Meraki(Cloud Managed Network) Solution Overview

Clay OstlundSr. Systems Engineer

June - 2014

Affordable. Managed. Scalable.

Who is Meraki?

Meraki Overview

Who is Meraki?

Meraki Sales in 2012: ~100M

About Meraki

Leader in cloud networking: 20,000+ customer networks deployedFounded in 2006 at MIT - tradition of innovation and R&D

350 employees worldwide

100% Cloud-managed edge and branch networking portfolioComplete line of wireless, switching, security, WAN optimization,

and mobile device management products

Now part of CiscoIncreasing R&D investment in Meraki products

Leveraging Cisco’s reach to bring Meraki to new marketsNo near-term changes planned to pricing, licenses, product roadmap, etc.

Meraki did ~94M in revenue in 2012, Cisco purchased Meraki for 1.2B in 2013.

How Meraki Works

Step 1:Pick Hardware

Step 2: Cloud Subscription & Warranty Support

Cloud License1yr, 3yr, 5yr

Step 3: Install

Install

Warranty

Step 4: Dashboard

Management

Hardware

Meraki “MS“Ethernet Switches

Meraki “SM”Mobile Device Management

Meraki “MR”Wireless LAN

Meraki “MX “Security Appliances

Spatial streaming is primarily observed in wireless communications where multiple-input-multiple-output (MIMO)

is being used. When wireless signals are being transmitted or received simultaneously in a MIMO environment, the signals being transmitted by the various antennae are multiplexed by using different spaces within the same spectral channel. These

spaces are known as spatial streams.

Spatial Stream / Antenna Design

Fundamentals of Spatial Streams

Transmit (x) Receive : Spatial Streams (3x3:2)

Hardware – “MR”MR 34 MR 26 MR 18 MR 12

Max Data Rate 1.75 Gbps 900 Mbps 600 Mbps 300 MbpsRadio Design MIMO:Spatial

Stream 3x3:3 3x3:3 2X2:2 2X2:2

Radio2.4 Ghz – 802.11ac/n5.0 Ghz – 802.11ac/n

WIDS/WIPS Radio2.4 Ghz – 802.11b/g/n5.0 Ghz – 802.11a/nWIDS/WIPS Radio

2.4 Ghz – 802.11b/g/n5.0 Ghz – 802.11a/nWIDS/WIPS Radio

2.4 Ghz – 802.11b/g/n

Air Marshal (WIPS) ✔ ✔ ✔ ✔

Secure Guest Wifi ✔ ✔ ✔ ✔

Layer 7 Application Controls ✔ ✔ ✔ ✔

BandSelect ✔ ✔ ✔ ✔

BYOD Support ✔ ✔ ✔ ✔

Mesh Routing ✔ ✔ ✔ ✔

RF Optimization ✔ ✔ ✔ ✔

Data Uplink (Mbps) 10/100/1000 10/100/1000 10/100/1000 10/100/1000

Hardware – “MR”

MR 66 MR 62

Max Data Rate 600 Mbps 300 MbpsRadio Design

MIMO:Spatial Stream 2x2:2 2x2:2

Radio 2.4 Ghz – 802.11ac/n5.0 Ghz – 802.11ac/n 2.4 Ghz – 802.11b/g/n

Air Marshal (WIPS) ✔ ✔

Secure Guest Wifi ✔ ✔

Layer 7 Application Controls ✔ ✔

BandSelect ✔ ✔

BYOD Support ✔ ✔

Mesh Routing ✔ ✔

RF Optimization ✔ ✔

Data Uplink (Mbps) 10/100/1000 10/100/1000

Features – “MR”o Automated RF Optimization:

Performance Monitoring Interference detection Adaptive configuration for optimal

performance

Presence Analytics: Intelligent Aps collect probe statistics Location-based insights drive revenue Presence API gives unlimited flexibility

o Application QOS: Deep packet inspection Traffic shaping policies Cloud-based Application Signatures

o Air Marshal:o Real-time detection and containmento Heuristic threat classification engineo Intuitive remediation with customizable

alarmso Bonjour Gatekeeper:

o Integrated Bonjour Support

Seamless Mobility: Seamless roaming Fast roaming for voice and high speed

mobility Inter-subnet mobility

Mesh Routing: Auto-configuring mesh network Multi-channel routing protocols Self-healing network with per-flow

optimization

CMX Location AnalyticsHeatMap

Hardware

Meraki “MS“Ethernet Switches

Meraki “SM”Mobile Device Management

Meraki “MR”Wireless LAN

Meraki “MX “Security Appliances

Hardware – “MS” – Layer 2 Access

MS220-48 MS220-24 MS220-8

Number of Ports 48 Port - 10/100/1000 24 Port - 10/100/1000 8 Port - 10/100/1000

Available POE(+) Budget 370W / 740W 370W 124W

Layer 7 Application Controls ✔ ✔ ✔

Uplinks 4 x SFP (1 GIG) 4 x SFP (1 GIG) 2 x SFP (1 GIG)

Layer 2 Support ✔ ✔ ✔

Layer 3 Support

Remote Live Tools ✔ ✔ ✔

Quality Of Service ✔ ✔ ✔

Enterprise Security (802.1X) ✔ ✔ ✔

Limited Lifetime Warranty ✔ ✔ ✔

Hardware – “MS” – Layer 3 Access

MS320-48 MS320-24

Number of Ports 48 Port - 10/100/1000 24 Port - 10/100/1000

Available POE(+) Budget 370W / 720W 370W

Layer 7 Application Controls ✔ ✔

Uplinks 4 x SFP+ (10 GIG) 4 x SFP+ (10 GIG)

Layer 2 Support ✔ ✔

Layer 3 Support ✔ ✔

Remote Live Tools ✔ ✔

Quality Of Service ✔ ✔

Enterprise Security (802.1X) ✔ ✔

Limited Lifetime Warranty ✔ ✔

Hardware – “MS” - Aggregation

MS420-24 MS420-48

Number of Ports 24 Port SFP/SFP+ 48 Port SFP/SFP

Available POE(+) Budget N/A N/A

Layer 7 Application Controls ✔ ✔

Uplinks N/A N/A

Layer 2 Support ✔ ✔

Layer 3 Support ✔ ✔

Remote Live Tools ✔ ✔

Quality Of Service ✔ ✔

Enterprise Security (802.1X) ✔ ✔

Limited Lifetime Warranty ✔ ✔

Features – “MS”o Virtual Stacking:

Scalable Management Architecture Stack without proprietary cables Zero-Touch Deployments

o Voice Optimization: Performance for Voice and Video Intelligent Power management Optimized for rapid VoIP deployment

o Layer 7 Visibility: Packet processing engine Deep packet inspection Cloud-based application signatures

Hardware

Meraki “MS“Ethernet Switches

Meraki “SM”Mobile Device Management

Meraki “MR”Wireless LAN

Meraki “MX “Security Appliances

Hardware – “MX”

MX400 MX100 MX80 MX60W MX60 Z1 (Teleworker)

Stateful Firewall Throughput 1 Gbps 500 Mbps 250 Mbps 100 Mbps 100 Mbps 50 Mbps

VPN Throughput 325 Mbps 225 Mbps 125 Mbps 50 Mbps 50 Mbps 10 Mbps

WAN Optimization

Cache1 TB SATA 1 TB SATA 1 TB SATA 100 MB 100 MB N/A

Interfaces8 x GbE

8 x GbE (SFP)4 x 10 GbE (SFP+)

8 x GbE2 x GbE (SFP) 5 x GbE 5 × GbE

1 × 802.11n 5 x GbE 1 x GbE WAN4 x GbE LAN

• Integrated Intrusion Detection (IDS)

• Device Aware Access Controls (BYOD) (Layer 7)

• Category-based content filtering• Load Balance WAN connections• 3G/4G backup WAN connectivity• WAN Acceleration/Optimization

Hardware – “MX”o Next Generation Firewall:

Layer 7 traffic classification and control Intrusion detection engine Identity based and device-aware security

o Auto VPN: Auto-provisioning IPSec VPN Automatically configured VPN parameters Flexible tunneling, topology and security

policies

o 3G / 4G Failover: Cellular support for maximum uptime Seamless, automatic failover with traffic

prioritization

o WAN Optimization: Universal data store with de-duplication WAN link compression

o Content Filtering: Identity-based filtering policies

Subscription/License – “MX”

Hardware

Meraki “MS“Ethernet Switches

Meraki “SM”Mobile Device Management

Meraki “MR”Wireless LAN

Meraki “MX “Security Appliances

Systems Manager – “SM”

• Systems Manager lets you configure, monitor, and support devices in your organization. 100% cloud based, Systems Manager eliminates costly, complex management appliances and software.

Mobile Device Management (MDM)

Systems Manager – “SM”o Rapid Provisioning:

1:1 BYOD initiatives Deploy network settings and policies

o Remote Live Tools: Universal data store with de-duplication WAN link compression

o Platform Support:

o Application Deployment:o Integration to Apple and Google

App Storeso Deploy MSI and PKG for PC/MAC

o Enterprise Security Enforce Restrictions Deploy Network Settings

o Asset Managemento Locate and track laptops and mobile

devices anywhere in the world

Cloud Value Proposition

o Maintenance & Upgrades (Quarterly Releases): Automatic firmware maintenance New feature implementation Automatic implementation of performance

improvements and enhancementso Monitoring:

Application level (layer 7) monitoring & reporting Performance monitoring

o Technology and Configuration: Extremely easy configuration Fully featured Cloud Managed

Warranty & Maintenance: Case-based support viewable in dashboard Firmware and Software updates/upgrades 24x7 telephone support

Management – Cloud Dashboard

• Self-provisioning for rapid deployment and expansions

• Scalable network-wide monitoring and management tools

• Integrated Wireless, LAN, and WAN management, as well as Mobile Device management

• Seamless over-the-web maintenance, upgrades, monitoring, etc.

Layer 7 - Complete visibility and control

Out of band cloud managementScalable

• Unlimited throughput, no bottlenecks• Add devices or sites in minutes

Reliable• Highly available cloud with multiple datacenters• Network functions even if connection to cloud is interrupted• 99.99% uptime SLA

Secure• No user traffic passes through cloud• Fully HIPAA / PCI compliant (level 1 certified)• 3rd party security audits, daily penetration test

Reliability and security information at meraki.com/trust

Management data (1 kb/s)

WAN

LAN

Live Demo