cisco-meraki-产品介绍与技术原理资料
基于云计算技术的思科Meraki实例分析
予IT 管理人员对网络的可见性和管控能力的同时，免除复杂的传统网络架构，实现100%智能远程管理。
Meraki 远程管理 简单部署 集中管理在传统组网环境下，网络管理员需要对网元设备进行大量的配置工作。
IP 地址、VLAN 、交换机、路由器、防火墙、AC 、AP 等，以整个网络拓扑为基础，细化到每一台设备上，无疑会耗费大量的精力。
现如今，越来越多的人开始使用移动终端，并把App 连到云端，到处都是设备对宽带的疯狂需求，多到已经数不过来。
用户们已经开始使用各种新设备和App ，传统网络只能用老的网络技术去支持它们，而新形势下出现的基于云计算技术的思科Meraki 就显得十分亮眼。
最好用的网络是什么？那就是当它在运行的时候，你可以忽视它的存在。
然而当核心业务需要保障时，它就在你的身边给予安全强力的支撑。
Meraki 简化IT 运维管理，实现100%智能管理，快速部署，简单易用，保持IT 系统持续高品质运行。
同时又具备极佳的可见性，所见即所得，随时随地获取IT 全网数据。
Meraki 基于云平台对网络设备进行集中化管理，例如：安全网关、交换机、AP 、监控摄像头、移动性管理等，简化网络架构和IT 运维难度。
一 什么是Meraki ？Meraki 是一款100%智能管理IT 、智能管理边界、分支和企业级园区IT 解决方案，帮助各种规模的组织简化管理。
无线接入点、交换机以及路由系列产品管理均采用智能端集中式管理，Meraki 在赋予IT 管理人员对网络的可见性和管控能力的同时，免除复杂的传统网络架构。
z 快速部署：设备即插即用，无需到点设置，时尚超薄设计适合任何环境；z 可靠性和性能：无本地AC ，智能集中式云管理，按需扩展，跟随业务无缝扩展，2×2 MU-MIMO 802.11ac Wave 2，1.3 Gbps*总数据速率；z 集中管理：直观管理各个站点和所有设备，包括：通过浏览器管理、整体拓扑呈现、用户流量分布、广域网流量、中文管理界面。
思科 Meraki MR70 双频 802.11ac Wave 2 技术规格说明书
MR70Dual-band, 802.11ac Wave 2 ruggedized access point delivering basic enterprise wireless foroutdoor or low-density deploymentsEntry-level cloud-managed 802.11ac wirelessThe Cisco Meraki MR70 is a dual-radio, cloud-managed 2x2:2 802.11ac Wave 2 access point with MU-MIMO support. Designed for basic, best-effort deployments that require rapid installation, the MR70 provides enterprise-grade security and simple management in a ruggedized, IP67-rated form factor that sports integrated omni-directional antennas.The MR70 is ideal for municipal athletic fields, garages, public gardens, space-constrained outdoor deployments, and even rapid-response emergency kits designed to quickly deliver wireless in disaster-struck areas. The MR70 provides a maximum 1.3 Gbps* aggregate frame rate with concurrent 2.4 GHz and 5 GHz radios.MR70 and Meraki cloud management: a powerful combinationThe MR70 is managed through the Meraki cloud, with an intuitive browser-based interface that enables rapid deployment without training or certifications. Because the access point is monitored24x7 by the Meraki cloud, the MR70 can deliver real-time alertsif the network encounters problems, and diagnostic tools enable real-time troubleshooting over the web. The MR70’s firmware is always kept up to date from the cloud. New features, bug fixes, and enhancements are delivered seamlessly over the web, meaning no manual software updates to download or missing security patches to worry about.Product Highlights• 2x2 MU-MIMO 802.11ac Wave 2• 1.3 Gbps* aggregate dual-band frame rate• Integrated enterprise security and guest access • Built-in WIPS for threat detection and remediation • Application-aware traffic shaping• Self-configuring, plug-and-play deployment • Rapid, plug-and-play deployment• Integrated location analytics and heat mapFeaturesAggregate data rate of up to 1.3 Gbps*A 5 GHz 2x2:2 radio supporting 80 MHz channel widths and a2.4 GHz 2x2:2 radio supporting 40 MHz channel widths offer a combined dual-radio aggregate frame rate of 1.3 Gbps*, with up to 866 Mbps in the 5 GHz band thanks to 802.11ac Wave 2 and 400 Mbps in the 2.4 GHz band.Multi User Multiple Input Multiple Output (MU-MIMO)With support for the 802.11ac Wave 2 standard, the MR70 offers MU-MIMO for more efficient transmission to multiple clients. This increases the total network performance and the improves the end user experience.Integrated enterprise security and guest accessThe MR70 features integrated, easy-to-use security technologies to provide secure connectivity for employees and guests alike. Advanced security features such as AES hardware-based encryption and WPA2-Enterprise authentication with 802.1X provide wire-like security while still being easy to configure. One-click guest isolation provides secure, Internet-only access for visitors. Our policy firewall (Identity Policy Manager) enables group or device-based, granular access policy control.Secure wireless environments using Air MarshalThe MR70 comes equipped with Air Marshal, a built-in wireless intrusion prevention system (WIPS) for threat detection and attack remediation. MR70 access points will scan their environment opportunistically based on user-defined preferences. Alarms and auto-containment of malicious rogue APs are configured via flexible remediation policies, ensuring optimal security and performance in even the most challenging wireless environments.Application-aware traffic shapingThe MR70 includes an integrated Layer 7 packet inspection, classification, and control engine, enabling you to set QoS policies based on traffic type. Prioritize your mission critical applications, while setting limits on recreational traffic, e.g., peer-to-peer and video streaming.Self-configuring, self-optimizing, self-healingThe MR70’s advanced mesh technologies like multi-channel routing protocols and multiple gateway support enable scalable coverage of hard-to-wire areas with zero configuration. Mesh also improves network reliability — in the event of a switch or cable failure, the MR70 will automatically revert to mesh mode, providing continued gateway connectivity to clients.Rapid, plug-and-play deploymentWhen plugged in, the MR70 automatically connects to the Meraki cloud, downloads its configuration, and joins the appropriate network. It self-optimizes, determining the ideal channel, transmit power, and client connection parameters.Integrated analyticsDrill down into the details of your network usage with highly granular traffic analytics. Extend your visibility into the physical world with built-in location analytics that enables you to view visitor numbers, dwell time, repeat visit rates, and track foot traffic trends.SpecificationsRadios2.4 GHz 802.11b/g/n/ac client access radio5 GHz 802.11a/n/ac Wave 2 client access radioSupported frequency bands (country-specific restrictions apply):• 2.412-2.484 GHz• 5.150-5.250 GHz (UNII-1)• 5.250-5.350 GHZ (UNII-2)• 5.470-5.600, 5.660-5.725 GHz (UNII-2e)• 5.725-5.825 GHz (UNII-3)802.11ac and 802.11n Capabilities2 x 2 multiple input, multiple output (MIMO) with two spatial streamsSU-MIMO and MU-MIMO supportMaximal ratio combining (MRC) & Beamforming20 and 40 MHz channels (2.4 GHz), 20, 40, and 80 MHz channels (5 GHz)Up to 256-QAM on both 2.4 GHz and 5 GHz bandsPacket aggregationPowerPower over Ethernet: 37-57 V (802.3af compatible)Power consumption: 11 W max (802.3af)Power over Ethernet injector sold separatelyMountingMounts to walls and vertical polesMounting hardware includedPhysical SecuritySecurity screw includedEnvironmentOperating temperature: -4 °F to 131 °F (-20 °C to 55 °C)IP67 environmental ratingOperating humidity: 5% to 95%Physical Dimensions9.65” x 4.53” x 1.18” (245 mm x 115 mm x 30 mm)Weight: 15.87 oz (0.45 kg)AntennaIntegrated omni-directional antennas (4.5 dBi gain at 2.4 GHz, 4.7 dBi gain at 5 GHz)Interfaces1x 100/1000 BASE-T Ethernet (RJ45)SecurityIntegrated Layer 7 firewall with mobile device policy managementReal-time WIDS/WIPS with alerting and automatic rogue AP containment with Air Marshal Flexible guest access with device isolationVLAN tagging (802.1Q) and tunneling with IPSec VPNPCI compliance reportingWEP, WPA, WPA2-PSK, WPA2-Enterprise with 802.1XEAP-TLS, EAP-TTLS, EAP-MSCHAPv2, EAP-SIMTKIP and AES encryptionEnterprise Mobility Management (EMM) & Mobile Device Management (MDM) integration Quality of ServiceAdvanced Power Save (U-APSD)WMM Access Categories with DSCP and 802.1p supportLayer 7 application traffic identification and shapingMobilityPMK, OKC, and 802.11r for fast Layer 2 roamingDistributed or centralized Layer 3 roamingLED Indicators1 power/booting/firmware upgrade statusRegulatoryRoHSEN50155: 2017 (Railway)For additional country-specific regulatory information, please contact Meraki sales Warranty1 year hardware warranty with advanced replacement includedOrdering InformationMR70-HW: Meraki MR70 Cloud Managed 802.11ac APMA-PWR-30W-XX: Meraki AC Adapter for MR Sseries (XX = US/EU/UK/AU)MA-INJ-4-XX: Cisco Meraki 802.3at Power over Ethernet Injector (XX = US/EU/UK/AU) Note: Meraki Enterprise license requiredCompliance and StandardsSafety ApprovalsUL 60950-1CAN/CSA-C22.2 No. 60950-1IEC 60950-1EN 60950-1Radio ApprovalsCanada: FCC Part 15C, 15E, RSS-247Europe: EN 300 328, EN 301 893Australia/NZ: AS/NZS 4268Mexico: NOM-121For additional country-specific regulatory information, please contact Meraki Sales EMI Approvals (Class B)Canada: FCC Part 15B, ICES-003Europe: EN 301 489-1-17, EN 55032, EN 55024Australia/NZ: CISPR 32Exposure ApprovalsCanada: FCC Part 2, RSS-102Europe: EN 50385, EN 62311Australia: AS/NZS 2772。
cisco meraki 产品介绍与技术原理 PPT
目录 CONTENTS
技术原理 与其他AP对比
R2, 2012 Windows Phone 8.1
2、高延展性
云管理平台对所接入AP的数量无限制，每新增一台AP，只需将AP连接至云管理平台， 无需另外配置
3、高可靠性
客户的数据至少在三个数据中心备份 meraki的云管理平台是大规模的分布式架构，提供冗余链路 即便断开与网络的连接，meraki所管理的无线网络仍然能够连接上网
技术原理—CMX（Connected Mobile Experences)
cmx api
利用cmx 位置分析能够为管理者提供wifi用户的实时位置统计信息和报告
技术原理—CMX
1 通过扫描probe request和802.11数据包来检测开启wifi的设备
iphone设备， 没有连接到互 联网
技术原理—应用层的可视化管理
可以看到： 使用者名称 使用的应用类型 使用者的操作系统或者设备 使用者所使用的流量
• meraki根据ip地址，主机名以及端口号范围来确定应用类型 • 对于p2p类型应用流量的分类，采用的方法是：识别到在一系列浮动的ip地址中
的简短的tcp会话（ recognizes short TCP sessions across a fleeting range of IP addresses），就可以识别p2p应用 • 可以使用dscp或者pcp协议给不同应用的流量打标签，从而可以使用qos对用户 使用不同的应用进行限制或者限速 • 用户所使用应用的流量分析和配置信息等将会和网络管理数据一起上传到云管 理中心
技术原理—Air Marshal
2 预防机制：air marshal ap具备识别非授权ap的功能，这样可以使 得网络管理者在客户连接上这些非授权ap前，采用物理措施移除这些非 授权ap。具体实现如下：
MerakiMX系列智能管理路由器
传输独立性
智能路径控制
4
Cisco Systems, Inc. |
应用优化 安全连接
内置802.11ac无线技术
MX64W 和 MX65W 紧密集成了 Cisco Meraki 屡获大奖的无线技术和 强大的MX网络安全特性，是分支机构或小型企业的理想选择。
• 双频段 802.11n/ac，2x2 双重空间串流 MIMO • 统一管理网络安全和无线技术 • 内置企业安全性和访客访问
Z系列 Telecommuter Gateway
Z系列 Telecommuter Gateway（远程办公网关）Cisco Meraki 控制面 板和基于远端的集中管理延伸至在家办公的IT员工和管理人员。 借助 Cisco Meraki Auto VPN 专利技术，管理员可一键将 VoIP、 远程 桌面（RDP）等网络服务延伸至远端员工，提供有线和无线访问，并通 过7层流量整形和优先级划分提高最终用户的生产力。 • 2 x 802.11a/b/g/n/ac (2.4GHz or 5GHz) 射频，2x2 双重空间串
• 内置DHCP、NAT、QoS和VLAN管理服务。
• Web缓存：加快常用内容的访问速度。
• 负载均衡：将多条WAN链路整合为一个高速接口，并提供QoS、流 量整形和故障切换策略。
• 智能连接监测：自动检测2层和3层中断，并进行快速故障切换，包 括3G/4G USB调制解调器。
CISCO MERAKI MX 内面
内置PoE+
MX65 和 MX65W 包含两个 802.3at（PoE+）端口。此项内置供电能力 无需额外硬件即可为重要的分支机构设备供电。 • 两个 802.3at（PoE+）端口共可提供60W电力 • 可为 AP、话机、摄像头以及其它支持 PoE 的设备供电，不需要
Meraki MS 系列交换机
支持所有部署类型的强大的特性集
Meraki交换机包含高端产品所具备的所有传统Ethernet特性， 其中包括： • 用于为语音、视频等任务关键型链路划分优先级的服务质量
（QoS） • 用于实现基于端口的网络访问控制的IEEE 802.1X支持 • 基于MAC的RADIUS认证和MAC白名单 • 用于简化VoIP部署的语音VLAN • 用于以线速监测网络流量的端口镜像 • 用于防止用户在网络上添加非法DHCP服务器的DHCP监听 • 用于优化组播流量的网络性能的IGMP监听 • 用于实现大容量中继、堆叠和更高可用性的链路聚合控制协
3
Meraki 聚合交换产品组合
系列
MS410
部署类型 接口1 上行链路 电源配置 堆叠能力 路由能力
型号
1G光纤聚合
16 / 32 x 1GbE SFP
2 x 10GbE SFP+（MS410-16） 4 x 10GbE SFP+（MS410-32）
模块化 可选冗余PSU（单独出售）
160G物理 + 虚拟
设置一台Meraki交换机只需将其联网，没有必要进行重复、 基于命令的配置。交换机联网后数分钟之内就可以启动和运 行。
一个功能强大的集中管理界面可让管理员深入了解网络及其 使用情况，查看那些交换机接近数百个站点的容量，快速配 置和重配置交换机端口的安全、QoS等策略。Meraki控制面 板提供统一策略、事件日志和监测功能，便于用户管理网络 部署，而且不会对性能产生任何影响。
· 灵活堆叠，可扩展配置和提升高性能。 · 智能管理可降低成本和开销，缩短问题解决时间。 · 行业标准特性使其能够轻松整合到现有和混合基础设
施中。 · 基于角色的管理，通过web实现自动安全的固件设计。
思科Meraki MC74 VoIP电话说明书
OVERVIEWThe Cisco Meraki MC74 is a premium VoIP phone with an elegant design, featuring a 7” touchscreen display. Representing a fresh approach to the notoriously complex and disjointed world of telephony, it leverages the power of the cloud to eliminate the traditional PBX. MC74 provides simple, intuitive management and the ability to integrate with business applications.MERAKI COMMUNICATIONSMeraki Communications phones benefit from zero-touch deployment. With only a serial number the network admin can remotely configure the phone for a user or meeting room. Once online it will connect to the cloud, pull down its configuration and within seconds be ready to make calls.Using the Meraki dashboard, the network admin is able to manage all the essentials: review call stats, configure alerts, setup conference rooms, manage a contacts directory and set up Interactive Voice Response menus. For connection to the rest of the world via the public switched telephone network (PSTN), there are configuration options for a SIP service provider, and Meraki partners will be able to guide customers on this essential component.INTRODUCING MC74With a beautiful, carefully crafted design and superb sound quality, MC74 is designed to delight the user, featuring easy and intuitive access to the most commonly used features—and the minimum of distractions.A large, high resolution color display is the center of the phone experience, and this blank canvas allows Meraki engineers and designers to evolve and refine the user experience over time. The display and speaker provide intuitive visual and audible cues to communicate status, without requiring the user to navigate through deep, complicated menus.Wideband audio enhances the calling experience, allowing crystal clear speech. Calls can be placed or received using the handset, USB, Bluetooth or even regular cellphone headsets.* A sensitive mi-crophone and full range speaker are also included for an exceptional hands–free experience during meetings.MC74 aims to be nothing less than the best possible communica-tions experience.MC74 Cloud Managed PhoneDatasheet |MC74SpecificationsHardwareHigh definition color 7” IPS backlit touchscreen display (1280x800) Integrated GbE switch with passthrough portIntegrated desktop stand with adjustable hingeOptional wall mount adapter with levelerDedicated volume buttonMute button with status LEDHandset with on-hook proximity sensorMagnetic cable guideRear and side USB headset ports3.5mm audio headset jackSpeakerphone/MicAmbient light sensorMulticolor notification LEDIn the boxMC74 phone + handset and cordWall mounting kit + hardwareMicrofiber screen clothDesign matched ethernet cableVoIPFully encrypted voice and SIP signaling (TLS/SRTP)E911 support for accurate location in emergenciesE164 international dialling formatWideband audio G.722 internal calling (G.711 for PSTN calling)Power802.3af PoE (Class 3)Universal power adapter (optional accessory)EnvironmentOperating temp: 0o C to 40o C (32 to 104F)Humidity 5 – 95% non condensingPhysical dimensionsSize including handset 272 x 186 x 94mm (10.7 x 7.3 x 3.7in) Weight 1.1Kg (2.4lbs)Warranty2 Y ears Licensing1, 3, 5, 7 or 10 year licensing optionsSafetyUL / IEC / EN 60950-1CAN/CSA-C22.2 No. 60950-1Radio ApprovalsFCC Part 15C, 15EEN 300 328, EN 301 893For additional country-specific regulatory information, please contact Meraki salesSupported frequency bands (country-specific restrictions apply)2.412-2.484 GHz5.150-5.250 GHz (UNII-1)5.250-5.350 GHZ (UNII-2)5.470-5.600, 5.660-5.725 GHz (UNII-2e)5.725-5.825 GHz (UNII-3)EMI Approvals (Class B)FCC Part 15BEN 301 489-1-17, EN 55032, EN 55024Exposure ApprovalsFCC Part 2EN 62311, EN 62479Telecom ApprovalsFCC Part 68* A list of tested headsets can be found at CiscoSystems,Inc.|500TerryA.FrancoisBlvd,SanFrancisco,CA94158|(415)432-1000|**************** 2。
meraki_offer_description_cn说明书
产品说明产品说明：Meraki 云网络本产品说明（“产品说明”）介绍了上列出的思科 Meraki 云网络产品。
您的订用受本产品说明和/go/eula上列出的思科《最终用户许可协议》（或您和思科之间存在的类似条款）（以下称为“协议”）的约束。
本产品说明中使用但未另行定义的术语具有协议中赋予它们的含义。
1.说明思科 Meraki 云网络产品套件包括网络硬件设备（无线接入点、交换机和安全设备/防火墙）、监控摄像头、传感器、终端管理软件以及网络应用和 WAN 性能软件。
所有思科 Meraki 产品都通过一个云托管软件平台进行管理，该平台被称为 Meraki “控制板”。
控制板允许客户通过单个面板来配置、管理和监控部署在其全球网络中的 Meraki 设备。
2.补充条款和条件2.1.许可证和使用权条件要为您购买的每项硬件获得软件许可证，您需要购买和维持相关的 Meraki 云服务，否则硬件将无法运行。
您使用 Meraki 云服务的软件许可证和权利不可转让。
2.2.期限和许可模式2.2.1.在共同终止许可模式下，思科技术使用期限的开始日期是相关思科技术交付给您的日期，结束日期为以下两个日期中的较早者：(a) 共同终止日期或 (b) 使用权终止日期。
2.2.2.在按设备许可模式下，思科技术使用期限的开始日期为以下两个日期中的较早者：(a) 您通过Meraki 云服务分配相关硬件的日期或 (b) 相关思科技术交付给您之日后的第 91 天。
此类使用期限的结束日期为以下两个日期中的较早者：(1) 开始日期加上相应采购订单中规定的 Meraki云服务使用期限或 (2) 使用权终止日期。
2.3.其他使用条件您同意仅根据思科 Meraki 网站上提供的规范使用硬件和思科技术，并且您（而不是思科 Meraki）全权负责对您的 Meraki 云服务帐户实施管理控制。
2.4.遵守法律如果思科 Meraki 检测到您以违反法律的方式使用硬件或思科技术，在通过电子邮件向您发出书面通知后，该硬件和/或思科技术可能会从您的 Meraki 云服务帐户中删除。
思科梅拉奇 Z系列远程办公网关说明书
Z-Series Product Highlights• 4 GbE ports for printers, phones and other wired devices• 1 PoE-enabled port for VoIP phones and other powered devices• Dual-concurrent 802.11ac Wave 2 radios with up to 1.3 Gbps data rate• Auto VPN for intelligent site-to-site VPN connectivity • 802.1x port authentication for wireddevices• Layer 7 application traffic shaping andprioritization• Layer 3 firewall to separate corporatedata from personal traffic• Up to 4 SSIDs with integrated enterprisesecurity and personal / guest access• Optional desk stand• Self-configuring, plug-and-playdeployment• Ideal for telecommuters using VoIP andremote applications• Sleek, low profile design• Built-in 100 Mbps CAT 3 LTEconnectivity (Z3C)Fast, Reliable Connectivity for the Modern TeleworkerThe Cisco Meraki Z-Series teleworker gateway is an enterprise class firewall, VPN gateway and router. Each model offers five gigabit ethernet ports and wireless for connectivity. Each model is designed to securely extend the power of Meraki cloud managed networking to employees, IT staff, and executives working from home.Using Meraki’s proven and highly scalable Auto VPN technology, ad-ministrators can deploy network services including VoIP and remote endpoints with automatic, zero-touch provisioning. Additionally the Z-series provides secure wired and wireless access, and increases end-user productivity through Layer 7 traffic shaping.All models feature a high-performance stateful firewall, support for VLANs, inter-VLAN routing, and isolation to segregate corporate data from recreational traffic. The Z-series offers the latest in wireless per-formance with 802.11ac Wave 2 technology with MU-MIMO support to provide reliable and high speed network access for most demand-ing business applications and latest devices.Z-Series and Meraki Cloud Management: A Powerful ComboAll Meraki devices are managed via the Meraki cloud, with an intui-tive browser-based interface. Since the Z-series is self-configuring and managed over the web, you can rapidly deploy at remote loca-tions without any assistance from end-users.Meraki Cloud services monitor all devices 24x7 and deliver real-time alerts if any device encounters a problem. Remote diagnostics tools enable real-time troubleshooting through any web browser. New features and enhancements are delivered seamlessly over the web, so you never have to manually download software updates or worry about missing security patches.Meraki Z-Series CLOUD MANAGED TELEWORKER GATEWAYZ3Z3Celeworker with VoIP or PoE, IoT, and M2Meleworker with VoIP or PoE, IoT, and M2MUp to 5 devices Up to 5 devices100 Mbps Accessories1 Requires separate cellular modemDesk Stand (sold separately)50W Power Adapter Spare Power Cord (sold separately)Auto VPNLeveraging Meraki’s cloud architecture, VPN tunnels to HQ or the data center can be enabled via a single click without any command-line configurations or multi-step key permission setups. Meraki’s patent-pending Auto VPN technology automatically tunnels, hole punches, sets up route tables, and establishes the IPsec connections, completely eliminating the complexity seen in traditional site-to-site VPN solutions.Application-aware traffic shapingThe Z-Series includes an integrated layer 7 packet inspection,classification, and control engine, enabling you to set QoS policies based on traffic type. Prioritize your mission critical applications like VoIP or remote desktop, while setting limits on recreational traffic, e.g., peer-to-peer and video streaming.Simple, powerful security from end to endWith end-to-end VPN encryption, corporate data is always protected. Additionally the Meraki Z-series supports 802.1x wired portauthentication, offering network and endpoint security no matter where the gateway may be deployedSelf-configuring, self-optimizing, self-healingWhen plugged in, the Z-Series automatically connects to the Meraki cloud, downloads its configuration, and joins your network. In case of WAN IP address changes, the Z-Series self heals by re-establishing the site-to-site VPN tunnels using the new IP address. Also, if asupported SIM card is installed or a 3G/4G modem is connected and primary WAN uplink connectivity fails, the Z-Series will automatically failover to cellular.Industry-leading cloud managementMeraki’s award-winning cloud management architecture unifies WAN, LAN, and wireless management under a web based dashboard, and scales easily from small deployments to large, multi-site deployments with tens of thousands of devices. The Meraki dashboard provides intuitive yet powerful role-based administration, firmware updates, configuration changes, email alerts, and easy to audit change logs.AUTO CONFIGURING SITE-TO-SITE VPNAPPLICATION VISIBILITY AND CONTROLMULTI-SITE MANAGEMENT VIA THE MERAKI CLOUDSpecificationsPerformanceFirewall Throughput - 100 MbpsVPN Throughput - 50 MbpsRecommended for 5 clients or fewerInterfacesWAN interface: 1x GbELAN interfaces: 4x GbEPoE: 1 x 802.3af enabled port1x USB 2.0 port for 3G / 4G connectivity1 x CAT 3 LTE modem for cellular connectivity (Z3C only)Network and Security ServicesStateful firewall, 1:1 NAT, DMZAuto (site-to-site IPsec) VPNClient VPN (IPsec L2TP), limit 2 authorized users (with Meraki-hosted authentication only) Automatic Layer 3 failover (including VPN connections)Application level (Layer 7) traffic analysis and shapingMultiple WAN IP, PPPoE, NATVLAN support and DHCP services802.1x wired port authenticationStatic routingUser and device quarantineIntegrated Wireless4 SSIDs2x 802.11a/b/g/n/ac (2.4Ghz or 5 Ghz), 2x2 MU-MIMO with 2 spatial streamsMax data rate - 1.3 Gbps4xinternaldipoleantennas(gain:***********,4dBi@5GHz)WPA2-PSK authenticationRegulatory: FCC (US), IC (Canada), CE (Europe), C-Tick (Australia/New Zealand), RoHSMonitoring and ReportingThroughput, connectivity monitoring and email alertsDetailed historical per-port and per-client usage statisticsApplication usage statisticsOrg-level change logs for compliance and change managementVPN tunnel and latency monitoringNetwork asset discovery and user identificationPeriodic emails with key utilization metricsSyslog integrationLTE traffic and performance (Z3C only)Remote DiagnosticsLive remote packet captureReal-time diagnostic and troubleshooting toolsAggregated event logs with instant searchManagementManaged via the web using the Meraki Cloud ControllerSingle pane of glass management of wired and wireless networksZero-touch remote deployment (no staging needed)Automatic firmware upgrades and security patchesCentralized policy managementOrg-level two-factor authentication and single sign-onRole based administration with change logging and alertsIntegrated Cellular (Z3C only)LTE bands: 2, 4, 5, 13, and 17 (North America). 1, 3, 7, 8, and 20 (Worldwide*) 100 Mbps CAT 3 LTEAdditional regulatory information: PTCRB (US), RCM (ANZ, APAC), GCF (EU)Z3 & Z3C Environmental SpecificationsPower: 50W (54 V / 0.92 A), external power supply includedOperating temperature: 32°F to 104°F (0°C to 40°C)Humidity: 5 to 95% non-condensingDesktop or wall mount (all standard mounting hardware included) Kensington lock hard pointRegulatoryFCC (US)CB (IEC)CISPR (Australia/New Zealand)PTCRB (US)RCM (Australia/New Zealand, Asia Pacific)GCF (EU)WarrantyFull lifetime hardware warranty with next-day advanced replacement included. * Z3C not available in JapanIncluded in the BoxOrdering GuideTo place an order for an Z-Series teleworker gateway, pair a specific hardware model with a single license (which includes cloud services, software upgrades and support). For example, to order a Z3 with a 3-year license, order an Z3-HW with LIC-Z3-ENT-3YR. Lifetime warranty with advanced replacement is included on all licensed hardware at no additional cost.1 Z3C not available in Japan2 1 x US power cord will be automatically included with all US orders。
MX 智能管理路由器系列
分支机构网关服务
• 内置DHCP、NAT、QoS和VLAN管理服务。 • Web缓存：加快常用内容的访问速度。 • 负载均衡：将多条WAN链路整合为一个高速接口，并提供 QoS、流量整形和故障切换策略。 • 智能连接监测：自动检测2层和3层中断，并进行快速故障 切换，包括3G/4G USB调制解调器。
Z1 Telecommuter Gateway
Z1 Telecommuter Gateway（远程办公网关）将Cisco Meraki控 制面板和基于远端的集中管理延伸至在家办公的IT员工和管 理人员。 借助Cisco Meraki Auto VPN专利技术，管理员可一键将VoIP、 远程桌面（RDP）等网络服务延伸至远端员工，提供有线和 无线访问，并通过 7层流量整形和优先级划分提高最终用户 的生产力。
Z1TelecommuterGateway
• 1x802.11b/g/n射频， 1x802.11a/n射频， 2x2双重空间串流 MIMO • 使用Cisco Meraki Auto VPN的站点间（IPsec）VPN • 7层应用可视性和流量整形
4
机架式型号
M X84 MX100 MX400 M X 6 00
MX智能管理路由器系列
概述
Cisco Meraki MX 路由器是那些拥有众多分散站点的企业的理想选择。由于MX是100%智能管理解决方案，其安装和远程管理都很 简单。MX拥有一整套网络服务，因此无需多个设备。这些服务包括SD-WAN、7层防火墙、web缓存、4G故障切换和Auto VPN。
基于MERAKI SD-WAN的智能站点间VPN
小型零售分支机构， 小型诊所 50 250 Mbps 25 12 x GbE（2PoE+） N/A N/A 是 桌面/壁挂 10.0” x 5.2” x1”(256mm x 132mm x25mm) 3.37 lb（1.53kg） 90W DC（含） 6W /72 W（MX65） 9W / 79W（MX65W） 32°F － 104°F （0°C － 40°C） 5%－95%
ciscomeraki产品设备介绍与技术基本知识
Tankertanker Design
技术原理—Air Marshal
Tankertanker Design
2 预防机制：air Tankertanker Design marshal ap具备识别非授权ap的功能，这样可以使 得网络管理者在客户连接上这些非授权ap前，采用物理措施移除这些非 授权ap。具体实现如下：
Tankeesign
技术原理—CMX（Connected Mobile Experences)
Tankertanker Design
cmx api
利用cmx 位置分析能够为管理者提供wifi用户的实时位置统计信息和报告
Tankertanker Design
技术原理—CMX
Tankertanker Design
Tankertanker Design
1 通过扫描probe request和802.11数据包来检测开启wifi的设备
iphone设备， 没有连接到互 联网
802.11数据包， 类型为probe request
包含信号 强度和信 道信息
Tankertanker Design
•
meraki设备与云管理中心是通过ssl隧道 连接，利用一个专有协议来管理AP等 meraki设备 将meraki设备部署在网络的边缘是为了 使得用户在上网时产生的数据流量不会 经过云管理中心，从而保证用户数据安 全 meraki将网络管理数据（例如配置，镜 像等）和用户在上网时所产生的数据分 离，仅在ssl隧道上传递网络管理数据， 且传递速度不超过1kb/s，这样保证了 即便在断开与meraki云管理中心的连接 的情况下，只要连接到网络，用户仍然 可以上网。
MR33
MR33
带有专用安全能力和射频管理并集成低功耗蓝牙 信标和扫描无线电的双频 802.11ac Wave 2 2x2:2 MU-MIMO接入点
入门级智能管理802.11ac无线网络
Cisco Meraki MR33是一款支持MU-MIMO的智能管理2x2:2 802.11ac Wave 2接入点。这款产品专门用于办公室、学校、医 院、商店和酒店的下一代部署，具有高性能的企业级安全能 力以及简便的管理。
MCS0/0 MCS1/1 MCS2/2 MCS3/3 MCS4/4 MCS5/5 MCS6/6 MCS7/7 MCS8/8
MCS0/8 MCS1/9 MCS2/10 MCS3/11 MCS4/12 MCS5/13 MCS6/14 MCS7/15
发射功率
21dBm 21dBm 20dBm 20dBm 20dBm 20dBm 20dBm 20dBm
多用户多输入多输出（MU-MIMO） 由于支持802.11ac Wave 2标准，MR33为多客户端提供MUMIMO以实现更高效的传输。MU-MIMO尤其适合多移动设备 环境， 使多个客户端能够同时收到数据。 这提高了总网络性能并且改进最终用户体验。
专用的第三无线电提供24x7无线安全和射频分析 MR33精密的专用双频第三无线电可以连续扫描环境、确认 射频干扰的特性并且包含未授权接入点等无线威胁。无需在 无线安全能力、高级射频分析和服务客户数据之间选择：专 用的第三无线电可以实时提供全部三项能力，并且不会对客 户流量或AP吞吐量产生任何影响。
应用层流量整形 MR33包含集成第七层数据包检查、分类和控制引擎，使您 能够基于流量类型制定服务质量策略。对您的任务核心应用 进行优先性排序，同时设置娱乐流量限制，比如P2P网络和 视频流。
Cisco Meraki MV摄像头系列介绍说明书
INTRODUCING MVWith an unobtrusive industrial design suitable for any setting—and available in indoor (MV21) and outdoor (MV71) models—the MV family simplifies and streamlines the unnecessarily complex world of secu-rity cameras. By eliminating servers and video recorders, MV frees administrators to spend less time on deployment and maintenance, and more time on meeting business needs.High-endurance solid state on-camera storage eliminates the concern of excessive upload bandwidth use and provides robust failoverprotection. As long as the camera has power it will continue to record, even without network connectivity. Historical video can be quicklyOVERVIEWCisco Meraki’s MV family of security cameras are exceptionally simple to deploy and configure. Their integration into the Meraki dashboard, ease of deployment, and use of cloud-augmented edge storage, eliminate the cost and complexity required by traditional security camera solutions.Like all Meraki products, MV cameras provide zero-touch deployment. Using just serial numbers, an administrator can add devices to the Meraki dashboard and begin configuration before the hardware even arrives on site. In the Meraki dashboard, users can easily streamvideo and create video walls for monitoring key areas across multiple locations without ever configuring an IP or installing a plugin.searched and viewed using motion-based indexing, and advanced export tools allow evidence to be shared with security staff or law enforcement easily.Because the cameras are connected to Meraki’s cloud infrastructure, security updates and new software are pushed to customers auto-matically. This system provides administrators with the peace of mind that the infrastructure is not only secure, but that it will continue to meet future needs.Simply put, the MV brings Meraki magic to the security camera world.Product Highlights• Meraki dashboard simplifies operation• Cloud-augmented edge storage eliminates infrastructure • Suitable for deployments of all sizes: 1 camera or 1000+• Intelligent motion indexing with search engine• Built-in video analytics tools• Secure encrypted control architecture• No special software or browser plugins required • Granular user access controlsMV21 & MV71Cloud Managed Security CamerasDatasheet | MV SeriesCUTTING EDGE ARCHITECTUREMeraki's expertise in distributed computing has come to the security camera world. With cloud-augmented edge storage, MV cameras provide ground breaking ease of deployment, configuration, and operation. Completely eliminating the Network Video Recorder (NVR) not only reduces equipment CAPEX, but the simplified architecture also decreases OPEX costs. Each MV camera comes with integrated, ultra reliable, industrial-grade storage. This cutting edge technology allows the system to efficiently scale to any size because the storage expands with the addition of each camera. Plus, administrators can rest easyknowing that even if the network connection cuts out, the cameras will continue to record footage.SCENE BEING RECORDEDON-DEVICE STORAGELOCAL VIDEO ACCESS MERAKIREMOTE VIDEOACCESSOPTIMIZED RETENTIONMV takes a unique approach to handling motion data by analyzing video on the camera itself, but indexing motion in the cloud. This hybrid motion-based retention strategy plus scheduled recording give users the ability to define the video retention method that works best for every deployment.The motion-based retention tool allows users to pick the video bit rate and frame rate to find the perfect balance betweenstorage length and image quality. All cameras retain continuous footage as a safety net for the last 72 hours before intelligently trimming stored video that contains no motion, adding one more layer of security.Determine when cameras are recording, and when they’re not, with scheduled recording. Create schedule templates for groups of cameras and store only what’s needed, nothing more. Turn off recording altogether and only view live footage for selective privacy.Best of all, the dashboard provides a real-time retention estimate for each camera, removing the guesswork.10:00:3010:00:2010:00:25EASY TO ACCESS, EASY TO CONTROLThere is often a need to allow different users access but with tailored controls appropriate for their particular roles. For example, a receptionist needing to see who is at the front door probably does not need full camera configuration privileges.The Meraki dashboard has a set of granular controls for defining what a user can or cannot do. Prevent security staff from changing network settings, limit views to only selected cameras, or restrict the export of video: you decide what is possible.With the Meraki cloud authentication architecture, these controls scale for any organization and support Security Assertion Markup Language (SAML) integration.CONFIGURE VIEW-ONLYISOLATE EVENTS, INTELLIGENTLYMeraki MV cameras use intelligent motion search to quickly find important segments of video amongst hours of recordings. Optimized to eliminate noise and false positives, this allows users to retrospectively zero-in on relevant events with minimal effort.MV's motion indexing offers an intuitive search interface. Select the elements of the scene that are of interest and dashboard will retrieve all of the activity that occurred in that area. Laptop go missing? Drag the mouse over where it was last seen and quickly find out when it happened and who was responsible.8:009:00ANALYTICS, BUILT RIGHT INMV's built-in analytics take the average deployment far beyond just security. Make the most of an MVcamera by utilizing it as a sensor to optimize business performance, enhance public safety, or streamline operational objectives.Use motion heat maps to analyze customer behavior patterns or identify where students are congregating during class breaks. Hourly or daily levels ofgranularity allow users to quickly tailor the tool to specific use cases.All of MV's video analytics tools are built right into the dashboard for quick access. Plus, the standard MV license covers all of these tools, with no additionallicensing or costs required.SIMPLY CLOUD-MANAGEDMeraki's innovative GUI-based dashboardmanagement tool has revolutionized networks aroundthe world, and brings the same benefits to networkedvideo surveillance. Zero-touch configuration, remotetroubleshooting, and the ability to manage distributedsites through a single pane of glass eliminate manyof the headaches security administrators have dealtwith for decades. Best of all, dashboard functionalityis built into every Meraki product, meaning additionalvideo management software (VMS) is now a thing ofthe past.Additionally, features like the powerful drag-and-drop video wall help to streamline remote devicemanagement and monitoring — whether cameras aredeployed at one site, or across the globe.SECURE AND ALWAYS UP-TO-DATECentralized cloud management offers one of the mostsecure platforms available for camera operation. Allaccess to the camera is encrypted with a public keyinfrastructure (PKI) that includes individual cameracertificates. Integrated two-factor authenticationprovides strong access controls. Local video is alsoencrypted by default and adds a final layer of securitythat can't be turned off.All software updates are managed automaticallyfor the delivery of new features and to enable rapidsecurity updates. Scheduled maintenance windowsensure the MV family continues to address users'needs with the delivery of new features as part of theall-inclusive licensed service.Camera SpecificationsCamera1/3.2” 5MP (2560x1920) progressive CMOS image sensor128GB high endurance solid state storageFull disk encryption3 - 10mm vari-focal lens with variable aperture f/1.3 - f/2.5Variable field of view:28° - 82° (Horizontal)21° - 61° (Vertical)37° - 107° (Diagonal)Automatic iris control with P-iris for optimal image quality1/5 sec. to 1/32,000 sec. shutter speed*******************************(color)*************(B&W)S/N Ratio exceeding 62dB - Dynamic Range 69dBHardware based light meter for smart scene detectionBuilt-in IR illuminators, effective up to 30 meters (98 feet)Integrated heating elements for low temperature outdoor operation (MV71 only)Video720p HD video recording (1280x720) with H.264 encodingCloud augmented edge storage (video at the edge, metadata in the cloud)Up to 20 days of video storage per camera*Direct live streaming with no client software (native browser playback)**Stream video anywhere with autotmatic cloud proxyNetworking1x 10/100 Base-T Ethernet (RJ45)Compatible with Meraki wireless mesh backhaul (separate WLAN AP required) DSCP traffic markingFeaturesCloud managed with complete integration into the Meraki dashboardPlug and play deployment with self-configurationRemote adjustment of focus, zoom, and apertureDynamic day-to-night transition with IR illuminationNoise optimized motion indexing engine with historical searchShared video wall with individual layouts supporting multiple camerasSelective export capability with cloud proxyHighly granular view, review, and export user permissions with SAML integration Motion heat maps for relative hourly or day-by-day motion overviewMotion alertsPowerPower consumption (MV21) 10.94W maximum via 802.3af PoE Power consumption (MV71) 21.95W maximum via 802.3at PoE+EnvironmentStarting temperature (MV21): -10°C - 40°C (14°F - 104°F)Starting temperature (MV71): -40°C - 40°C (-40°F - 104°F)Working temperature (MV21): -20°C - 40°C (-4°F - 104°F)Working temperature (MV71): -50°C - 40°C (-58°F - 104°F)In the boxQuick start & installation guideMV camera hardwareWall mounting kit, drop ceiling T-rail mounting hardwarePhysical characterisitcsDimensions (MV21) 166mm x 116.5mm (diameter x height)Dimensions (MV71) 173.3mm x 115mm (diameter x height)Weather-proof IP66-rated housing (MV71 only)Vandal-proof IK10-rated housing (MV71 only)Lens adjustment range:65° Tilt350° Rotation350° PanWeight (MV21) 1.028kg (including mounting plate)Weight (MV71) 1.482kg (including mounting plate)Female RJ45 Ethernet connectorSupports Ethernet cable diameters between 5-8mm in diameterStatus LEDReset buttonWarrantyWarranty (MV21) 3 year hardware warranty with advanced replacementWarranty (MV71) 3 year hardware warranty with advanced replacementOrdering InformationMV21-HW: Meraki MV21 Cloud Managed Indoor CameraMV71-HW: Meraki MV71 Cloud Managed Outdoor CameraLIC-MV-XYR: Meraki MV Enterprise License (X = 1, 3, 5, 7, 10 years)MA-INJ-4-XX: Meraki 802.3at Power over Ethernet injector (XX = US, EU, UK, or AU) Note: Each Meraki camera requires a license to operate* Storage duration dependent on encoding settings.** Browser support for H.264 decoding required.Mounting Accessories Specifications Meraki Wall Mount ArmWall mount for attaching camera perpendicular to mounting surfaceIncludes pendant capSupported Models: MV21, MV71Dimensions (Wall Arm) 140mm x 244mm x 225.4mmDimensions (Pendant Cap) 179.9mm x 49.9mm (Diameter x Height)Combined Weight 1.64kgMeraki Pole MountPole mount for poles with diameter between 40mm - 145mm (1.57in - 5.71in)Can be combined with MA-MNT-MV-1: Meraki Wall Mount ArmSupported Models: MV71Dimensions 156.7mm x 240mm x 68.9mmWeight 1.106kgMeraki L-Shape Wall Mount BracketCompact wall mount for attaching camera perpendicular to mounting surfaceSupported Models: MV21, MV71Dimensions 206mm x 182mm x 110mmWeight 0.917kgOrdering InformationMA-MNT-MV-1: Meraki Wall Mount Arm for MV21 and MV71MA-MNT-MV-2: Meraki Pole Mount for MV71MA-MNT-MV-3: Meraki L-Shape Wall Mount Bracket for MV21 and MV71。
cisco meraki 产品介绍与技术原理
目录 CONTENTS
技术原理 与其他AP对比
与普通AP/AC区别
meraki
其他AP
控制器位置
云端
实体位置
断开与控制器 连接是否可以
使用
管理、部署方 法
是否具有第七 层应用可视化
管理功能
是
否
meraki设备插上电源， 联网，即可在web端 需要实地部署，通过中 通过云端控制器管理、 央控制器管理网络 部署
R2, 2012 Windows Phone 8.1
2、高延展性
云管理平台对所接入AP的数量无限制，每新增一台AP，只需将AP连接至云管理平台， 无需另外配置
3、高可靠性
客户的数据至少在三个数据中心备份 meraki的云管理平台是大规模的分布式架构，提供冗余链路 即便断开与网络的连接，meraki所管理的无线网络仍然能够连接上网
技术原理—应用层的可视化管理
可以看到： 使用者名称 使用的应用类型 使用者的操作系统或者设备 使用者所使用的流量
• meraki根据ip地址，主机名以及端口号范围来确定应用类型 • 对于p2p类型应用流量的分类，采用的方法是：识别到在一系列浮动的ip地址中
的简短的tcp会话（ recognizes short TCP sessions across a fleeting range of IP addresses），就可以识别p2p应用 • 可以使用dscp或者pcp协议给不同应用的流量打标签，从而可以使用qos对用户 使用不同的应用进行限制或者限速 • 用户所使用应用的流量分析和配置信息等将会和网络管理数据一起上传到云管 理中心
技术原理—CMX（Connected Mobile Experences)
cmx api
Meraki MS 系列交换机
3
Meraki 聚合交换产品组合
系列
MS410
部署类型 接口1 上行链路 电源配置 堆叠能力 路由能力
型号
1G光纤聚合
16 / 32 x 1GbE SFP
2 x 10GbE SFP+（MS410-16） 4 x 10GbE SFP+（MS410-32）
模块化 可选冗余PSU（单独出售）
160G物理 + 虚拟
· 灵活堆叠，可扩展配置和提升高性能。 · 智能管理可降低成本和开销，缩短问题解决时间。 · 行业标准特性使其能够轻松整合到现有和混合基础设
施中。 · 基于角色的管理，通过web实现自动安全的固件设计。
Meraki MS的内部
图中显示的是MERAKI MS350-48FP，功能随型号而异。
配备变速风扇的高能效双电源
产品手册 MS 系列交换机
Meraki MS系列交换机
产品手册
概述
Cisco Meraki提供一系列广泛的交换机，这些交换机采用全新 设计，易于管理，而且丝毫不影响我们在传统企业级交换机 上看到的强大性能和灵活性。
管理员通过一个简洁、直观的集中式界面管理Meraki接入与 汇聚交换机，因此减少了花在配置上的时间，增加了用于满 足业务需求的时间。
7
更多资源
Meraki MS220-8 紧凑型系列产品手册 https:///lib/pdf/meraki_datasheet_ms220_compact.pdf Meraki MS225系列产品手册 https:///lib/pdf/meraki_datasheet_ms_225.pdf Meraki MS250系列产品手册 https:///lib/pdf/meraki_datasheet_ms_250.pdf Meraki MS400系列产品手册 https:///lib/pdf/meraki_datasheet_ms400-series.pdf Meraki SFP和堆叠配件手册 https:///lib/pdf/meraki_datasheet_sfp.pdf 成本计算器 https:///buy/cost-calculator
Cisco Meraki MR46 产品说明说明书
MR46 DatasheetHigh-Performance 802.11ax WirelessThe Cisco Meraki MR46 is a cloud-managed 4x4:4802.11ax access point that raises the bar for wireless performance and efficiency. Designed for next-generation deployments in offices, schools, hospitals, shops, and hotels, the MR46 offers high throughput, enterprise-grade security, and simple management.The MR46 provides a maximum of 3.5Gbps* aggregate frame rate with concurrent 2.4 GHz and 5 GHz radios. A dedicated third radio provides real-time WIDS/ WIPS, with automated RF optimization.A fourth integrated radio delivers Bluetooth scanning and beaconing.With the combination of cloud management, high-performance hardware, multiple radios, and advanced software features, the MR46 makes an outstanding platform for the most demanding of uses—including high-density deployments and bandwidth or performance-intensive applications like voice and high-definition video.MR46 and Meraki Cloud ManagementManagement of the MR46 is performed through the Meraki cloud, with an intuitive browser-based interface that enables rapid deployment without time-consuming training or costly certifications. Because the MR46 is self-configuring and managed over the web, it can be deployed at a remote location in a matter of minutes, even without on-site IT staff.24x7 monitoring via the Meraki cloud delivers real-time alerts if a network encounters problems. Remote diagnostic tools enable immediate troubleshooting overthe web so that distributed networks can be managed with a minimum of hassle.The MR46’s firmware is automatically kept up-to-date via the cloud. New features, bug fixes, and enhancements are delivered seamlessly over the web. This means no manual software updates to download or missing security patches to worry about.Product Highlights•4x4:4MU-MIMO 802.11ax• 3.5* Gbps dual-radio aggregate frame rate•24x7 real-time WIDS/WIPS and spectrum analytics via dedicated third radio•Integrated Bluetooth Low Energy beacon•Integrated scanning radio•Enhanced transmit power and receive sensitivity •Integrated enterprise security and guest access •Application-aware traffic shaping•Optimized for voice and video•Self-configuring, plug-and-play deployment•Sleek design blends into office environments•Full-time Wi-Fi location tracking via dedicated third radioFeaturesDual–radio aggregate frame rate of up to 3.5Gbps*The 5 GHz 4x4:4radio and the 2.4 GHz 4x4:4radio offer a combined dual-radio aggregate frame rate of 3.5Gbps*, with up to 2,402Mbps in the 5 GHz band and 1,147Mbps in the 2.4 GHz band. Technologies like transmit beamforming and enhanced receive sensitivity allow the MR46 to support a higher client density than typical enterprise-class access points, resulting in better performance for more clients from each AP.Multi-user multiple input multiple output (MU-MIMO)With support for features of 802.11ax, the MR46 offers MU-MIMO and OFDMA for more efficient transmission to multiple clients. Especially suited to environments with numerous mobile devices, MU-MIMO enables multiple clients to receive data simultaneously. This increases the total network performance and improves the end user experience.Dedicated third radio delivers 24x7 wireless security and RF analyticsThe MR46’s dedicated dual-band scanning and security radio continually assesses the environment, characterizing RF interference and containing wireless threats like rogue access points. There’s no need to choose between wireless security, advanced RF analysis, and serving client data. A dedicated third radio means that all functions occur in real time without any impact to client traffic or AP throughput.Bluetooth Low Energy beacon and scanning radioAn integrated fourth Bluetooth® radio provides seamless deployment of Bluetooth Low Energy beacon functionality and effortless visibility of Bluetooth®devices. The MR46 enables the next generation of location-aware applications while future-proofing deployments, ensuring it’s ready for new customer engagement strategies.Automatic cloud-based RF optimizationThe MR46’s sophisticated and automated RF optimization means there is no need for the dedicated hardware and RF expertise typically required to tune a wireless network. The RF data collected by the dedicated third radio is continuously fed back to the Meraki cloud. This data is then used to automatically tune the channel selection, transmit power, and client connection settings for optimal performance under even the most challenging RF conditions.Integrated enterprise security and guest access* Refers to maximum over-the-air data frame rate capability of the radio chipset, and may exceed data rates allowed by IEEE 802.11ax operation.The MR46 features integrated, easy-to-use security technologies to provide secure connectivity for employees and guests. Advanced security features, such as AES hardware-based encryption and Enterprise authentication with 802.1X and Active Directory integration, provide wired-like security while still being easy to configure. One-click guest isolation provides secure, internet-only access for visitors. PCI compliance reports check network settings against PCI requirements to simplify secure retail deployments.Enterprise mobility management (EMM) and mobile device management (MDM) integrationMeraki Systems Manager natively integrates with the MR46 to offer automatic, context-aware security. Systems Manager’s self-service enrollment helps to rapidly deploy MDM without installing additional equipment, and then dynamically tie firewall and traffic-shaping policies to client posture.Application-aware traffic shapingThe MR46 includes an integrated layer 7 packet inspection, classification, and control engine, enabling the configuration of QoS policies based on traffic type, helping to prioritize mission-critical applications while setting limits on recreational traffic like peer-to-peer and video streaming. Policies can be implemented per network, per SSID, per user group, or per individual user for maximum flexibility and control.Voice and video optimizationsIndustry-standard QoS features are built-in and easy to configure. Wireless multimedia (WMM) access categories, 802.1p, and DSCP standards supportand ensure important applications get prioritized correctly, not only on the MR46, but on other devices in the network. Unscheduled automatic power save delivery (U-APSD) and new target wait time features in 802.11ax clients ensure minimal battery drain on wireless VoIP phones.Self-configuring, self-maintaining, always up-to-dateWhen plugged in, the MR46 automatically connects to the Meraki cloud, downloads its configuration, and joins the appropriate network. If new firmware is required, this is retrieved by the AP and updated automatically. This ensures the network is kept up-to-date with bug fixes, security updates, and new features.Advanced analyticsDrilling down into the details of network usage provides highly granular traffic analytics. Visibility into the physical world can be enhanced with journey tracking through location analytics. Visitor numbers, dwell time, repeat visit rates, and track trends can all be easily monitored in the dashboard and deeper analysis is enabled with raw data available via simple APIs.SpecificationsCategory SpecificationsRadios • 2.4 GHz 802.11b/g/n/ax client access radio• 5 GHz 802.11a/n/ac/ax client access radio• 2.4 GHz and5 GHz dual-band WIDS/WIPS, spectrum analysis, and location analytics radio • 2.4 GHz Bluetooth Low Energy (BLE) radio with beacon and scanning support •Concurrent operation of all four radios•Supported frequency bands (country-specific restrictions apply)•Supported frequency bands (country-specific restrictions apply):◦ 2.412-2.484 GHz◦ 5.150-5.250 GHz (UNII-1)◦ 5.250-5.350 GHZ (UNII-2)◦ 5.470-5.600, 5.660-5.725 GHz (UNII-2e)◦ 5.725 -5.825 GHz (UNII-3)Antenna•Internal antenna (5.4 dBi gain at 2.4 GHz, 6 dBi gain at 5 GHz) 802.11ax, 802.11ac Wave 2 and 802.11nCapabilities•DL-OFDMA**, UL-OFDMA**, TWT support**, BSS coloring**• 4 x 4multiple input, multiple output (MIMO) with four spatial streams•SU-MIMO, UL MU-MIMO**, and DL MU-MIMO support•Maximal ratio combining (MRC) & beamforming•20 and 40 MHz channels (802.11n); 20, 40, and 80 MHz channels (802.11ac Wave 2); 20, 40 and 80 MHz channels (802.11ax)•Up to 1024-QAM on both 2.4 GHz and5 GHz bands•Packet aggregationPower •Power over Ethernet: 42.5- 57 V (802.3at compliant)•Alternative: 12 V DC input•Power consumption: 30W max (802.3at required)•Power over Ethernet injector and DC adapter sold separatelyInterfaces •1x 100/1,000/2.5G BASE-T Ethernet (RJ45)•1x DC power connector (5.5 mm x 2.5 mm, center positive)Mounting •All standard mounting hardware included•Desktop, ceiling, and wall mount capable•Ceiling tile rail (9/16, 15/16 or 1 1⁄2” flush or recessed rails), assorted cable junction boxes •Bubble level on mounting cradle for accurate horizontal wall mountingPhysical Security •Two security screw options (included) (13.5mm long, 2.5 mm diameter, 5mm head)•Kensington lock hard point•Concealed mount plate with anti-tamper cable bayEnvironment •Operating altitude:Up to40,000 feet (12,192 meters)•Operating temperature: 32 °F to 104 °F (0 °C to 40 °C)•Humidity: 5% to 95% non-condensingReliability•Mean time between failure (MTBF): 1,406,652 hrs at +25°C operating temperaturePhysical Dimensions •12.05” x 5.06” x 1.74” (30.6cm x 12.84 cm x 4.43cm), not including desk mount feet or mount plate •Weight: 28.22 oz (800g)** Feature is automatically enabled via firmware update to MR 27+Note:Actual power consumption may vary depending on the AP usage.Security •Integrated layer 7 firewall with mobile device policy management•Real-time WIDS/WIPS with alerting and automatic rogue AP containment with Air Marshal •Flexible guest access with device isolation•VLAN tagging (802.1q) and tunneling with IPsec VPN•PCI compliance reporting•WEP*, WPA, WPA2-PSK, WPA2-Enterprise with 802.1X, WPA3 - Personal**, WPA3 - Enterprise**, WPA3 - Enhanced Open (OWE)***•EAP-TLS, EAP-TTLS, EAP-MSCHAPv2, EAP-SIM•TKIP and AES encryption•Enterprise mobility management (EMM) and Mobile device management (MDM) integration •Cisco ISE integration for guest access and BYOD posturingQuality of Service •Advanced power save (U-APSD)•WMM access categories with DSCP and 802.1p support •Layer 7 application traffic identification and shapingMobility •PMK, OKC, and802.11r for fast layer 2 roaming •Distributed or centralized layer 3 roamingAnalytics •Embedded location analytics reporting and device tracking•Global layer 7 traffic analytics reporting per network, per device, and per applicationLED Indicators• 1 power/booting/firmware upgrade statusRegulatory •RoHS•For additional country-specific regulatory information, please contact Meraki salesWarranty•Lifetime hardware warranty with advanced replacement includedOrdering Information •MR46-HW: Meraki MR46cloud managed 802.11ax AP•MA-PWR-30W-XX: Meraki AC adapter for MR series (XX = US/EU/UK/AU)•MA-INJ-4-XX: Meraki gigabit 802.3at power over Ethernet injector (XX = US/EU/UK/AU)•MA-INJ-5-XX: Meraki multigigabit 802.3at power over Ethernet injector (XX = US/EU/UK/AU)•Note: Meraki access point license required*Feature can be enabled by contacting support**Feature supported on firmware MR 27+ and can be made available on MR 26; seethe WPA3article for more information*** Feature will be made available via a future software updateCompliance and Standards*Feature can be enabled by contacting support; see the Hotspot 2.0article for more informationContext and Comparisons802.11ax, 802.11ac Wave 2, and 802.11n CapabilitiesMR36MR44MR46MR56DL-OFDMA, UL-OFDMA, TWT DL-OFDMA, UL-OFDMA, TWT DL-OFDMA, UL-OFDMA, TWT DL-OFDMA, UL-OFDMA, TWTsupport, BSS coloring support, BSS coloring support, BSS coloring support, BSS coloring2 x 2 multiple input, multiple output (MIMO) with two spatial streams 2.4 GHz: 2 x 2 multiple input,multiple output (MIMO) with twospatial streams5 GHz: 4 x 4 multiple input, multipleoutput (MIMO) with four spatialstreams4 x 4 multiple input, multiple output(MIMO) with four spatial streams8 x 8 multiple input, multiple output(MIMO) with eight spatial streamson 5 GHz4 x 4 multiple input, multiple output(MIMO) with four spatial streams on2.4 GHzMaximal ratio combining (MRC) and beamforming Maximal ratio combining (MRC)and beamformingMaximal ratio combining (MRC)and beamformingMaximal ratio combining (MRC)and beamformingSU-MIMO, UL MU-MIMO,and DL MU-MIMO support SU-MIMO, UL MU-MIMO,and DLMU-MIMO supportSU-MIMO, UL MU-MIMO,and DLMU-MIMO supportSU-MIMO, UL MU-MIMO,and DLMU-MIMO support20 and 40 MHz channels (802.11n); 20, 40, and 80 MHz channels (802.11ac wave 2); 20, 40 and 80 MHz channels (802.11ax)20 and 40 MHz channels (802.11n);20, 40, and 80 MHz channels(802.11ac wave 2); 20, 40 and 80MHz channels (802.11ax)20 and 40 MHz channels (802.11n);20, 40, and 80 MHz channels(802.11ac wave 2); 20, 40 and 80MHz channels (802.11ax)20 and 40 MHz channels(802.11n); 20, 40, and 80 MHzchannels (802.11ac wave 2); 20, 40and 80MHz channels (802.11ax)Up to 1024-QAM on both 2.4 GHz and 5 GHz bands Up to 1024-QAM on both 2.4 GHzand 5 GHz bandsUp to 1024-QAM on both 2.4 GHzand 5 GHz bandsUp to 1024-QAM on both 2.4 GHzand 5 GHz bandsPacket aggregation Packet aggregation Packet aggregation Packet aggregation PowerMR36MR44MR46MR56Power over Ethernet: 37 - 57 V (802.af compliant)Power over Ethernet: 42.5 - 57 V (802.3at)or37 - 57 V (802.3af)- low power mode **Power over Ethernet: 42.5 - 57V (802.3at compliant)Power over Ethernet: 42.5 - 57V (802.3at compliant)Alternative: 12 V DC input Alternative: 12 V DC input Alternative: 12 V DC input Alternative: 12 V DC inputPower consumption: 15W max (802.3af)Power consumption: 30W max (802.3at)or15W max (802.3af) - low power mode **Power consumption: 30W max(802.3at required)Power consumption: 30W max(802.3at required)Power over Ethernet injector and DC adapter sold separately Power over Ethernet injector and DC adaptersold separatelyPower over Ethernet injectorand DC adapter sold separatelyPower over Ethernet injectorand DC adapter sold separatelyInterfacesMR36MR44MR46MR561x 10/100/1000 BASE-T Ethernet (RJ45)1x 100/1000/2.5G BASE-T Ethernet (RJ45)1x 100/1000/2.5G BASE-T Ethernet (RJ45)1x 100/1000/2.5G/5G BASE-T Ethernet (RJ45)1x DC power connector (5.5 mm x 2.5 mm, center positive)1x DC power connector (5.5 mm x 2.5 mm, center positive)1x DC power connector (5.5 mm x 2.5 mm, center positive)1x DC power connector (5.5 mm x 2.5 mm, center positive)Physical DimensionsMR36MR44MR46MR569.84” x 4.72” x 1.42” (25 cm x 12cm x 3.6 cm), not including desk mount feet or mount plate 12.05" × 5.06" × 1.74" (30.6 cm ×12.84 cm × 4.43 cm), not including desk mount feet or mount plate 12.05” x 5.06” x 1.74” (30.6cm x 12.84 cm x 4.43cm), not including desk mount feet or mount plate 12.83” x 5.54” x 1.76” (32.6 cm x 14.079 cm x 4.47 cm), not including desk mount feet or mount plateWeight: 17.35 oz (492 g)Weight: 26.07 oz (739 g)Weight: 28.22 oz (800 g)Weight: 35.27 oz (1 kg)RF Performance Table2.4 GHzOperating Band Operating Mode Data Rate TX Power (conducted)2.4 GHz 802.11b 1 Mb/s 26.02 Mb/s 26.0Note:Actual power consumption may vary depending on the AP usage.** Feature available via firmware update to MR 27.6+. Please see our Low Power Mode article for more information.5.5 Mb/s26.011 Mb/s26.0 2.4 GHz802.11g 6 Mb/s26.09 Mb/s26.012 Mb/s24.018 Mb/s24.024 Mb/s23.036 Mb/s23.048 Mb/s22.054 Mb/s22.0 2.4 GHz802.11n (HT20)MCS026.0MCS126.0MCS224.0MCS324.0MCS424.0MCS522.0MCS622.0MCS721.0 2.4 GHz802.11ac (VHT20)MCS026.0MCS126.0MCS224.0MCS324.0MCS424.0MCS522.0MCS622.0MCS721.0MCS820.0 2.4 GHz802.11ax (HE20)MCS026.0MCS126.0MCS224.0MCS324.0MCS424.0MCS523.0MCS622.0MCS721.0MCS820.0MCS920.0MCS1019.0MCS1119.0 2.4 GHz802.11ac (VHT40)MCS024.0MCS124.0MCS224.0MCS324.0MCS424.0MCS523.0MCS622.0MCS722.0MCS820.5MCS920.0 2.4 GHz802.11ax (HE40)MCS024.0MCS124.0MCS224.0MCS324.0MCS424.0MCS523.0MCS622.0MCS721.5MCS820.5MCS920.0MCS1018.5MCS1118.5 5 GHzOperating Band Operating Mode Data Rate TX Power 5 GHz802.11a 6 Mb/s26.09 Mb/s26.012 Mb/s24.018 Mb/s24.024 Mb/s23.036 Mb/s23.048 Mb/s22.054 Mb/s22.05 GHz802.11n (HT20)MCS026.0MCS126.0MCS224.0MCS324.0MCS523.0MCS622.0MCS722.0 5 GHz802.11n (HT40)MCS024.0MCS124.0MCS224.0MCS324.0MCS424.0MCS523.0MCS622.0MCS722.0 5 GHz802.11ac (VHT20)MCS026.0MCS126.0MCS224.0MCS324.0MCS424.0MCS523.0MCS622.0MCS821.0 5 GHz802.11ac (VHT40)MCS024.0MCS124.0MCS224.0MCS324.0MCS424.0MCS523.0MCS622.0MCS722.0MCS820.5MCS920.0 5 GHz802.11ac (VHT80)MCS024.0MCS124.0MCS224.0MCS324.0MCS424.0MCS522.0MCS622.0MCS819.0MCS919.0 5 GHz802.11ax (HE20)MCS026.0MCS126.0MCS224.0MCS324.0MCS424.0MCS523.0MCS622.0MCS722.0MCS821.0MCS921.0MCS1019.0MCS1119.0 5 GHz802.11ax (HE40)MCS024.0MCS124.0MCS224.0MCS324.0MCS523.0MCS622.0MCS721.5MCS820.5MCS920.0MCS1018.5MCS1118.5 5 GHz802.11ax (HE80)MCS024.0MCS124.0MCS224.0MCS324.0MCS424.0MCS522.0MCS622.0MCS720.0MCS819.0MCS919.0MCS1017.0MCS1117.0 Signal Coverage Patterns5 GHz - Wireless2.4 GHz - Wireless2.4 GHz - Bluetooth®2.4 GHz - Scanning5 GHz - ScanningInstallation GuideFor instructions on how to install and configure MR46 access points,please refer to the MR46 Installation Guide.。
Cisco Meraki MS420云管理10G聚合交换机概述说明书
OverviewThe Cisco Meraki MS420 is the world’s first cloud-managed 10 Gigabit Ethernet aggregation switch bringing the benefits of the cloud: simplified management, reduced complexity, network wide visibility and control, and lower cost for campus deployments. Expanding Cloud Management to the CampusCisco Meraki aggregation switches extend Meraki’s cloud management to campus deployments. Just like our access switches, these 10 Gigabit Ethernet aggregation switches are built from the ground up to be easy to manage without compromising any of the power and flexibility traditionally found in enterprise-class switches. Meraki switches are managed through an elegant, intuitive cloud interface, rather than a cryptic command line. To bring up a Meraki switch, just plug it in; there’s no need for complicated configuration files — or pre-staging. Industry-Leading Cloud ManagementCloud management has a number of benefits that make it easier to build campus networks:• Centralized management that allows you to manage your entire Meraki network stack from campus aggregation to your access layer (wireless APs, switches, firewalls).• Virtual stacking: manage up to tens of thousands of ports from a single pane of glass.• Layer 7 OS, client, and hostname fingerprinting.• E-mail and SMS (text) alerts upon power loss, downtime, or configurationchanges.• Role-based administration and automatic, scheduled firmware upgrades over the web.• Regular feature updates and enhancements delivered on demand from the Meraki cloud.• No staging deploymentsCisco Meraki MS Cloud Managed 10 Gigabit Ethernet Aggregation SwitchMeraki switches feature high-end hardware features, including:• Compact, 1RU design for space-constrained environments • Up to 960 Gbps of non-blocking switching capacity• Field-replaceable, hot-swappable power supplies• Field-replaceable, hot-swappable fans• Front-to-back cooling• 10/100/1000 RJ-45 management port• Low power consumption and shallow rack depth, which enable flexible deployment Full Enterprise Feature SetMeraki switches include all of the traditional Ethernet features found on the highest end products, including:• Quality-of-Service (QoS) to prioritize mission critical traffic such as voice and video• IEEE 802.1X support for port based network access control• MAC-based RADIUS auth and MAC whitelisting• Voice VLAN support for simplified VoIP deployments• Port Mirroring to monitor network traffic• DHCP snooping to prevent users from adding unauthorized DHCP servers on the network• IGMP Snooping to optimize network performance with multicast traffic• Link Aggregation Control Protocol (LACP) for high-capacity trunking, stacking, and increased availability• Broadcast storm protection, spanning tree, BPDU guard, root guard, and other safeguards to guard against misconfigurations and reduce convergence time• Per port VLAN configuration• Multiple administrative roles with sophisticated security policy managementDesigned for a Complete Cloud-Managed Switch NetworkLifetime Warranty with Next-day Advanced ReplacementCisco Meraki MS switches include a limited lifetime hardware warranty that provides next-day advance hardware switch replacement as long as the original purchaser owns the product. Meraki’s simplified software and support licensing model also combines all software upgrades, centralized systems management and phone support under a single, easy-to-understand model.For complete details, please visit /supportAccessories / OpticsThe Meraki MS support pluggable optics for high-speed connectivity. Meraki offers severalstandards-based Gigabit and 10 Gigabit pluggable modules.Supported Meraki accessory modules for MS Switches (no lock-out of third-party optics):Note: Meraki SFPs use LC connectors. Meraki does not guarantee third-party optic and support.Product OptionsSwitch models available (see Specifications for additional details):SpecificationsManagementManaged via the Web via the Meraki cloud management platformIntegrated with Meraki wireless, security appliance, and device management No-touch remote deployment (no staging needed)Detailed historical per-port and per-client usage statisticsDHCP, client, and hostname fingerprintingSNMP and trapsSeamless firmware upgradesRemote DiagnosticsEmail and SMS (text) alerts 1Live remote packet captureAggregated event and configuration change logs with instant searchScalable StackingUnified configuration and monitoring of all switches from the aggregation layer to access layerVirtually Stacking supports thousands of switch ports in a single logical stack for unified management, monitoring, and configurationEthernet Switching Capabilities802.1p Quality of Service prioritization802.1Q VLAN tagging for up to 4095 VLANs802.1D Spanning Tree Protocol (STP) and 802.1w Rapid Spanning Tree Broadcast storm control802.1ab Link Layer Discovery Protocol (LLDP) and Cisco Discovery Protocol (CDP) 802.3ad Link aggregation with up to 8 ports per aggregateIGMP snooping for multicast filteringCisco Discovery Protocol (CDP)128K MAC Forwarding Table CapacityLayer 3 capabilitiesStatic routingDHCP helperDHCP serverOpen shortest path first (OSPF v2)Warm spare for L3 gateway redundancyAutomatic DHCP failover in warm spare mode PerformanceNon-blocking fabric960 Gbps switching capacity on the MS420-48480 Gbps switching capacity on the MS420-241.2 microsecond latencyInterfaces on MS420-24-HW24x 1000/10GbE SFP/SFP+1x 10/100/1000 RJ45 Management portInterfaces on MS420-48-HW48x 10GbE SFP+/SFP1x 10/100/1000 RJ45 Management portPowerPower input: 100 - 240 VAC, 47-63 Hz (2 x 400WAC PSU)Power consumption at idle: 45W / Full load: 175WEnvironmentOperating temp: 0C to 40CMountingRack-mountable with included rack mount hardwareFront-to-back airflowPhysical dimensionsWeight: 18.1 lb. (8.18kg) for MS420-48)Size: 17.3” (w) x 18.6” (d) x 1.8” (h) (44x 47.3x4.5 cm)RegulatoryCSA (US)IC (Canada)CE (Europe)C-Tick (Australia/New Zealand)RoHSWarrantyFull lifetime hardware warranty with next-day advanced replacement included1 Requires carrier-supported email to SMS gateway.Model MTBF MS420-24225,540 MS420-48203,102。
Cisco Meraki MR74产品说明说明书
General purpose industrial / outdoor 802.11ac Wave 2 wirelessThe Cisco Meraki MR74 is a four-radio, cloud-managed 2x2 MIMO 802.11ac Wave 2access point. Designed for general purpose, next-generation deployments in harshoutdoor locations and industrial indoor conditions, the MR74 offers performance,enterprise-grade security, and intuitive management.The MR74 delivers a maximum 1.3 Gbps* aggregate frame rate with concurrent 2.4GHz and 5 GHz radios. A dedicated third radio provides real-time WIDS/WIPS withautomated RF optimization. A fourth radio delivers seamless Bluetooth Low Energy(BLE) scanning and Beaconing.The combination of cloud management, 802.11ac, full-time RF environmentscanning, and an integrated Bluetooth Low Energy radio delivers the highthroughput, reliability, and flexibility required by the most demanding businessapplications like voice and high-definition streaming video, even in the most harshoutdoor environments.MR74 and Meraki Cloud Management: A Powerful CombinationThe MR74 is managed through the Meraki cloud, an intuitive browser-basedinterface that enables rapid deployment across multiple sites without the need fortime-consuming training or costly certifications. Since the MR74 is self-configuringand managed over the web, it can be deployed at a remote location in a matter ofminutes, even without on-site IT staff.24x7 monitoring via the Meraki cloud delivers real-time alerts if the networkencounters problems. Remote diagnostics tools enable immediate troubleshootingso that distributed networks can be managed with a minimum of hassle.The MR74’s firmware is always kept up to date from the cloud. New features, bugfixes, and enhancements are delivered seamlessly over the web, meaning nomanual software updates to download or missing security patches to worry about. Product Highlights• Ideal for outdoor and industrial indoor environments• 2x2:2 802.11ac, 1.3 Gbps aggregate dual-band data rate• 24x7 real-time WIPS/WIDS and spectrum analytics via dedicated third radio• Integrated Bluetooth Low Energy (BLE) Beaconing and scanning radio • Forms point-to-point links with optional sector antennas • Self-healing, zero-configuration mesh• Integrated enterprise security and guest access• Application-aware traffic shaping• Self-configuring, plug-and-play deploymentMR74Dual-band 2x2 MIMO 802.11ac Wave 2 access point with separateradios dedicated to security, RF Management, and Bluetooth*Refers to maximum over-the-air data frame rate capability of the radio chipset, and may exceed data rates allowed by IEEE Std 802.11ac-compliant operation.FeaturesDual-radio aggregate data rate of up to 1.3 Gbps*An 867 Gbps 5 GHz 2x2:2 802.11ac radio and a 400 Mbps 2.4 GHz radio offer a combined aggregate dual-band throughput of 1.3 Gbps. Technologies like transmit beamforming and enhanced receive sensitivity allow the MR74 to support a higher client density than typical enterprise-class outdoor access points, resulting in fewer required APs for a given deployment. Band steering further enhances overall throughput, moving 5 GHz-capable clients to the 5 GHz radio and maximizing capacity in the 2.4 GHz range for older 802.11b/g clients.Rugged industrial designThe MR74 is designed and tested for salt spray, vibration, extreme thermal conditions, shock and dust and is IP67-rated, making it ideal for extreme environments. Despite its rugged design, MR74 has a low profile and is easy to deploy.Multi User Multiple Input Multiple Output (MU-MIMO)The MR74 offers MU-MIMO (an 802.11ac Wave 2 standard) for efficient transmission to multiple clients. Especially suited for environments with numerous mobile devices, MU-MIMO enables multiple clients to receive data simultaneously. This increases the total network performance and improves the end user experience. Bluetooth Low Energy Beaconing and scanningAn integrated fourth radio for Bluetooth Low Energy (BLE) provides seamless deployment of BLE Beaconing functionality and effortless visibility of BLE client devices within range of the network. The MR74 enables the next generation of location-aware applications while future-proofing your deployment for new user engagement strategies.24x7 wireless security and RF analyticsThe MR74’s dedicated dual-band scanning and security radio continually assesses the environment, characterizing RF interference and automatically containing wireless threats like rogue access points. There’s no need to choose between wireless security, advanced RF analysis, and serving client data: a dedicated third radio means that all three occur in real-time, without any impact to client traffic or AP throughput. Integrated enterprise security and guest accessThe MR74 features integrated, easy-to-use security technologies to provide secure connectivity for employees and guests alike. Advanced security features such as AES hardware-based encryption and WPA2-Enterprise authentication with 802.1X and Active Directory integration provide wire-like security while still being easy to configure. One-click guest isolation provides secure, Internet-only access for visitors.Application-aware traffic shapingThe MR74 includes an integrated layer 7 packet inspection, classification, and control engine, enabling you to set QoS policies based on traffic type. Prioritize your mission critical applications, while setting limits on recreational traffic, e.g., peer-to-peer and video streaming. Importantly, controls can be implemented per network, per SSID, per user group, or per individual user. Advanced AnalyticsDrill down into the details of your network usage with highly granular traffic analytics. Extend your visibility into the physical world: View visitor numbers, dwell times, repeat visit rates, and compare trends. Fully customize your analysis with simple APIs. High performance meshThe MR74’s advanced mesh technologies, like multi-channel routing protocols and multiple gateway support, make it possible to cover hard-to-wire areas and improve network resilience. In the event of a switch or cable failure, the MR74 will automatically revert to mesh mode.Self-configuring, self-optimizing, self-healingWhen plugged in, the MR74 automatically connects to the Meraki cloud, downloads its configuration, and joins the appropriate network. If new rmware is required, it is retreived by the AP and updated automatically. This ensures the network is maintained with bug fixes, security updates, and new features managed for you.Recommended Use CasesOutdoor coverage for corporate campuses, educational institutions, metro Wi-Fi, and parks• Weather-resistant Wi-Fi delivery in open spaces• Monetizeable hotspots with built-in splash pages Indoor coverage for industrial areas (e.g.,warehouses, manufacturing facilities)• Reliable coverage for scanner guns,security cameras, and POS devices• High speed-access for iPads, tabletsand laptopsZero-touch point-to-point links• Build a long-distance bridge betweentwo networks• Two MR74s can establish a long rangelink using high-gain antennas*Refers to maximum over-the-air data frame rate capability of the radio chipset, and may exceed data rates allowed by IEEE Std 802.11ac-compliant operation.MR74 Tx / Rx Tables 2.4 GHzMR74 Tx / Rx Tables5 GHzSpecificationsRadios2.4 GHz 802.11b/g/n client access radio5 GHz 802.11a/n/ac client access radio2.4 GHz & 5 GHz WIDS/WIPS, spectrum analysis, and location analytics radio 2.4 GHz Bluetooth Low Energy (BLE) radio with Beacon and BLE scanning support Concurrent operations of all four radiosSupported frequency bands (country-specific restrictions apply):2.412-2.484 GHz5.150-5.250 GHz (UNII-1)5.250-5.350 GHZ (UNII-2)5.470-5.600, 5.660-5.725 GHz (UNII-2e)5.725 -5.825 GHz (UNII-3)802.11ac and 802.11n Capabilities2 x 2 multiple input, multiple output (MIMO) with two spatial streamsSU-MIMO and MU-MIMO supportMaximal ratio combining (MRC) & Beamforming20 and 40 MHz channels (2.4Ghz), 20, 40, and 80 MHz channels (5Ghz)Up to 256 QAM on both 2.4 GHz and 5 GHz bandsPacket aggregationPowerPower over Ethernet: 37 - 57 V (802.3af compatible)Power consumption: 11 W max (802.3af)Power over Ethernet injector sold separatelyMountingMounts to walls and vertical poles.Mounting hardware includedPhysical SecuritySecurity screw includedEnvironmentOperating temperature: -40 °F to 131 °F (-40 °C to 55 °C)Humidity: 5 to 95% non-condensingIP67 environmental ratingPhysical Dimensions10” x 6.2” x 2.6” (256 mm x 158 mm x 65 mm)Weight: 2.4 lbs. (1.09 kg)Interfaces1x 100/1000Base-T Ethernet (RJ45)Four external N-type female antenna connectors SecurityIIntegrated layer 7 firewall with mobile device policy managementReal-time WIDS/WIPS with alerting and automatic rogue AP containment with Air Marshal Flexible guest access with device isolationVLAN tagging (802.1Q) and tunneling with IPSec VPNPCI compliance reportingWEP, WPA, WPA2-PSK, WPA2-Enterprise with 802.1XEAP-TLS, EAP-TTLS, EAP-MSCHAPv2, EAP-SIMTKIP and AES encryptionEnterprise Mobility Management (EMM) & Mobile Device Management (MDM) integra-tion)Quality of ServiceAdvanced Power Save (U-APSD)WMM Access Categories with DSCP and 802.1p supportLayer 7 application traffic identification and shapingMobilityPMK, OKC, and 802.11r for fast Layer 2 roamingDistributed or centralized layer 3 roamingLED Indicators1 power/booting/firmware upgrade statusRegulatoryRoHSFor additional country-specific regulatory information, please contact Meraki salesWarranty1 year hardware warranty with advanced replacement includedOrdering InformationMR74-HW Meraki MR74 Cloud Managed 802.11ac APMA-INJ-4-XX Cisco Meraki 802.3at Power over Ethernet Injector (XX = US, EU, UK or AU) MA-ANT-20 Meraki Dual-Band Omni AntennasMA-ANT-21 Meraki 5 GHz Sector AntennaMA-ANT-23 Meraki 2.4 GHz Sector AntennaMA-ANT-27 Meraki Dual-Band Sector AntennaMA-ANT-25 Meraki Dual-Band Patch AntennaNote: Meraki Enterprise license required.。
Cisco Meraki的网络创新：云端管理的网络解决方案
Cisco Meraki的网络创新：云端管理的网络解决方案Cisco Meraki是一家网络解决方案提供商，专注于通过云端管理的方式来改变现代网络的构建与管理方法。
通过创新的技术和高效的系统，Cisco Meraki已经在业界树立了自己的声誉。
本文将介绍Cisco Meraki所带来的网络创新以及其云端管理的网络解决方案。
首先，Cisco Meraki以其独特的云端管理系统引领了网络的新时代。
通过该系统，用户可以从任何地点，使用任何设备，随时随地对网络进行实时监控和管理。
这种云管理的特点使得网络管理员可以更加方便地进行网络管理和维护，无需再受限于特定的地点和设备。
同时，这也为跨地区和跨国企业提供了更灵活和高效的网络管理方式。
无论是学校、企业还是政府机构，都能够通过Cisco Meraki的云端管理系统实现网络的智能化和自动化。
其次，Cisco Meraki的网络创新在于其出色的安全性和可扩展性。
通过云端管理系统，Cisco Meraki能够快速检测和应对网络中的安全威胁。
它能够自动分析流量，识别并应对潜在的网络攻击和恶意行为。
这种自动化的安全性能大大提高了网络的安全性，并减轻了网络管理员的负担。
此外，Cisco Meraki的网络解决方案还具有很高的可扩展性，能够满足不同规模企业的网络需求。
无论是小型企业还是大型企业，Cisco Meraki的解决方案都能够提供高质量的网络服务。
此外，Cisco Meraki还具有智能化的网络管理功能。
通过云端管理系统，用户可以实时监控网络设备的状态和性能指标。
同时，该系统还能够自动化配置和优化网络设备，减少了网络管理员的工作量。
此外，通过云端管理系统，网络管理员还可以远程诊断和解决网络故障，大大提高了网络的可靠性和稳定性。
这种智能化的网络管理功能使得网络管理员能够更专注于业务需求和创新，而不是繁琐的管理工作。
最后，Cisco Meraki还致力于提供用户友好的用户界面和强大的技术支持。
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
—by 梁晓宇
目录 CONTENTS
技术原理 与其他AP对比
meraki架构
ap自动从云管理 中心下载配置文 件
产品特点
1、配置简单
管理者只需登录meraki的管理界面，即可在云端配置AP，可以在多种平台管理无线 网络，目前支持的平台有： Apple iPad, iPod Touch, and iPhone (iOS 5 or higher) Android (2.2 or higher), including Amazon’s Kindle Fire Mac OS X (10.5 or higher) Windows Pro 7, 8, 8.1, 10, Vista, XP (Service Pack 3 or higher), Server 2008,
技术原理—Air Marshal
2 预防机制：air marshal ap具备识别非授权ap的功能，这样可以使 得网络管理者在客户连接上这些非授权ap前，采用物理措施移除这些非 授权ap。具体实现如下：
产生大量这 三种类型的 数据包，用 来冒充非授 权ap,从而 迫使已经连 接上非授权 ap的客户 断开与其连 接
技术原理—应用层的可视化管理
可以看到： 使用者名称 使用的应用类型 使用者的操作系统或者设备 使用者所使用的流量
• meraki根据ip地址，主机名以及端口号范围来确定应用类型 • 对于p2p类型应用流量的分类，采用的方法是：识别到在一系列浮动的ip地址中
的简短的tcp会话（ recognizes short TCP sessions across a fleeting range of IP addresses），就可以识别p2p应用 • 可以使用dscp或者pcp协议给不同应用的流量打标签，从而可以使用qos对用户 使用不同的应用进行限制或者限速 • 用户所使用应用的流量分析和配置信息等将会和网络管理数据一起上传到云管理 中心
使用下列参数用来分析用户
技术原理—CMX 3 cmx api将从meraki的云管理中心传递所收集到的数据，传递给指定的服务
器
cmx api
技术原理—CMX
4
cmx 位置分析的隐私保护：由于收集到的原始数据包含有
客户的mac地址，为了不泄露客户隐私，一旦通过cmx
api下载这些数据，云管理中心对用户的mac地址做一次
8ห้องสมุดไป่ตู้2.11数据包， 类型为probe request
包含信号 强度和信 道信息
技术原理—CMX
2 云管理中心收到数据后，所有ap所接收到的数据将会聚合，聚合之后所有设
备的数据将会经过一系列的计算并会对其分类，用于之后的实时显示
根据wifi信号强度来判断路人和访客
根据所访问时间来区分路人和访客
技术原理—CMX
4、高安全性
用户流量不会上传到云管理中心 符合(PCI / HIPAA compliant）认证
技术原理—cloud management
云管理中心
•
•
ssl隧道，使用 802.1x/radius 认证
•
meraki设备与云管理中心是通过ssl隧道 连接，利用一个专有协议来管理AP等 meraki设备 将meraki设备部署在网络的边缘是为了 使得用户在上网时产生的数据流量不会 经过云管理中心，从而保证用户数据安 全 meraki将网络管理数据（例如配置，镜 像等）和用户在上网时所产生的数据分 离，仅在ssl隧道上传递网络管理数据， 且传递速度不超过1kb/s，这样保证了 即便在断开与meraki云管理中心的连接 的情况下，只要连接到网络，用户仍然 可以上网。
技术原理—CMX（Connected Mobile Experences)
cmx api
利用cmx 位置分析能够为管理者提供wifi用户的实时位置统计信息和报告
技术原理—CMX
1 通过扫描probe request和802.11数据包来检测开启wifi的设备
iphone设备， 没有连接到互 联网
哈希运算，使得用户mac地址不能被识别出
技术原理—Air Marshal
air marshal是一个WIPS（Wireless Intrusion Prevention System)平台，用来保障meraki无线接入的安全
1、监视和警告功能
air marshal会在2.4Ghz和5Ghz信道上扫描附近的未授权访问点，并形成一 个列表，这个列表也将会发给网络管理员。marshal会给特定的客户打上标 签，通过监视客户的源mac地址来跟踪它们的流量，如果发现客户的数据帧 并不是来自内部的网络，那么就会给网络的管理者发送警告邮件
R2, 2012 Windows Phone 8.1
2、高延展性
云管理平台对所接入AP的数量无限制，每新增一台AP，只需将AP连接至云管理平台， 无需另外配置
3、高可靠性
客户的数据至少在三个数据中心备份 meraki的云管理平台是大规模的分布式架构，提供冗余链路 即便断开与网络的连接，meraki所管理的无线网络仍然能够连接上网
目录 CONTENTS
技术原理 与其他AP对比
与普通AP/AC区别
谢谢观看！我对 meraki技术的 理解仍然很浅薄， 希望多多指正