MX650 Datasheet
The network performance benchmarks listed in the KB are target numbers based on initial testing and can change on further testing.
Overview
The Meraki MX650 is a Security & SD-WAN Appliance designed to provide VPN Concentration services for large VPN topologies. It is ideal for network administrators who demand both ease of deployment and a state-of-the-art feature sets. The Meraki dashboard allows for simple and easy deployment of the MX650 with minimal preconfiguration in almost any location.
Includes 1x dedicated WAN 25G SFP28 port. LAN Ports include 1x 25G SFP28, 2x 10G SFP+, 8x SFP 1GbE ports. The MX650 is ready for deployment in a variety of enterprise environments. MX650 appliances provide the following features:
Currently the MX650 device's supported deployment model is one-armed VPN Concentrator mode where a single 25G SFP28 Uplink is enabled.
Features
| Supported Features |
|
VPN Concentrator Mode |
| Traffic Analytics (DPI, NBAR) |
| Client Details Reporting |
|
Intrusion Detection and Prevention (IPS) |
|
Layer 3 Firewall Rules |
| eBGP |
| AutoVPN |
| IPSec VPN |
Context and Comparisons
| MX250 | MX450 | MX650 | |
|---|---|---|---|
| Maximum Site-to-Site VPN Throughput | 3.5 Gbps | 4.5 Gbps | 25 Gbps |
| Advanced Security Throughput | 3.5 Gbps | 7 Gbps | 16 Gbps |
| Recommended maxmimum concurrent site-to-site VPN tunnels | 1,000 | 1,500 | 10,000 |
| Recommended Device Count | 2,000 | 10,000 | 50,000 |
Technical Breakdown
Interfaces
Note:
Currently the MX650 device's supported deployment model is one-armed VPN Concentrator mode where a single 25G SFP28 Uplink is enabled.
WAN
-
2x SFP28 / 25 Gigabit Ethernet port for the WAN Uplink
LAN
-
2x SFP+ / 10 Gigabit Ethernet LAN Ports
-
8x SFP / 1 Gigabit Ethernet LAN Ports
Management
-
1x RJ45 Console Port
-
1x RJ45 Management Interface
Throughput and Capabilities
| MX650 | |
| Recommended use case |
VPN Headend / VPN Concentrator with up to 50,000 users
|
| Max site-to-site VPN throughput | 25 Gbps |
| Max concurrent site-to-site VPN tunnels | 10,000 |
| Max throughput with all advanced security features |
16 Gbps |
| Recommended VPN Clients | 50,000 |
| Recommended concurrent site-to-site | 10,000 |
Physical
| Mount Type |
Rack mount |
|
Dimensions (h x d x w) |
To be announced |
| Weight |
12.5 lbs |
| Input operating voltage |
85 to 264 Vac 47 to 63 Hz |
| PSU model number |
PWR-CH1-250WAC, |
| Power load (idle/max) |
To be announced |
| Operating temperature |
32° to 104°F (0° to 40°C) |
| Humidity |
10 to 85% non-condensing |
Accessories
| Accessory | Description |
| PWR-CH1-250WAC | 1x Meraki MX650 power supply unit (PSU) |
| MA-PWR-CORD-US | 1x AC power cable, U.S. plug |
|
MA-PWR-CORD-EU |
1x AC power cable, EU plug |
|
MA-PWR-CORD-UK |
1x AC power cable, UK plug |
|
MA-PWR-CORD-AU |
1x AC power cable, AU plug |
|
MA-PWR-CORD-BR |
1X AC power cable, BR plug |
|
C8500L-RM-19-1R C8500L-RM-23-1R |
Optional: Rack mount kit. (Not included with MX650) |
Compatible Fiber Transceiver Modules
Note: Please refer to the Meraki SFP datasheet for additional information about the SFP accessories
In addition to the above, the following SFP modules are supported on the MX650:
- SFP-25G-SR-S
- SFP-10/25G-CSR-S
- SFP-10/25G-LR-S
- SFP-H25G-CUxx
- SFP-25G-SL
Warranty
MX Warranty coverage periods are as follows:
| Product | Warranty Period | Warranty Information |
|---|---|---|
| MX650 | Lifetime | Full lifetime hardware warranty with next-day advanced replacement included. |
| MX650 Accessories | 1 Year |
The following are considered accessories: SFP Modules, all mounting kits and stands, interface modules, additional power cords |
Additional warranty information can be found on the Return Policy and Requesting a RMA page of the Cisco Meraki website.
If your Cisco Meraki device fails and the problem cannot be resolved by troubleshooting, contact support to address the issue. Once support determines that the device is in a failed state, they can process an RMA and send out a replacement device free of charge. In most circumstances, the RMA will include a pre-paid shipping label so the faulty equipment can be returned.
In order to initiate a hardware replacement for non-functioning hardware that is under warranty, you must have access to the original packaging the hardware was shipped in. The original hardware packaging includes device serial number and order information, and may be required for return shipping.
Meraki MX650 devices have been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC rules. A digital device that is marketed for use in a residential environment notwithstanding use in commercial, business and industrial environments.
Troubleshooting
Common Event Log Messages
Common event logs exist for security appliance events. As such, no specific MX650 event log entries are required at this time.
For more general information about navigating the Event Log and the types of Events that could be expected please check out our Event Log documentation.