Product Profile: Cisco Meraki MX64

Published 01/09/2019 10:43 AM   |    Updated 01/09/2019 12:45 PM
The cloud-managed Cisco Meraki MX64 security appliance provides network protection and management capabilities for a small office branch or department with up to 50 devices. The Software-Defined Wide Area Network (SD-WAN) technology lets you control network traffic priorities through the Meraki cloud hub.
 
Manage your network security and settings through one of the required license options. You can subscribe to the standard Enterprise license or Advanced Security license. 
 

Meraki MX64 specifications

 
  • Dimensions: 9.4 x 5.2 x 1 inches
  • Weight: 3.09 pounds
  • 18-watt power supply
 

Meraki MX64 networking features

 
  • 200 Mbps stateful firewall throughput
  • 70 Mbps Virtual Private Network (VPN) throughput
  • Client & Auto VPN
  • Active Directory integration
  • User policies
 

Meraki MX64 router connectivity

 
  • (1) 1000Base-T RJ-45 (WAN) port
  • (4) 1000Base-T RJ-45 ports
  • (1) USB 2.0 port for 3G/4G failover
 

Meraki MX64 features

 
  • Layer7 application visibility & traffic shaping
  • Cloud-based management
  • URL web filtering & safe search
  • Zero-touch, automatic deployments
 

Frequently asked questions — functionality

 
Q: Does Meraki MX64 support Wi-Fi? 
A: No, this security appliance does not have Wi-Fi capabilities, but the MX64W and other MX series models do. 
 
Q: How many devices can Meraki MX64 support?
A: Up to 50 clients, or devices, can connect to the Meraki MX64. The appliance can also have up to 25 concurrent VPN tunnels for both WAN and LAN use.
 
Q: What is SD-WAN?
A: An SD-WAN is a software-defined wide area network that automatically adjusts network settings to ensure reliable connectivity for devices and applications when bandwidth availability and conditions change. Administrators can create traffic priority settings through the SD-WAN interface, so critical systems can stay online without the need for manual involvement.
 
Q: What does it mean for the Meraki MX64 to have UTM capabilities?
A: UTM, or Unified Threat Management, solutions are devices that serve as a single source of information security. The Cisco Meraki MX64 appliance provides multiple safeguarding functions to ensure network protection. With stateful firewall, Auto VPN, identity-based policies and more, the Cisco Meraki MX64 can protect an entire branch or department within your business. 
 
Q: What does Layer7 application visibility and traffic shaping do?
A: Layer7 application visibility allows you to create bandwidth policies that block or prioritize certain applications. For example, you could block social media sites or prioritize cloud-sharing services.
 
Q: What does Active Directory integration do? 
A: When you integrate Cisco Meraki MX64 with Microsoft Active Directory, you can apply network standards, such as rules and restrictions, through group policies on Active Directory. You must have one of the following setup scenarios enabled in order for Active Directory integration to work: 
 
  • Your domain controller is configured to a Virtual LAN (VLAN) on the MX64.
  • Your domain controller exists in a subnet with its own static route.
  • You can access the domain controller through your VPN.
 

Frequently asked questions — configuration


Q: How do I set up the Meraki MX64?
A: All Meraki MX devices require a static IP address and logging in to the web service on your PC. You can set up the static IP address and connect your Meraki MX64 to your WAN through these five steps:
 
  1. Plug an Ethernet cable from into one of the LAN ports on the back of the Meraki MX64.
  2. Open a web browser and navigate to the built-in web service at http://setup.meraki.com. You don’t need an internet connection for this step. Log in by typing the serial number of your Meraki MX64 as the username and leaving the password blank. 
  3. Under the Local status tab, select Uplink configuration. Then, choose Static as the IP Assignment.
  4. Fill out the required IP address, subnet mask, default gateway IP and DNS server information.
  5. Connect the device to your upstream circuit and wait a few minutes for the MX64 to negotiate a Dynamic Host Configuration Protocol (DHCP). Once the WAN is turned on, the internet LED 1 on the front of the unit will display green.
 
Q: Can the Meraki MX64 have dual WANs?
A: Yes. In the Uplink configuration menu under the Local status tab, you can switch between LAN and internet for the LAN4 port.
 
Q: How do I configure my Meraki MX64 with my VLAN?
A: If you’re connecting your Meraki MX64 to an Ethernet port that’s working as a trunk port, you’ll have to enter the VLAN ID. Select VLAN tagging and then Use VLAN tagging. Fill out the values of your VLAN ID. 
 
Q: What is a trunk port? 
A: A trunk port is an upstream Ethernet connection, or port, that serves as the spoke connected to a central hub that makes up a network. The trunk port can support multiple VLANs and will tag each VLAN, allowing traffic to be assigned with its VLAN as it passes through the switch. Administrators have control over which VLANs going through a trunk port are allowed to pass through the network, providing more control over network security. 
 
Q: How do I factory-reset the Merkai MX64?
A: Resetting your Meraki MX64 to default factory settings will clear the appliance’s static IP address, DHCP lease pool and configurations. On the back of the device between the internet and power ports, press the small button labeled Reset using a paperclip or something similar. Hold the button for 10–15 seconds. After the device is reset, it may take up to 10 minutes to reboot and download the latest configuration from the Meraki dashboard. 
 

Frequently asked questions — compatibility

 
Q: Are other Meraki MX models available?
A: Yes, Insight offers a variety of Meraki MX series models. The medium- and large-branch models can serve more clients and deliver larger throughput. A W next to the model number indicates the appliance is Wi-Fi-enabled. Here’s a breakdown of the available Meraki MX models: 
 
Small branch up to 50 clients)
 
 
Medium branch
 
  • MX84 (up to 200 clients) 
  • MX100 (up to 500 clients) 
 
Large branch, campus/VPN concentrator
 
  • MX250 (up to 2,000 clients) 
  • MX450 (up to 10,000 clients) 
 
Virtual appliances
 
  • vMX100 (supported by Amazon Web Services and Microsoft Azure)
 
Q: Does the Meraki MX64 come with accessories?
A: Yes. Along with the managed security appliance, you get two Cat 6 Ethernet cables, an 18-watt power supply and rack-mount screws. 
 

Frequently asked questions — licensing

 
Q: Is a Meraki license required for the MX64?
A: Yes, all Meraki devices need a Meraki license in order to operate. A license provides centralized management and control of the device through the Meraki cloud. You need a license at all times for each Meraki device you have online; otherwise, the appliance won’t work. 
 
Q: What are the term lengths for a Meraki MX64 license?
A: You can pair a Meraki MX64 with an Enterprise or Advanced Security license that will run for one, three or five years. 
 
Q: What’s the difference between an Enterprise license and an Advanced Security license?
A: The Enterprise license is the standard option for the Meraki MX64 and enables all of its core features, including Auto VPN and stateful firewall. An Advanced Security license adds security features such as content filtering, Google SafeSearch and YouTube for Schools, intrusion and detection prevention, advanced malware protection and Cisco Threat Grid. Cisco Threat Grid, however, requires a Cisco Threat Grid cloud subscription. 
 

Ready to streamline network management?

 
Get details about pricing and buying options on insight.com.
 

Is this answer helpful?