MX650 Datasheet
The network performance benchmarks listed in the KB are target numbers based on initial testing and can change on further testing.
Overview
The Meraki MX650 is a Security & SD-WAN Appliance designed to provide VPN Concentration services for large VPN topologies. It is ideal for network administrators who demand both ease of deployment and a state-of-the-art feature set. The Meraki dashboard allows for simple and easy deployment of the MX650 with minimal preconfiguration in almost any location.
Includes 1x 25G SFP28 WAN Interface and 1x 10G SFP+ WAN Interface. Includes 1x 25G SFP28 and 1x 10G SFP+ convertible (LAN/WAN) Interfaces. Dedicates LAN interfaces are 8x SFP 1GbE interfaces. The MX650 is ready for deployment in a variety of enterprise environments. MX650 appliances provide the following features:
Features
The MX650 Next Generation VPN Concentrator & Headend Security Appliance leverages Meraki's next generation VPP Network operating system, enabling scale and performance at extreme scale.
As such, not all MX features are available at this time. Features which are not explicitly listed here are not yet available, but will be coming soon by release in subsequent firmware upgrades.
| Routing | Security | Other |
| eBGP | Intrustion Detection and Prevention (IPS/IDS) | Routed Mode |
| iBGP (AutoVPN) | Layer 3 Firewall Rules | Concentrator Mode |
| Static Routing | Layer 7 Firewall Rules | AutoVPN |
| VPN Uplink Policies (SD-VPN) | Content Filtering | IPsec VPN |
| WAN Uplink Policies (SD-WAN) | Network Objects | 1:1 NAT |
| 1:Many NAT | ||
| NAT Overload (Per uplink) | ||
| Client Details Reporting (DPI / SD-AVC / NBAR) |
Context and Comparisons
*Preliminary numbers. Subject to change prior to product launch.
| MX250 | MX450 | MX650 | |
|---|---|---|---|
| Maximum NAT Firewall Throughput | 7.5 Gbps | 10 Gbps | N/A |
| Maximum NGFW Throughput | 3.5 Gbps | 7.5 Gbps | N/A |
| Maximum Site-to-Site VPN Throughput | 3.5 Gbps | 4.5 Gbps | 25 Gbps* |
| Advanced Security Throughput | 3.5 Gbps | 7 Gbps | 16 Gbps* |
| Recommended Device Count | 2,000 | 10,000 | 50,000* |
| Recommended Use Case | SD-WAN & UTM Edge for Large Campus / VPN Concentrator for Large VPN Topologies | SD-WAN & UTM Edge for Large Campus / VPN Concentrator for Large VPN Topologies | Next Generation VPN Concentrator & Headend Security Appliance |
Technical Breakdown
Interfaces
WAN
-
1x SFP28 / 25 Gigabit Ethernet WAN Port
-
1x SFP+ / 10 Gigabit Ethernet WAN port
Convertible (LAN or WAN)
- 1x SFP+ 10 Gigabit Ethernet
LAN
- 1x SFP28 / 25 Gigabit Ethernet
-
8x SFP / 1 Gigabit Ethernet LAN Ports
Management
-
1x RJ45 Console Port
-
1x RJ45 Management Interface
Physical
| Mount Type |
Rack mount |
|
Dimensions (h x d x w) |
To be announced |
| Weight |
12.5 lbs |
| Input operating voltage |
85 to 264 Vac 47 to 63 Hz |
| PSU model number |
PWR-CH1-250WAC, |
| Power load (idle/max) |
To be announced |
| Operating temperature |
32° to 104°F (0° to 40°C) |
| Humidity |
10 to 85% non-condensing |
Accessories
| Accessory | Description |
| PWR-CH1-250WAC | 1x Meraki MX650 power supply unit (PSU) |
| MA-PWR-CORD-US | 1x AC power cable, U.S. plug |
|
MA-PWR-CORD-EU |
1x AC power cable, EU plug |
|
MA-PWR-CORD-UK |
1x AC power cable, UK plug |
|
MA-PWR-CORD-AU |
1x AC power cable, AU plug |
|
MA-PWR-CORD-BR |
1X AC power cable, BR plug |
|
C8500L-RM-19-1R C8500L-RM-23-1R |
Optional: Rack mount kit. (Not included with MX650) |
Compatible Fiber Transceiver Modules
Note: Please refer to the Meraki SFP datasheet for additional information about the SFP accessories
In addition to the above, the following SFP modules are supported on the MX650:
- SFP-25G-SR-S
- SFP-10/25G-CSR-S
- SFP-10/25G-LR-S
- SFP-H25G-CUxx
- SFP-25G-SL
Warranty
MX Warranty coverage periods are as follows:
| Product | Warranty Period | Warranty Information |
|---|---|---|
| MX650 | Lifetime | Full lifetime hardware warranty with next-day advanced replacement included. |
| MX650 Accessories | 1 Year |
The following are considered accessories: SFP Modules, all mounting kits and stands, interface modules, additional power cords |
Additional warranty information can be found on the Return Policy and Requesting a RMA page of the Cisco Meraki website.
If your Cisco Meraki device fails and the problem cannot be resolved by troubleshooting, contact support to address the issue. Once support determines that the device is in a failed state, they can process an RMA and send out a replacement device free of charge. In most circumstances, the RMA will include a pre-paid shipping label so the faulty equipment can be returned.
In order to initiate a hardware replacement for non-functioning hardware that is under warranty, you must have access to the original packaging the hardware was shipped in. The original hardware packaging includes device serial number and order information, and may be required for return shipping.
Troubleshooting
Common Event Log Messages
Common event logs exist for security appliance events. As such, no specific MX650 event log entries are required at this time.
For more general information about navigating the Event Log and the types of Events that could be expected please check out our Event Log documentation.