki 11 dBi Sector Antenna, 2.4 GHz MIMO, N-typeNote: Meraki Enterprise license required.。
思科Meraki MR42 802.11ac Wave 2无线接入点说明书
High performance 802.11ac Wave 2 wirelessThe Cisco Meraki MR42 is a fourradio, cloud-managed 3x3 MU-MIMO 802.11ac Wave 2 access point. Designed for next-generation deployments in offices, schools, hospitals, shops, and hotels, the MR42 offers performance, security, and simple management.The MR42 provides a maximum 1.9 Gbps frame rate with concurrent 802.11ac Wave 2 and 802.11n 3x3:3 MIMO radios. A dedicated third radio provides real-time WIDS/WIPS with automated RF optimization. In addition, an integrated fourth radio delivers Bluetooth Low Energy (BLE) scanning and Beaconing functionality.With a combination of cloud management,high perfomance hardware, multipleradios, and advanced software features,the MR42 makes an outstanding platformfor the most demanding of uses today andtomorrow. These uses include high-densitydeployments and support for applicationslike voice and high-definition video.MR42 and Meraki cloudmanagement: a powerfulcombinationManagement of the MR42 is handledthrough the Meraki cloud, enablingrapid deployment across multiple siteswithout the need for time-consumingtraining or costly certifications. Since theMR42 is self-configuring and managedover the web, it can be deployed at aremote location in a matter of minutes,even without on-site IT staff.24/7 monitoring via the Meraki clouddelivers real-time alerts if the networkencounters problems. Remote diagnostictools enable immediate troubleshootingover the web, meaning multi-site, distributednetworks can be easily managed.The MR42’s firmware is automatically keptup to date via the cloud. New features, bugfixes, and enhancements are deliveredseamlessly over the web. This means nomanual software updates to download ormissing security patches to worry about.Product Highlights»3x3:3 MU-MIMO 802.11ac Wave 2»1.9 Gbps aggregate dual-band frame rate»24x7 real-time WIDS/WIPS and spectrum analytics via dedicated third radio»Integrated Bluetooth Low Energy Beacon andscanning radio»Enhanced transmit power and receive sensitivity »Full-time WiFi location tracking via dedicated 3rd radio »Integrated enterprise security and guest access»Application-aware traffic shaping»Optimized for voice and video»Self-configuring, plug-and-play deployment»Sleek, low-profile design blends into office environmentsMR42Dual-band 802.11ac Wave 2 access point with separate radios dedicated to security, RF management, and BluetoothAggregate data rate of up to 1.9 GbpsA 5 GHz 3x3:3 radio and a 2.4 GHz 3x3:3 radio offer a combined aggregate dual-band frame rate of 1.9 Gbps. Supports upto 1,300 Mbps in the 5 GHz band and 600 Mbps in the 2.4 GHz band. Technologies like transmit beamforming and enhanced receive sensitivity allow the MR42 to support a higher client density than typical enterprise-class access points, resultingin fewer APs for a given deployment. Multi User Multiple InputMultiple Output (MU-MIMO)With support for the 802.11ac Wave 2 standard, the MR42 offers MU-MIMO for efficient transmission to multiple clients. Especially suited for enviroments with numerous mobile devices, MU-MIMO enables multiple clients to receivedata simultanously. This increasesthe total network perfomance and improves the end user experience.Third radio delivers 24x7 wireless security and RF analyticsThe MR42’s sophisticated, dedicateddual-band radio scans the environment continuously, characterizing RF interference and containing wireless threats like rogue access points. No longer choose between wireless security, advancedRF analysis, and serving client data: a dedicated third radio means that all three occur in real-time, without any impactto client traffic or AP throughput. Bluetooth Low Energy Beaconand scanning radioAn integrated fourth radio for Bluetooth Low Energy (BLE) provides seamless deployment of BLE Beacon functionality and effortless visibility of BLE devices. The MR42 enables the next generation of location-aware applications while futureproofing your deployment, making it ready for any new customer engagement strategies.Automatic cloud-based RF optimization The MR42’s sophisticated, automatedRF optimization means that there is noneed for the dedicated hardware andRF expertise typically required to tune awireless network. The RF analysis datacollected by the dedicated third radiois continuously fed back to the Merakicloud. This then automatically tunesthe MR42’s channel selection, transmitpower, and client connection settingsfor optimal performance under eventhe most challenging RF conditions.Integrated enterprise security andguest accessThe MR42 features integrated, easy-to-usesecurity technologies to provide secureconnectivity for employees and guests alike.Advanced security features such as AEShardware-based encryption and WPA2-Enterprise authentication with 802.1X andActive Directory integration provide wire-likesecurity while still being easy to configure.One-click guest isolation provides secure,Internet-only access for visitors. Our policyfirewall (Identity Policy Manager) enablesgranular access control at the group ordevice level. PCI compliance reports checknetwork settings against PCI requirementsto simplify secure retail deployments.Enterprise Mobility Management(EMM) & Mobile DeviceManagement (MDM) integrationMeraki Systems Manager natively integrateswith the MR42 to offer simple automaticsecurity that is context aware. Rapidlydeploy self-service MDM enrolment withoutinstalling additional equipment or dynami-cally tie firewall policies to client posture.End-to-end security has never been so easy.Application-aware traffic shapingThe MR42 includes an integrated layer 7packet inspection, classification, and controlengine, enabling you to set QoS policiesbased on traffic type. Prioritize your missioncritical applications, while setting limits onrecreational traffic, e.g., peer-to-peer andvideo streaming. Importantly, controls canbe implemented per network, per SSID,per user group, or per individual user.Voice and video optmizationsIndustry standard QoS features are easyto configure and come built in. WirelessMulti Media (WMM) access categories,802.1p, and DSCP industry standardsall ensure important applications getpriorotized correctly, not only on theMR42, but on other steps in the trafficflow. Unscheduled Automatic PowerSave Delivery (U-APSD) ensures minimalbattery drain on wireless VoIP phones.Low-profile, modern, userfriendly designDespite its extensive capabilities, theMR42 is packaged in a sleek, low-profileenclosure that blends seamlessly intoany environment. This makes it ideal formodern offices, high end retail locations,and discrete deployments. Using humaninterface design principles, even thephysical installation and mountingexperience has been developed to eliminateerror and simplify installation process.Self-configuring, self-maintaining,always up-to-dateWhen plugged in, the MR42 automaticallyconnects to the Meraki cloud, downloadsits configuration, and joins the appropriatenetwork. If new firmware is required,this is retrieved by the AP and updatedautomatically. This ensures the network ismaintained with bug fixes, security updates,and new features managed for you.Advanced analyticsDrill down into exceptional detail withhighly granular traffic analytics. Understandhow your network is used with access tonumerous datasets. Extend your visibilityto the physical world with journey trackingthrough location analytics. View vistornumbers, dwell time, repeat visit rates, andtrack trends. Fully customize your analysiswith raw data available via simple APIs.FeaturesSpecificationsRadios2.4 GHz 802.11b/g/n client access radio5 GHz 802.11a/n/ac client access radio2.4 GHz & 5 GHz dual-band WIDS/WIPS, spectrum analysis, & location analytics radio2.4 GHz Bluetooth radio with Bluetooth Low Energy (BLE) and Beacon supportConcurrent operation of all four radiosMax aggregate frame rate 1.9 Gbit/sSupported frequency bands (country-specific restric-tions apply):2.412-2.484 GHz5.150-5.250 GHz (UNII-1)5.250-5.350 GHZ (UNII-2)5.470-5.600, 5.660-5.725 GHz (UNII-2e)5.725 -5.825 GHz (UNII-3)AntennaIntegrated omni-directional antennas (5 dBi gain at 2.4 GHz, 5.5 dBi gain at 5 GHz)Individual antenna elements for each radio802.11ac Wave 2 and 802.11n Capabilities3 x 3 multiple input, multiple output (MIMO) with three spatial streamsSU-MIMO and MU-MIMO supportMaximal ratio combining (MRC) & beamforming20 and 40 MHz channels (802.11n), 20, 40, and 80 MHz channels (802.11ac)Up to 256-QAM on both 2.4 GHz & 5 GHzPacket aggregationPowerPower over Ethernet: 37 - 57 V (802.3at required with functionality-restricted 802.3af mode supported) Alternative 12 V DC inputPower consumption: 20W max (802.3at)Power over Ethernet injector and DC adaptersold separatelyLED IndicatorsMulti color & multi function status indicatorInterfaces1x 10/100/1000Base-T Ethernet (RJ45)1x DC power connector (5.5 mm x 2.5 mm,center positive)MountingAll standard mounting hardware includedDesktop, ceiling, and wall mount capableCeiling tile rail (9/16, 15/16 or 1 ½” flush or recessedrails), assorted cable junction boxesBubble level on mounting cradle for accurate horizon-tal wall mountingPhysical SecurityTwo security screw options (included)Kensington lock hard pointConcealed mount plate with anti-tamper cable bayEnvironmentOperating temperature: 32 °F to 104 °F (0 °C to 40 °C)Humidity: 5 to 95% non-condensingPhysical Dimensions10.0” x 6.1” x 1.5” (253.4 mm x 155.8 mm x 37.1 mm), notincluding deskmount feet or mount plateWeight: 25 oz (0.7kg)SecurityIntegrated Layer 7 firewall with mobile device policymanagementReal-time WIDS/WIPS with alerting and automaticrogue AP containment with Air MarshalFlexible guest access with device isolationVLAN tagging (802.1q) and tunneling with IPsec VPNPCI compliance reportingWEP, WPA, WPA2-PSK, WPA2-Enterprise with 802.1XEAP-TLS, EAP-TTLS, EAP-MSCHAPv2, EAP-SIMTKIP and AES encryptionEnterprise Mobility Management (EMM) & MobileDevice Management (MDM) integrationQuality of ServiceAdvanced Power Save (U-APSD)WMM Access Categories with DSCP and802.1p supportLayer 7 application traffic identification and shapingMobilityPMK and OKC credential support for fastLayer 2 roamingDistributed or centralized layer 3 roamingAnalyticsEmbedded location analytics reporting anddevice trackingGlobal L7 traffic analytics reporting per network, perdevice, per applicationWarrantyLifetime hardware warranty with advanced replace-ment includedOrdering InformationMR42-HW: Meraki MR42 Cloud Managed 802.11ac APMA-PWR-30W-XX: Meraki AC Adapter for MR Series(XX = US, EU, UK or AU)MA-INJ-4-XX: Cisco Meraki 802.3at Power over Ether-net Injector (XX = US, EU, UK or AU)Note: Meraki access point license required.Compliance & StandardsIEEE Standards Array 802.11b802.11g802.11a802.11n802.11ac802.11h802.11i802.11e802.11k802.11r802.11uSafety ApprovalsUL 60950-1CAN/CSA-C22.2 No. 60950-1IEC 60950-1EN 60950-1UL 2043 (Plenum Rating)Radio ApprovalsFCC Part 15C, 15ERSS-247 (Canada)EN 300 328, EN 301 893 (Europe)AS/NZS 4268 (Australia/NZ)NOM-121 (Mexico)NCC LP0002 (Taiwan)For additional country-specific regulatory information, please contact Meraki salesEMI Approvals (Class B)FCC Part 15BICES-003 (Canada)EN 301 489-1-17, EN 55032, EN 55024 (Europe)CISPR 22 (Australia/NZ)VCCI (Japan)Exposure ApprovalsFCC Part 2RSS-102 (Canada)EN 50385, EN 62311, EN 62479 (Europe)AS/NZS 2772 (Australia/NZ)Signal Coverage Patterns。
MX 智能管理路由器系列
分支机构网关服务
• 内置DHCP、NAT、QoS和VLAN管理服务。 • Web缓存：加快常用内容的访问速度。 • 负载均衡：将多条WAN链路整合为一个高速接口，并提供 QoS、流量整形和故障切换策略。 • 智能连接监测：自动检测2层和3层中断，并进行快速故障 切换，包括3G/4G USB调制解调器。
Z1 Telecommuter Gateway
Z1 Telecommuter Gateway（远程办公网关）将Cisco Meraki控 制面板和基于远端的集中管理延伸至在家办公的IT员工和管 理人员。 借助Cisco Meraki Auto VPN专利技术，管理员可一键将VoIP、 远程桌面（RDP）等网络服务延伸至远端员工，提供有线和 无线访问，并通过 7层流量整形和优先级划分提高最终用户 的生产力。
Z1TelecommuterGateway
• 1x802.11b/g/n射频， 1x802.11a/n射频， 2x2双重空间串流 MIMO • 使用Cisco Meraki Auto VPN的站点间（IPsec）VPN • 7层应用可视性和流量整形
4
机架式型号
M X84 MX100 MX400 M X 6 00
MX智能管理路由器系列
概述
Cisco Meraki MX 路由器是那些拥有众多分散站点的企业的理想选择。由于MX是100%智能管理解决方案，其安装和远程管理都很 简单。MX拥有一整套网络服务，因此无需多个设备。这些服务包括SD-WAN、7层防火墙、web缓存、4G故障切换和Auto VPN。
基于MERAKI SD-WAN的智能站点间VPN
小型零售分支机构， 小型诊所 50 250 Mbps 25 12 x GbE（2PoE+） N/A N/A 是 桌面/壁挂 10.0” x 5.2” x1”(256mm x 132mm x25mm) 3.37 lb（1.53kg） 90W DC（含） 6W /72 W（MX65） 9W / 79W（MX65W） 32°F － 104°F （0°C － 40°C） 5%－95%
MX行业领先云管理系统说明书
INDUSTRY-LEADING CLOUD MANAGEMENT• Unified firewall, switching, wireless LAN, and mobile device man-agement through an intuitive web-based dashboard• Template based settings scale easily from small deployments to tens of thousands of devices• Role-based administration, configurable email alerts for a variety of BRANCH GATEWAY SERVICES• Built-in DHCP, NAT, QoS, and VLAN management services • Web caching: accelerates frequently accessed content• Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover FEATURE-RICH UNIFIED THREAT MANAGEMENT (UTM) CAPABILITIES• Application-aware traffic control: bandwidth policies for Layer 7 application types (e.g., block Y ouTube, prioritize Skype, throttle BitTorrent)• Content filtering: CIPA-compliant content filter, safe-seach enforcement (Google/Bing), and Y ouTube for Schools• Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco• Advanced Malware Protection: file reputation-based protection engine powered by Cisco AMP• Identity-based security policies and application managementINTELLIGENT SITE-TO-SITE VPN WITH MERAKI SD-WAN• Auto VPN: automatic VPN route generation using IKE/IPsec setup. Runs on physical MX appliances and as a virtual instance within the Amazon AWS or Microsoft Azure cloud services• SD-WAN with active / active VPN, policy-based-routing, dynamic VPN path selection and support for application-layer performance profiles to ensure prioritization of the applications types that matter • Interoperates with all IPsec VPN devices and services• Automated MPLS to VPN failover within seconds of a connection failure• Client VPN: L2TP IPsec support for native Windows, Mac OS X, iPad and Android clients with no per-user licensing feesOverviewCisco Meraki MX Security & SD-WAN Appliances are ideal for organizations considering a Unified Threat Managment (UTM) solution fordistributed sites, campuses or datacenter VPN concentration. Since the MX is 100% cloud managed, installation and remote management are simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services includeSD-WAN capabilities, application-based firewalling, content filtering, web search filtering, SNORT® based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appliances, configurable in Amazon Web Services or Microsoft Azure.Meraki MXCLOUD MANAGED SECURITY & SD-WANRedundant PowerReliable, energy efficient design with field replaceable power suppliesWeb Caching 128G SSD diskDual 10G WAN Interfaces Load balancing and SD-WAN3G/4G Modem Support Automatic cellular failover1G/10G Ethernet/SFP+ Interfaces 10G SFP+ interfaces for high-speed LAN connectivityEnhanced CPU Layer 3-7 firewall and traffic shapingAdditional MemoryFor high-performance content filteringINSIDE THE CISCO MERAKI MXMX450 shown, features vary by modelModular FansHigh-performance front-to-back cooling with field replaceable fansManagement Interface Local device accessMulticolor Status LED Monitor device statusFRONT OF THE CISCO MERAKI MXMX450 shown, features vary by modelCryptographic AccelerationReduced load with hardware crypto assistCisco Threat Grid Cloud for Malicious File SandboxingIdentity Based Policy ManagementIronclad SecurityThe MX platform has an extensive suite of security features including IDS/IPS, content filtering, web search filtering, anti-malware, geo-IP based firewalling, IPsec VPN connectivity and Cisco Advanced Malware Protection, while providing the performance required for modern, bandwidth-intensive yer 7 fingerprinting technology lets administrators identifyunwanted content and applications and prevent recreational apps like BitT orrent from wasting precious bandwidth.The integrated Cisco SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.2 compliance. The MX also uses the Webroot BrightCloud® URL categorization database for CIPA / IWF compliant content-filtering, Cisco Advanced Malware Protection (AMP) engine for anti-malware, AMP Threat Grid Cloud, and MaxMind for geo-IP based security rules.Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.Organization Level Threat Assessment with Meraki Security CenterSD-WAN Made SimpleTransport independenceApply bandwidth, routing, and security policies across a vari-ety of mediums (MPLS, Internet, or 3G/4G LTE) with a single consistent, intuitive workflowSoftware-defined WAN is a new approach to network connectivity that lowers operational costs and improves resource us-age for multisite deployments to use bandwidth more efficiently. This allows service providers to offer their customers the highest possible level of performance for critical applications without sacrificing security or data privacy.Application optimizationLayer 7 traffic shaping and appli-cation prioritization optimize the traffic for mission-critical applica-tions and user experienceIntelligent path controlDynamic policy and perfor-mance based path selection with automatic load balancing for maximum network reliability and performanceSecure connectivityIntegrated Cisco Security threat defense technologies for direct Internet access combined with IPsec VPN to ensure secure communication with cloud applications, remote offices, or datacentersCloud Managed ArchitectureBuilt on Cisco Meraki’s award-winning cloud architecture, the MX is the industry’s only 100% cloud-managed solution for Unified Threat Management (UTM) and SD-WAN in a single appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.For customers moving IT services to a public cloud service, Meraki offers a virtual MX for use in Amazon Web Services and Microsoft Azure, enabling Auto VPN peering and SD-WAN for dynamic path selection.The MX67W, MX68W, and MX68CW integrate Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.• Dual-band 802.11n/ac Wave 2, 2x2 MU-MIMO with 2 spatial streams • Unified management of network security and wireless • Integrated enterprise security and guest accessIntegrated 802.11ac Wave 2 WirelessPower over EthernetThe MX65, MX65W, MX68, MX68W, and MX68CW include two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.• 2 x 802.3at (PoE+) ports capable of providing a total of 60W • APs, phones, cameras, and other PoE enabled devices can be powered without the need for AC adapters, PoE converters, or unmanaged PoE switches.MX68 Port ConfigurationVirtual MX is a virtual instance of a Meraki security appliance, dedicated specifically to providing the simple configuration benefits of site-to-site Auto VPN for customers running or migrating IT services to the public cloud. A virtual MX is added via the Amazon Web Services or Azure marketplace and then configured in the Meraki dashboard, just like any other MX. It functions like a VPN concentrator, and features SD-WAN functionality like other MX devices.• An Auto VPN to a virtual MX is like having a direct Ethernetconnection to a private datacenter. The virtual MX can support up to 500 Mbps of VPN throughput, providing ample bandwidth for mission critical IT services hosted in the public cloud, like Active Directory, logging, or file and print services.• Support for Amazon Web Services (AWS) and AzureMeraki vMX100MX68CW Security ApplianceLTE AdvancedWhile all MX models feature a USB port for 3G/4G failover, the MX67C and MX68CW include a SIM slot and internal LTE modem. This integrated functionality removes the need for external hardware and allows for cellular visibility and configuration within the Meraki dashboard.• 1 x CAT 6, 300 Mbps LTE modem • 1 x Nano SIM slot (4ff form factor)• Global coverage with individual orderable SKUs for North America and WorldwideMX67C SIM slotSmall branch Small branch Small branch Small branch50250 Mbps250 Mbps250 Mbps200 Mbps1Requires separate cellular modemMX67MX67C MX68MX68CW 1Requires separate cellular modemMedium branch Large branch Campus orVPN concentrator Campus orVPN concentratorRack Mount Models 1Requires separate cellular modemVirtual AppliancesExtend Auto-VPN and SD-WAN to public cloud servicesAmazon Web Services (AWS) and Microsoft Azure1 + VirtualIncluded in the BoxPackage Contents Platform(s)Mounting kit AllCat 5 Ethernet cable (2)AllAC Power Adapter MX64, MX64W, MX65, MX65W, MX67, MX67W, MX67C, MX68, MX68W, MX68CWWireless external omni antenna (2)MX64W, MX65W, MX67W, MX68W250W Power Supply (2)MX250, MX450System Fan (2)MX250, MX450SIM card ejector tool MX67C, MX68CWFixed external wireless and LTE paddle antennas MX68CWRemovable external LTE paddle antennas MX67CLifetime Warranty with Next-day Advanced ReplacementCisco Meraki MX appliances include a limited lifetime hardware warranty that provides next-day advance hardware replacement. Cisco Meraki’s simplified software and support licensing model also combines all software upgrades, centralized systems management, and phone support under a single, easy-to-understand model. For complete details, please visit /support.ACCESSORIES / SFP TRANSCEIVERSSupported Cisco Meraki accessory modulesNote: Please refer to for additional single-mode and multi-mode fiber transceiver modulesPOWER CABLES1x power cable required for each MX, 2x power cables required for MX250 and MX450. For US customers, all required power cables will beautomatically included. Customers outside the US are required to order power cords separately.SKUMA-PWR-CORD-AUThe Cisco Meraki MX84, MX100, MX250, MX450 models support pluggable optics for high-speed backbone connections between wir-ing closets or to aggregation switches. Cisco Meraki offers several standards-based Gigabit and 10 Gigabit pluggable modules. Each appliance has also been tested for compatibility with several third-party modules.Pluggable (SFP) Optics for MX84, MX100, MX250, MX450AccessoriesManagementManaged via the web using the Cisco Meraki dashboardSingle pane-of-glass into managing wired and wireless networksZero-touch remote deployment (no staging needed)Automatic firmware upgrades and security patchesTemplates based multi-network managementOrg-level two-factor authentication and single sign-onRole based administration with change logging and alertsMonitoring and ReportingThroughput, connectivity monitoring and email alertsDetailed historical per-port and per-client usage statisticsApplication usage statisticsOrg-level change logs for compliance and change managementVPN tunnel and latency monitoringNetwork asset discovery and user identificationPeriodic emails with key utilization metricsDevice performance and utilization reportingNetflow supportSyslog integrationRemote DiagnosticsLive remote packet captureReal-time diagnostic and troubleshooting toolsAggregated event logs with instant searchNetwork and Firewall ServicesStateful firewall, 1:1 NAT, DMZIdentity-based policiesAuto VPN: Automated site-to-site (IPsec) VPN, for hub-and-spoke or mesh topologies Client (IPsec L2TP) VPNMultiple WAN IP, PPPoE, NATVLAN support and DHCP servicesStatic routingUser and device quarantineWAN Performance ManagementWeb caching (available on the MX84, MX100, MX250, MX450)WAN link aggregationAutomatic Layer 3 failover (including VPN connections)3G / 4G USB modem failover or single-uplinkApplication level (Layer 7) traffic analysis and shapingAbility to choose WAN uplink based on traffic typeSD-WAN: Dual active VPN with policy based routing and dynamic path selection CAT 6 LTE modem for failover or single-uplink1MX67C and MX68CW only Advanced Security Services1Content filtering (Webroot BrightCloud CIPA compliant URL database)Web search filtering (including Google / Bing SafeSearch)Y ouTube for SchoolsIntrusion-prevention sensor (Cisco SNORT® based)Advanced Malware Protection (AMP)AMP Threat Grid2Geography based firewall rules (MaxMind Geo-IP database)1 Advanced security services require Advanced Security license2 Threat Grid services require additional sample pack licensingIntegrated Wireless (MX64W, MX65W, MX67W, MX68W, MX68CW)1 x 802.11a/n/ac (5 GHz) radio1 x 802.11b/g/n (2.4 GHz) radioMax data rate 1.2 Gbps aggregate (MX64W, MX65W), 1.3Gbps aggregate (MX67W,MX68W, MX68CW)2 x 2 MU-MIMO with two spatial streams (MX67W, MX68W, MX68CW)2 external dual-band dipole antennas (connector type: RP-SMA)Antennagain:*************,3.5dBi@5GHzWEP, WPA, WPA2-PSK, WPA2-Enterprise with 802.1X authenticationFCC (US): 2.412-2.462 GHz, 5.150-5.250 GHz (UNII-1), 5.250-5.350 GHZ (UNII-2), 5.470-5.725 GHz (UNII-2e), 5.725 -5.825 GHz (UNII-3)CE (Europe): 2.412-2.484 GHz, 5.150-5.250 GHz (UNII-1), 5.250-5.350 GHZ (UNII-2)5.470-5.600 GHz, 5.660-5.725 GHz (UNII-2e)Additional regulatory information: IC (Canada), C-Tick (Australia/New Zealand), RoHSIntegrated Cellular (MX67C and MX68CW only)LTE bands: 2, 4, 5, 12, 13, 17, and 19 (North America). 1, 3, 5, 7, 8, 20, 26, 28A, 28B, 34, 38, 39, 40, and 41 (Worldwide)300 Mbps CAT 6 LTEAdditional regulatory information: PTCRB (North America), RCM (ANZ, APAC), GCF (EU)Power over Ethernet (MX65, MX65W, MX68, MX68W, MX68CW)2 x PoE+ (802.3at) LAN ports30W maximum per portRegulatoryFCC (US)CB (IEC)CISPR (Australia/New Zealand)PTCRB (North America)RCM (Australia/New Zealand, Asia Pacific)GCF (EU)WarrantyFull lifetime hardware warranty with next-day advanced replacement included.Specificationsand support). For example, to order an MX64 with 3 years of Advanced Security license, order an MX64-HW with LIC-MX64-SEC-3YR. Lifetime warranty with advanced replacement is included on all hardware at no additional cost.*Note: For each MX product, additional 7 or 10 year Enterprise or Advanced Security licensing options are also available (ex: LIC-MX100-SEC-7YR).and support). For example, to order an MX64 with 3 years of Advanced Security license, order an MX64-HW with LIC-MX64-SEC-3YR. Lifetime warranty with advanced replacement is included on all hardware at no additional cost.*Note: For each MX product, additional 7 or 10 year Enterprise or Advanced Security licensing options are also available (ex: LIC-MX100-SEC-7YR).and support). For example, to order an MX64 with 3 years of Advanced Security license, order an MX64-HW with LIC-MX64-SEC-3YR. Lifetime warranty with advanced replacement is included on all hardware at no additional cost.*Note: For each MX product, additional 7 or 10 year Enterprise or Advanced Security licensing options are also available (ex: LIC-MX100-SEC-7YR).。
Cisco Meraki MR86 802.11ax 无线路由器说明说明书
MR86 DatasheetHigh Performance 802.11ax WirelessThe Cisco Meraki MR86is a cloud-managed 4x4:4802.11ax access point that raises the bar for wireless performance and efficiency. Designed for next-generation deployments in offices, schools, hospitals, shops, and hotels, the MR86offers high throughput, enterprise-grade security, and simple management.The MR86provides a maximum of 3.5Gbps* aggregate frame rate with concurrent 2.4 GHz and 5 GHz radios. A dedicated third radio provides real-time WIDS/ WIPS with automated RF optimization, and a fourth integrated radio delivers Bluetooth scanning and beaconing.With the combination of cloud management, high performance hardware, multiple radios, and advanced software features, the MR86makes an outstanding platform for the most demanding of uses—including high-density deployments and bandwidth or performance-intensive applications like voice and high-definition video.MR86and Meraki Cloud ManagementManagement of the MR86is performed through the Meraki cloud, with an intuitive browser-based interface that enables rapid deployment without time-consuming training or costly certifications. Because the MR86is self-configuring and managed over the web, it can be deployed at a remote location in a matter of minutes, even without on-site IT staff.24x7 monitoring via the Meraki cloud delivers real-time alerts if a network encounters problems. Remote diagnostic tools enable immediate troubleshooting over the web so that distributed networks can be managed with a minimum of hassle.The MR86’s firmware is automatically kept up to date via the cloud. New features, bug fixes, and enhancements are delivered seamlessly over the web. This means no manual software updates to download or missing security patches to worry about.Product Highlights•4x4:4MU-MIMO 802.11ax• 3.5* Gbps dual-radio aggregate frame rate •Integrated enterprise security and guest access •Application-aware traffic shaping•24x7 real-time WIDS/WIPS and spectrum analytics via dedicated third radio•Integrated Bluetooth Low Energy Beacon•Integrated scanning radio•Enhanced transmit power and receive sensitivity •Optimized for voice and video•Self-configuring, plug-and-play deployment•Sleek design blends into office environments•Full-time Wi-Fi location tracking via dedicated 3rd radioFeaturesDual–radio aggregate frame rate of up to 3.5Gbps*5 GHz 4x4:4radio and 2.4 GHz 4x4:4radio offer a combined dual–radio aggregate frame rate of 3.5Gbps*, with up to 2,402Mbps in the 5 GHz band and1,148Mbps in the 2.4 GHz band. Technologies like transmit beamforming and enhanced receive sensitivity allow the MR86to support a higher client density than typical enterprise-class access points, resulting in better performance for more clients, from each AP.Multi User Multiple Input Multiple Output (MU-MIMO)With support for features of 802.11ax, the MR86offers MU-MIMO and OFDMA for more efficient transmission to multiple clients. Especially suited to environments with numerous mobile devices, MU-MIMO enables multiple clients to receive data simultaneously. This increases the total network performance and improves the end user experience.Dedicated third radio delivers 24x7 wireless security and RF analyticsThe MR86’s dedicated dual-band scanning and security radio continually asses the environment, characterizing RF interference and containing wireless threats like rogue access points. There’s no need to choose between wireless security, advanced RF analysis, and serving client data - a dedicated third radio means that all functions occur in real-time, without any impact to client traffic or AP throughput.Bluetooth Low Energy Beacon and scanning radioAn integrated fourth Bluetooth radio provides seamless deployment of BLE Beacon functionality and effortless visibility of Bluetooth devices. The MR86enables the next generation of location-aware applications while future proofing deployments, ensuring it’s ready for any new customer engagement strategies.Automatic cloud-based RF optimizationThe MR86’s sophisticated and automated RF optimization means that there is no need for the dedicated hardware and RF expertise typically required to tune a wireless network. The RF data collected by the dedicated third radio is continuously fed back to the Meraki cloud. This data is then used to automatically tune the channel selection, transmit power, and client connection settings for optimal performance under even the most challenging RF conditions.Integrated enterprise security and guest accessThe MR86features integrated, easy-to-use security technologies to provide secure connectivity for employees and guests alike. Advanced security features such as AES hardware-based encryption and Enterprise authentication with 802.1X and Active Directory integration provide wired-like security while still being easy to configure. One-click guest isolation provides secure, Internet-only access for visitors. PCI compliance reports check network settings against PCI requirements to simplify secure retail deployments.Enterprise Mobility Management (EMM) & Mobile Device Management (MDM) integrationMeraki Systems Manager natively integrates with the MR86to offer automatic, context-aware security. Systems Manager’s self-service enrollment helps to rapidly deploy MDM without installing additional equipment, and then dynamically tie firewall and traffic shaping policies to client posture.* Refers to maximum over-the-air data frame rate capability of the radio chipset, and may exceed data rates allowed by IEEE 802.11ax operation.Application-aware traffic shapingThe MR86includes an integrated layer 7 packet inspection, classification, and control engine, enabling the configuration of QoS policies based on traffic type, helping to prioritize mission-critical applications while setting limits on recreational traffic like peer-to-peer and video streaming. Policies can be implemented per network, per SSID, per user group, or per individual user for maximum flexibility and control.Voice and video optimizationsIndustry standard QoS features are built-in and easy to configure. Wireless MultiMedia (WMM) access categories, 802.1p, and DSCP standards support all ensure important applications get prioritized correctly, not only on the MR86, but on other devices in the network. Unscheduled Automatic Power Save Delivery (U-APSD) and new Target Wait Time features in 802.11ax clients ensure minimal battery drain on wireless VoIP phones.Self-configuring, self-maintaining, always up-to-dateWhen plugged in, the MR86automatically connects to the Meraki cloud, downloads its configuration, and joins the appropriate network. If new firmware is required, this is retrieved by the AP and updated automatically. This ensures the network is kept up-to-date with bug fixes, security updates, and new features.Advanced analyticsDrilling down into the details of network usage provides highly granular traffic analytics. Visibility into the physical world can be enhanced with journey tracking through location analytics. Visitor numbers, dwell time, repeat visit rates, and track trends can all be easily monitored in the dashboard and deeper analysis is enabled with raw data available via simple APIs.SpecificationsCategory SpecificationsRadios • 2.4 GHz 802.11b/g/n/ax client access radio• 5 GHz 802.11a/n/ac/ax client access radio• 2.4 GHz & 5 GHz dual-band WIDS/WIPS, spectrum analysis, & location analytics radio • 2.4 GHz Bluetooth Low Energy (BLE) radio with Beacon and BLE scanning support •Concurrent operation of all four radios•Supported frequency bands (country-specific restrictions apply)•Supported frequency bands (country-specific restrictions apply):◦ 2.412-2.484 GHz◦ 5.150-5.250 GHz (UNII-1)◦ 5.250-5.350 GHZ (UNII-2)◦ 5.470-5.600, 5.660-5.725 GHz (UNII-2e)◦ 5.725 -5.825 GHz (UNII-3)Antenna•List of compatible antennas: MA-ANT-20/25/27 and AIR-ANT2513P4M-N=802.11ax, 802.11ac Wave 2 and 802.11n Capabilities •DL-OFDMA**, UL-OFDMA**, TWT support**, BSS Coloring**• 4 x 4multiple input, multiple output (MIMO) with four spatial streams•SU-MIMO, UL MU-MIMO** and DL MU-MIMO support•Maximal ratio combining (MRC) & beamforming•20 and 40 MHz channels (802.11n); 20, 40, and 80 MHz channels (802.11ac Wave 2); 20, 40 and 80 MHz channels (802.11ax)•Up to 1024-QAM on both 2.4 GHz & 5 GHz bands•Packet aggregationPower•Power over Ethernet: 42.5- 57 V (802.3at compatible)•Power consumption: 30W max (802.3at required)•Power over Ethernet injector sold separatelyNote:Actual power consumption may vary depending on the AP usage.Interfaces•1x 100/1000/2.5G BASE-T Ethernet (RJ45)Mounting •All standard mounting hardware included •Mounts to walls and vertical poles.Physical Security •Two security screws•Concealed mount plate with anti-tamper cable bayEnvironment •Operating and storage temperature: -40°F to 131°F (-40°C to 55°C)•Operating and storage humidity: 5 to 95% non-condensing •Operating and storage altitude: Up to 40,000 feet (12,192 meters)•IP67 Environmental ratingReliability•Mean Time Between Failure (MTBF): 1,566,656hrs at +25°C operating temperaturePhysical Dimensions •11.81” x 6.02” x 2.16” (30.0 cm X 15.3 cm X 5.5 cm), not including cable gland, mounts or antennas •Weight: 1.5kgSecurity •Integrated Layer 7 firewall with mobile device policy management•Real-time WIDS/WIPS with alerting and automatic rogue AP containment with Air Marshal •Flexible guest access with device isolation•VLAN tagging (802.1q) and tunneling with IPsec VPN•PCI compliance reporting•WEP***, WPA, WPA2-PSK, WPA2-Enterprise with 802.1X, WPA3 - Personal**, WPA3 - Enterprise**, WPA3 - Enhanced Open (OWE)**•EAP-TLS, EAP-TTLS, EAP-MSCHAPv2, EAP-SIM•TKIP and AES encryption•Enterprise Mobility Management (EMM) & Mobile Device Management (MDM) integration•Cisco ISE integration for Guest access and BYOD PosturingQuality of Service •Advanced Power Save (U-APSD)•WMM Access Categories with DSCP and 802.1p support •Layer 7 application traffic identification and shapingMobility •PMK, OKC, & 802.11r for fast Layer 2 roaming •Distributed or centralized layer 3 roamingAnalytics •Embedded location analytics reporting and device tracking•Global L7 traffic analytics reporting per network, per device, & per applicationLED Indicators• 1 power/booting/firmware upgrade statusRegulatory •RoHS•For additional country-specific regulatory information, please contact Meraki salesWarranty• 1 year hardware warranty with advanced replacement includedOrdering Information •MR86-HW: Meraki MR86 Cloud Managed 802.11ax AP•MA-INJ-5-XX: Meraki Multigigabit 802.3at Power over Ethernet Injector (XX = US/EU/UK/AU)•MA-INJ-4-XX: Meraki Gigabit 802.3at Power over Ethernet Injector (XX = US/EU/UK/AU)•MA-ANT-20 Meraki Dual-Band Omni Antennas•MA-ANT-25 Meraki Dual-Band Patch Antenna•MA-ANT-27 Meraki Dual-Band Sector Antenna•AIR-ANT2513P4M-N= Dual-band, 4-port, 30° beam•Note: Meraki access point license required. For AIR-ANT2513P4M-N= antenna, contact Cisco directlyCompliance and StandardsCategory StandardsIEEE Standards•802.11a, 802.11ac, 802.11ax, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11k, 802.11n, 802.11r, and 802.11u***Safety Approvals •CSA and CB 60950 & 62368•Conforms to UL 2043 (Plenum Rating)Radio Approvals •Canada: FCC Part 15C, 15E, RSS-247•Europe: EN 300 328, EN 301 893•Australia/NZ: AS/NZS 4268•Mexico: IFT, NOM-208•Taiwan: NCC LP0002•For additional country-specific regulatory information, please contact Meraki SalesEMI Approvals (Class B)•Canada: FCC Part 15B, ICES-003•Europe: EN 301 489-1-17, EN 55032, EN 55024•Australia/NZ: CISPR 22•Japan: VCCIExposure Approvals •Canada: FCC Part 2, RSS-102•Europe: EN 50385, EN 62311, EN 62479•Australia/NZ: AS/NZS 2772RF Performance Table2.4 GHzOperating Band Operating Mode Data Rate Total TX Power (conducted) 2.4 GHz802.11b 1 Mb/s25.02 Mb/s25.05.5 Mb/s25.011 Mb/s25.02.4 GHz802.11g 6 Mb/s25.09 Mb/s25.012 Mb/s23.518 Mb/s23.524 Mb/s 22.0*** feature can be enabled for required networks36 Mb/s22.048 Mb/s21.554 Mb/s21.5 2.4 GHz802.11n (HT20)MCS025.0MCS125.0MCS223.5MCS323.5MCS423.5MCS521.5MCS621.5MCS720.5 2.4 GHz802.11ac (VHT20)MCS025.0MCS125.0MCS223.5MCS323.5MCS423.5MCS521.5MCS621.5MCS720.52.4 GHz802.11ax (HE20)MCS025.0MCS125.0MCS223.5MCS323.5MCS423.5MCS521.5MCS621.5MCS720.5MCS819.5MCS919.5MCS1018.0MCS1118.0 2.4 GHz802.11ac (VHT40)MCS023.0MCS123.0MCS223.0MCS323.0MCS423.0MCS521.0MCS720.5MCS819.5MCS919.5 2.4 GHz802.11ax (HE40)MCS023.0MCS123.0MCS223.0MCS323.0MCS423.0MCS521.0MCS621.0MCS720.5MCS819.5MCS919.5MCS1018.0MCS1118.0 5 GHzOperating Band Operating Mode Data Rate TX Power5 GHz802.11a6 Mb/s24.09 Mb/s24.012 Mb/s23.018 Mb/s23.024 Mb/s22.036 Mb/s22.048 Mb/s21.054 Mb/s20.5 5 GHz802.11n (HT20)MCS024.0MCS124.0MCS223.0MCS323.0MCS422.0MCS522.0MCS621.0MCS720.5 5 GHz802.11n (HT40)MCS023.0MCS123.0MCS223.0MCS422.0MCS521.0MCS620.5MCS720.0 5 GHz802.11ac (VHT20)MCS024.0MCS124.0MCS223.0MCS323.0MCS422.0MCS522.0MCS621.0MCS720.5MCS819.5 5 GHz802.11ac (VHT40)MCS023.0MCS123.0MCS223.0MCS323.0MCS422.0MCS620.5MCS720.0MCS819.0MCS918.5 5 GHz802.11ac (VHT80)MCS023.0MCS123.0MCS223.0MCS323.0MCS422.0MCS520.0MCS620.0MCS719.0MCS818.0MCS918.0 5 GHz802.11ax (HE20)MCS024.0MCS124.0MCS223.0MCS323.0MCS522.0MCS621.0MCS720.5MCS819.5MCS919.0MCS1017.5MCS1117.5 5 GHz802.11ax (HE40)MCS023.0MCS123.0MCS223.0MCS323.0MCS422.0MCS521.0MCS620.5MCS720.0MCS819.0MCS918.5MCS1017.0MCS1117.0 5 GHz802.11ax (HE80)MCS023.0MCS123.0MCS223.0MCS323.0MCS422.0MCS520.0MCS620.0MCS719.0MCS818.0MCS918.0MCS1016.0MCS1116.0Installation GuideFor instructions on how to install and configure MR86access points please refer the MR86Installation Guide。