Skip to main content
Cisco Meraki Documentation

MX650 Datasheet

The network performance benchmarks listed in the KB are target numbers based on initial testing and can change on further testing.


The Meraki MX650 is a Security & SD-WAN Appliance designed to provide VPN Concentration services for large VPN topologies. It is ideal for network administrators who demand both ease of deployment and a state-of-the-art feature sets. The Meraki dashboard allows for simple and easy deployment of the MX650 with minimal preconfiguration in almost any location.

Includes 1x dedicated WAN 25G SFP28 port. LAN Ports include 1x 25G SFP28, 2x 10G SFP+, 8x SFP 1GbE ports. The MX650 is ready for deployment in a variety of enterprise environments. MX650 appliances provide the following features:

Currently the MX650 device's supported deployment model is one-armed VPN Concentrator mode where a single 25G SFP28 Uplink is enabled. 



Supported Features

VPN Concentrator Mode

Traffic Analytics (DPI, NBAR)
Client Details Reporting

Intrusion Detection and Prevention (IPS)

Layer 3 Firewall Rules


Context and Comparisons  

  MX250 MX450 MX650
Maximum Site-to-Site VPN Throughput 3.5 Gbps 4.5 Gbps 25 Gbps
Advanced Security Throughput 3.5 Gbps 7 Gbps 16 Gbps
Recommended maxmimum concurrent site-to-site VPN tunnels  1,000 1,500 10,000
Recommended Device Count 2,000 10,000 50,000

Technical Breakdown  



Currently the MX650 device's supported deployment model is one-armed VPN Concentrator mode where a single 25G SFP28 Uplink is enabled. 


  • 2x SFP28 / 25 Gigabit Ethernet port for the WAN Uplink

  • 2x SFP+ / 10 Gigabit Ethernet LAN Ports

  • 8x SFP / 1 Gigabit Ethernet LAN Ports

  • 1x RJ45 Console Port

  • 1x RJ45 Management Interface

Throughput and Capabilities 

Recommended use case

VPN Headend / VPN Concentrator with up to 50,000 users


Max site-to-site VPN throughput 25 Gbps
Max concurrent site-to-site VPN tunnels  10,000
Max throughput with all advanced security features

16 Gbps

Recommended VPN Clients 50,000
Recommended concurrent site-to-site 10,000


Mount Type

Rack mount


(h x d x w)

To be announced


12.5 lbs

Input operating voltage

85 to 264 Vac

47 to 63 Hz

PSU model number


Power load (idle/max)

To be announced

Operating temperature

32° to 104°F

(0° to 40°C)


10 to 85% non-condensing  


Accessory Description
PWR-CH1-250WAC 1x Meraki MX650 power supply unit (PSU)
MA-PWR-CORD-US 1x AC power cable, U.S. plug


1x AC power cable, EU plug


1x AC power cable, UK plug


1x AC power cable, AU plug


1X AC power cable, BR plug



Optional: Rack mount kit. (Not included with MX650)

Compatible Fiber Transceiver Modules 

Note: Please refer to the Meraki SFP datasheet for additional information about the SFP accessories

In addition to the above, the following SFP modules are supported on the MX650:

  • SFP-25G-SR-S
  • SFP-10/25G-CSR-S
  • SFP-10/25G-LR-S
  • SFP-H25G-CUxx
  • SFP-25G-SL


MX Warranty coverage periods are as follows:

Product Warranty Period Warranty Information
MX650 Lifetime Full lifetime hardware warranty with next-day advanced replacement included.
MX650 Accessories 1 Year

The following are considered accessories:

SFP Modules, all mounting kits and stands, interface modules, additional power cords

Additional warranty information can be found on the Return Policy and Requesting a RMA page of the Cisco Meraki website. 

If your Cisco Meraki device fails and the problem cannot be resolved by troubleshooting, contact support to address the issue. Once support determines that the device is in a failed state, they can process an RMA and send out a replacement device free of charge. In most circumstances, the RMA will include a pre-paid shipping label so the faulty equipment can be returned.

In order to initiate a hardware replacement for non-functioning hardware that is under warranty, you must have access to the original packaging the hardware was shipped in. The original hardware packaging includes device serial number and order information, and may be required for return shipping.

Meraki MX650 devices have been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC rules. A digital device that is marketed for use in a residential environment notwithstanding use in commercial, business and industrial environments.


Common Event Log Messages  

Common event logs exist for security appliance events. As such, no specific MX650 event log entries are required at this time.

For more general information about navigating the Event Log and the types of Events that could be expected please check out our Event Log documentation

  • Was this article helpful?